63a7a80e621d6a956e5651d0d4813a4fccbd7090e95300b5eeb44dc4d564e218a2892676664b55ee662b1bacc0a636d69e686692868aef79ea8db10f71f339aa2b6eab9f0ae5629ee7c6d63a34bca7867d49506f2d679bfc9cce9680eaff629385473b98c52986dc4db53198338cd2a4934fa8bc91a0469e6dde468ad0dbc41253c5e4609f41999a75d4e7b016d71be877843222b52c5af82783da46ff49"], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffff6) 15:10:49 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:10:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0085504, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 643.792538][ T28] audit: type=1804 audit(1594825850.043:875): pid=31366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/823/bus" dev="sda1" ino=15774 res=1 15:10:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc008ae05, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 643.919693][ T28] audit: type=1804 audit(1594825850.173:876): pid=31375 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/678/bus" dev="sda1" ino=15982 res=1 15:10:50 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 644.002442][ T28] audit: type=1804 audit(1594825850.253:877): pid=31377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/678/bus" dev="sda1" ino=15982 res=1 15:10:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x800c5011, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 644.201150][ T28] audit: type=1804 audit(1594825850.453:878): pid=31396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/679/bus" dev="sda1" ino=15982 res=1 15:10:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xa, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:10:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:50 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x122) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0189436, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 15:10:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc018ae85, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 644.827612][ T28] audit: type=1804 audit(1594825851.083:879): pid=31416 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/825/bus" dev="sda1" ino=16178 res=1 15:10:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 644.979062][ T28] audit: type=1804 audit(1594825851.233:880): pid=31430 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/679/bus" dev="sda1" ino=15982 res=1 15:10:51 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000000c0)={0x5, 0xd, 0x16, "8431c1e9bda917befe0d0f7f44c3206c773eca71015114b67d992769bf9b21ac60858c74f615da64461f5fb4dff5542cc6e88330b605a46caf719aef", 0x1e, "d76ac1a45fad3c750e553d338a0b82ff222b7b88acef09f57c011ded2c7ebf8b9293f12ae4fff8f34d2772b7274030ae8dddb92cdb5b8df25283c1cc", 0x8}) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 15:10:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x800c5012, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 15:10:51 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x122) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 15:10:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc020660b, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 15:10:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc034564b, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 15:10:52 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) write(0xffffffffffffffff, &(0x7f00000000c0)="15c4edc03f1df6f84b8e20c1949f0dce827fe331e1b6142d2a5cb91e32ce17d386101241f5716a9016046a06560a0c723056663555e5acf8566010d490a96f483f6ccd951ca2822c3136a6da9629a656be0900b5dc760c10ee98388cc404ec93a03bfcad13bb30ee4207bc345798a336a58ef52e4f2c43e2710cf0250e5588b61645c18f422364d15c9e37b1f3dfd0d6a6bcb70a16e03790118830872c3a54aff30d5cdb1ef03b89ee5327937d98d62dcaea496e6e3792ad6b01a227c264f87c533ee3eec255f014", 0xc8) 15:10:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x8010500c, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x11, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x122) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x3) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x18, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x8010500d, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:53 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) ptrace(0x10, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1d5) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 15:10:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x14d, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x29a, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105013, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 648.101533][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 648.101545][ T28] audit: type=1804 audit(1594825854.353:891): pid=31581 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/682/bus" dev="sda1" ino=15982 res=1 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) dup(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffff6) [ 648.154134][ T28] audit: type=1804 audit(1594825854.403:892): pid=31580 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/682/bus" dev="sda1" ino=15982 res=1 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 15:10:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x300, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x6) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x500, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x80105014, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 15:10:55 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESOCT=r1], 0xc) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) dup(r3) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000000c0)={0x0, {0x6, 0xff7ffff8}}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x10202) sendfile(r6, r4, 0x0, 0x80000000) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 15:10:55 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) dup(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffff6) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) [ 649.155199][ T28] audit: type=1804 audit(1594825855.413:893): pid=31648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/684/bus" dev="sda1" ino=16110 res=1 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 15:10:55 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 15:10:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x600, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480941ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 15:10:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:56 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000000c0)=""/79, &(0x7f0000000000)=0x4f) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 649.920047][ T28] audit: type=1804 audit(1594825856.173:894): pid=31688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/684/bus" dev="sda1" ino=16110 res=1 15:10:56 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000000c0)={0x5, 0xd, 0x16, "8431c1e9bda917befe0d0f7f44c3206c773eca71015114b67d992769bf9b21ac60858c74f615da64461f5fb4dff5542cc6e88330b605a46caf719aef", 0x1e, "d76ac1a45fad3c750e553d338a0b82ff222b7b88acef09f57c011ded2c7ebf8b9293f12ae4fff8f34d2772b7274030ae8dddb92cdb5b8df25283c1cc", 0x8}) [ 650.096576][ T28] audit: type=1804 audit(1594825856.353:895): pid=31700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/685/bus" dev="sda1" ino=16272 res=1 [ 650.122655][ T28] audit: type=1804 audit(1594825856.383:896): pid=31700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/685/bus" dev="sda1" ino=16272 res=1 15:10:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 650.146198][ T28] audit: type=1804 audit(1594825856.383:897): pid=31702 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/831/bus" dev="sda1" ino=16106 res=1 15:10:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x700, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045003, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 650.873979][ T28] audit: type=1804 audit(1594825857.123:898): pid=31732 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/685/bus" dev="sda1" ino=16272 res=1 [ 650.905302][ T28] audit: type=1804 audit(1594825857.163:899): pid=31731 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/685/bus" dev="sda1" ino=16272 res=1 15:10:57 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x5, 0x8}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x82, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r5, 0xeec, 0x81, 0x2acbad79}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r6, 0x1}, 0x8) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r7 = dup(r2) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r7, r8, 0x0, 0x8000fffffff6) 15:10:57 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000000c0)=""/79, &(0x7f0000000000)=0x4f) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 651.080345][ T28] audit: type=1804 audit(1594825857.333:900): pid=31742 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/686/bus" dev="sda1" ino=16272 res=1 15:10:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xa00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045004, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:58 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @mcast1, 0x7fff, 0x4}, 0x20) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:10:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) 15:10:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0xc034564b, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:58 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000000c0)={0x1, 0x0, [], {0x0, @bt={0x5, 0x20, 0x1, 0x0, 0x7, 0x32, 0x1, 0xfffffffc, 0x49, 0x2, 0x0, 0x3f, 0x6, 0x2, 0x5, 0x29, {0x4, 0xfffffff8}, 0xf0}}}) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:10:58 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r1, 0xffffffffffffffff], 0x2}, 0x58) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) 15:10:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:58 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:10:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:10:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) 15:10:59 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffff6) 15:10:59 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:10:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:10:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xb00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 653.157653][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 653.157743][ T28] audit: type=1804 audit(1594825859.413:910): pid=31830 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/689/bus" dev="sda1" ino=16281 res=1 15:10:59 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', r6}) r7 = dup(r2) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r7, r8, 0x0, 0x8000fffffff6) 15:10:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 653.506134][T31849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.569842][ T28] audit: type=1804 audit(1594825859.823:911): pid=31857 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/837/bus" dev="sda1" ino=16110 res=1 15:10:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) 15:11:00 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:00 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f00000000c0)='./bus\x00', 0xdee9, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="f4b6fb19069768d8bb431aac7d63d1d3167dcc074567c377dd501b0126d75aa3038b581f98839861ecd6d064bc4a7251eafdd302673510015e", 0x39}, {&(0x7f0000000140)="f9b569388c5181986cd365e6eae92c9bc8aa00f0d23cdd2ebf888fe24c3a0e7b5e7f0b8874bdd5373e83189566efabf9ebcc2bce651f803c76517e1184f565d4d8ab263740c66b091033f2a33443926989a83338c64b383a7fa08f4cd97a2b98d79bfdfcdaffd1ebec98fdddd4", 0x6d, 0xb42}], 0x1, &(0x7f0000000240)={[{@flock_local='flock=local'}], [{@smackfshat={'smackfshat'}}, {@pcr={'pcr', 0x3d, 0x16}}, {@smackfsfloor={'smackfsfloor'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 653.894376][ T28] audit: type=1804 audit(1594825860.153:912): pid=31869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/689/bus" dev="sda1" ino=16281 res=1 15:11:00 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 653.942342][ T28] audit: type=1804 audit(1594825860.153:913): pid=31869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/689/bus" dev="sda1" ino=16281 res=1 [ 654.118739][ T28] audit: type=1804 audit(1594825860.373:914): pid=31877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/690/bus" dev="sda1" ino=16281 res=1 [ 654.145987][T31877] kAFS: unparsable volume name 15:11:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045007, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:00 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:00 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4002, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffff6) 15:11:00 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 654.649665][ T28] audit: type=1804 audit(1594825860.903:915): pid=31905 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/838/bus" dev="sda1" ino=16110 res=1 15:11:01 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 654.869581][ T28] audit: type=1804 audit(1594825861.123:916): pid=31909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/690/bus" dev="sda1" ino=16281 res=1 15:11:01 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x3072fe, 0x119) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 654.928537][T31911] kAFS: unparsable volume name [ 654.937208][ T28] audit: type=1804 audit(1594825861.173:917): pid=31911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/690/bus" dev="sda1" ino=16281 res=1 15:11:01 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1100, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 655.083660][ T28] audit: type=1804 audit(1594825861.333:918): pid=31919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/691/bus" dev="sda1" ino=16281 res=1 15:11:01 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:01 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f00000000c0)='./bus\x00', 0xdee9, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="f4b6fb19069768d8bb431aac7d63d1d3167dcc074567c377dd501b0126d75aa3038b581f98839861ecd6d064bc4a7251eafdd302673510015e", 0x39}, {&(0x7f0000000140)="f9b569388c5181986cd365e6eae92c9bc8aa00f0d23cdd2ebf888fe24c3a0e7b5e7f0b8874bdd5373e83189566efabf9ebcc2bce651f803c76517e1184f565d4d8ab263740c66b091033f2a33443926989a83338c64b383a7fa08f4cd97a2b98d79bfdfcdaffd1ebec98fdddd4", 0x6d, 0xb42}], 0x1, &(0x7f0000000240)={[{@flock_local='flock=local'}], [{@smackfshat={'smackfshat'}}, {@pcr={'pcr', 0x3d, 0x16}}, {@smackfsfloor={'smackfsfloor'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 655.664569][ T28] audit: type=1804 audit(1594825861.923:919): pid=31946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/839/bus" dev="sda1" ino=16110 res=1 [ 655.671902][T31946] kAFS: unparsable volume name 15:11:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x11) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:02 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x157c, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x12) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:02 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1f, 0xe0, 0x0, @random="bdac1059193c"}, 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000100)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x4, 0xf, 0x900, 0x8, 0x200, 0xeb04}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f00000000c0)={0xffffff09, 0x7ff, 0x8, 0x3ff}, 0x10) 15:11:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x25) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:02 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) 15:11:02 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) 15:11:02 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r5, 0xffffffffffffffff], 0x2}, 0x58) 15:11:02 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) 15:11:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1800, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1f40, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045878, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r5, 0xffffffffffffffff], 0x2}, 0x58) 15:11:03 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x40, 0xfff, 0x5, 0x5, 0x44}, &(0x7f0000000180)=0x14) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) ftruncate(r3, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000000)=0xffffffff) r6 = dup(r4) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8000fffffff6) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0xfff) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r5, 0xffffffffffffffff], 0x2}, 0x58) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:03 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:04 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0045878, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:04 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) 15:11:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x14d) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x1f, @loopback, 0xcc7e}], 0x3c) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) [ 658.197137][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 658.197149][ T28] audit: type=1804 audit(1594825864.454:930): pid=32090 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/694/bus" dev="sda1" ino=16286 res=1 15:11:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa81040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xd5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 15:11:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0085504, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:05 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:05 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x401f, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:05 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf5dffff, 0x40000000, 0x4, r1, 0x0, &(0x7f00000000c0)={0x990a96, 0x80, [], @value=0x3}}) 15:11:05 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x29a) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 659.001071][ T28] audit: type=1804 audit(1594825865.254:931): pid=32126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/694/bus" dev="sda1" ino=16286 res=1 15:11:05 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:05 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) 15:11:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:05 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 659.335281][ T28] audit: type=1804 audit(1594825865.594:932): pid=32165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/695/bus" dev="sda1" ino=16286 res=1 15:11:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc008ae88, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:06 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x300) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4d01, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:06 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240), 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) dup3(r1, 0xffffffffffffffff, 0x80000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r4 = dup2(0xffffffffffffffff, r0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000200)={0x3ff, 0x10004, 0xed, &(0x7f00000000c0)="bdc5f3ae8ca065901d1677f7f573a1d8d16ab9a19b56114106f4da3fbe7a2cbd45d946b3dc32aa7f0083b2ffc3706999dd0e47978e61b1419b7b7d08861acc8d6a40ef8f58188f0826a9816a8b31202b4067a30433b6a870812de03cf0ec0959c7cf35f52e2f79f910ab984bd94abf2e0f11a9e9742a561e987d60c8206714faa64eca1293b2aaa47df920e701d47ccae951a7bfb969d67bc9641a04cf0df698f34d7d9d8af10ffe21aa82e35038122e5bfac6529765659d5f99cec6348f31125f4797d9812f27480675bb6b27b5c2fd4c2d9cfb0dda8dd899e213581386c1bea70fd406622f10799212af24c6"}) r5 = dup(r3) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffff6) 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7c15, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:06 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) [ 660.119867][ T28] audit: type=1804 audit(1594825866.374:933): pid=32165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/695/bus" dev="sda1" ino=16286 res=1 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) inotify_init1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:06 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 660.335172][ T28] audit: type=1804 audit(1594825866.594:934): pid=32224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/696/bus" dev="sda1" ino=15779 res=1 15:11:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc008aeb0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:07 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:07 executing program 4: inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) readlinkat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)=""/65, 0x41) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x10000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=@flushsa={0x340, 0x1c, 0x800, 0x70bd2d, 0x25dfdbfb, {0x2b}, [@policy_type={0xa}, @sec_ctx={0xf1, 0x8, {0xed, 0x8, 0x1, 0x5, 0xe5, "9c0bf51d2ee9e44c0bf2e535fa7168f67de7d39824895008c224cc0139d3992bb7534e133f5f7f0d90e7e0748fa965fa28f3e49adc6b7b7fe0f58ca815680f0e03a2cb95dae2fe55e5b67355cd445ac9c764d156bd48d598395c631e751498760fcbc9b8bec1772fb8ef036e7f52e20887bb26adbcc9ab8ab86b5302a90c9994942e5790e7c239dc79eac2c4f18bfe68800ae86092da63c17bbcf5a08b2198c1bfd823b51fe0994a10f6ff685ae46a62fdffa16bdb253475e9104e22bca4f3e7cf18a11f061fb63123ed0e5a95d46b1d3035fa3c3aa388f9744bfb0b6fc3d2a606ff9271b3"}}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8, 0x18, 0x1}, @migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, [], 0x44}, @in6=@private1={0xfc, 0x1, [], 0x1}, @in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x3c, 0x4, 0x0, 0x3507, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in=@dev, @in=@multicast2, @in=@empty, 0xff, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@loopback, @in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@private0, 0x33, 0x3, 0x0, 0x3503, 0x2, 0xa}, {@in6=@ipv4={[], [], @multicast2}, @in6=@dev={0xfe, 0x80, [], 0x16}, @in=@empty, @in=@local, 0x2b, 0x0, 0x0, 0x3500, 0x2, 0x2}]}, @migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@private0, @in6=@empty, 0xff, 0x3, 0x0, 0x3506, 0x2, 0x2}, {@in=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3503, 0xa, 0xa}, {@in6=@empty, @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3d}, @in6=@loopback, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x340}, 0x1, 0x0, 0x0, 0xc0}, 0x48000) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffff6) 15:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x5000, 0x0) 15:11:07 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7d00, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 661.062066][ T28] audit: type=1804 audit(1594825867.314:935): pid=32253 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/696/bus" dev="sda1" ino=15779 res=1 15:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 661.145841][ T28] audit: type=1804 audit(1594825867.404:936): pid=32261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/697/bus" dev="sda1" ino=16381 res=1 15:11:07 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x9a02, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 661.220963][ T28] audit: type=1804 audit(1594825867.464:937): pid=32261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/697/bus" dev="sda1" ino=16381 res=1 15:11:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0189436, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:07 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX=r0], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffffffffffc0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x30, r4, 0x3) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) 15:11:07 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:07 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x600) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:07 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:08 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 661.730960][ T28] audit: type=1804 audit(1594825867.984:938): pid=32308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/698/bus" dev="sda1" ino=16383 res=1 [ 661.806674][ T28] audit: type=1804 audit(1594825867.984:939): pid=32308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/698/bus" dev="sda1" ino=16383 res=1 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:08 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf5dffff, 0x40000000, 0x4, r1, 0x0, &(0x7f00000000c0)={0x990a96, 0x80, [], @value=0x3}}) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc020660b, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:08 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x0, 0x8}}, 0x20) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:08 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x700) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:11:09 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x900) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf5dffff, 0x40000000, 0x4, r1, 0x0, &(0x7f00000000c0)={0x990a96, 0x80, [], @value=0x3}}) 15:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:11:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x11000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:09 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 663.302058][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 663.302148][ T28] audit: type=1804 audit(1594825869.554:944): pid=32391 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/581/bus" dev="sda1" ino=16278 res=1 15:11:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0481273, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 663.414344][ T28] audit: type=1804 audit(1594825869.674:945): pid=32400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/699/bus" dev="sda1" ino=16380 res=1 15:11:09 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000000c0)) 15:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000b, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 663.492600][ T28] audit: type=1804 audit(1594825869.674:946): pid=32401 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/699/bus" dev="sda1" ino=16380 res=1 15:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x40000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) [ 663.641294][ T28] audit: type=1804 audit(1594825869.894:947): pid=32420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/700/bus" dev="sda1" ino=16384 res=1 [ 663.749766][ T28] audit: type=1804 audit(1594825870.004:948): pid=32424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/700/bus" dev="sda1" ino=16384 res=1 15:11:10 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf5dffff, 0x40000000, 0x4, r1, 0x0, &(0x7f00000000c0)={0x990a96, 0x80, [], @value=0x3}}) 15:11:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) 15:11:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 664.317533][ T28] audit: type=1804 audit(1594825870.574:949): pid=32443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/582/bus" dev="sda1" ino=16382 res=1 [ 664.386404][ T28] audit: type=1804 audit(1594825870.644:950): pid=32424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/700/bus" dev="sda1" ino=16384 res=1 15:11:10 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 664.420944][ T28] audit: type=1804 audit(1594825870.674:951): pid=32424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/700/bus" dev="sda1" ino=16384 res=1 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7d000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 664.716784][ T28] audit: type=1804 audit(1594825870.974:952): pid=32477 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/701/bus" dev="sda1" ino=16376 res=1 15:11:11 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc0481273, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:11 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x3) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 665.493984][ T28] audit: type=1804 audit(1594825871.754:953): pid=32513 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/701/bus" dev="sda1" ino=16376 res=1 15:11:11 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r2], 0x1f) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x81) r6 = dup(r4) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r6, r7, 0x0, 0x8000fffffff6) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:11 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0x1f, @loopback, 0xcc7e}], 0x3c) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:12 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100100, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:12 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:12 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8084fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000580)={0x20, "e3536ed51c68ecae6ee34d2d819a4ad04e0712fdbaf3d2bea77a2863442ee2d2c9587628b2e4cea02886eee83dc38caabaf15827daa9c561b5fad21d1e70c8c5"}) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f00000000c0)='./bus\x00', 0x81, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="4b2d2d47c0ef6a4059f8a8500239d80518f87e954d46ef99ab4f6d2e01c681704fb696993d61275632a8f91984a59f178d6129a649d75888266d4e04b66c1ea79daf27a1b21f497b83f3", 0x4a, 0x5}, {&(0x7f0000000200)="2677c8e5284fee7025454289bbea9bac003c2326b9febc1b10a2da080862e75d9bbcbf5559cd9bfac925f5e53d2b38d5dbeaed8605ddbeaf20f2f227d293e62989960aa7fb8e6f773c9c039715220162615c8f8dfd53db86cc5f82e6f39b39085f696f1c17af9d80adb7b9e20d879890f029d11b223c242c6cfed82cb085a116f449124174b6a99fe1ab25546884a6826c6bd4e9156ad3c59008b881d3c0840a07737e19adee091458ace4a253de0e6d3c65c7c8bd638e9465d9d1c4295e9fdff228797c002fe52117ad3b88dca3f77433d8ba64b322145d", 0xd8, 0xfff}, {&(0x7f0000000180)="d65b86a4d9eb849d7ff0b597fb12cb6095969c7ee69ef3a85e725c0176ef9906852347ad8d794e26a0e47dfa6dd9c8dac2f4b73240306fe4615d58a683b139", 0x3f, 0x1}, {&(0x7f0000000340)="445a29d9601a16d24b5cbfa28bcb4867cd633642503cb07e5af997b0058b8f0a9251e9f94be2503dcd66fca9796a05036ca144e43dea42e7019f65f0bb343d1738cebc595312758261b1736b4df44a69e68100d4d151cd5b349c27a054972334bee1ba87be69e9bd66944c13fdfb9709f702935b0f06a0d03751c9d36400c747ccff2f18167b499f623f3fa78bf01f5d18af727dfc922e6da88adc1e3819", 0x9e, 0x6}, {&(0x7f0000000480)="d2771b3a1ccae0b7c01e88b05b11ad162b492ccf3a5c347b52aa39842493c7e20cf57d37d9b3265512a4fb0429a67913dfa653db107676fb89c28e0e0e2fe5cbab4bc11dc64d4513b1eee771f676a21e55ff85d2477010", 0x57, 0x8}], 0x800000, 0x0) fcntl$addseals(r1, 0x409, 0x8) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x180000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 666.742784][T32583] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 15:11:13 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7d0000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 667.466142][T32621] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 15:11:13 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) pidfd_getfd(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x4, 0xce, 0xa3, 0x1}) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) 15:11:13 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd00700, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 15:11:14 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:14 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x6) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 15:11:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf00000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:14 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 668.407835][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 668.407847][ T28] audit: type=1804 audit(1594825874.664:961): pid=32683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/704/bus" dev="sda1" ino=15781 res=1 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 668.544901][ T28] audit: type=1804 audit(1594825874.804:962): pid=32699 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/705/bus" dev="sda1" ino=15937 res=1 15:11:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:15 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8084fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000580)={0x20, "e3536ed51c68ecae6ee34d2d819a4ad04e0712fdbaf3d2bea77a2863442ee2d2c9587628b2e4cea02886eee83dc38caabaf15827daa9c561b5fad21d1e70c8c5"}) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f00000000c0)='./bus\x00', 0x81, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="4b2d2d47c0ef6a4059f8a8500239d80518f87e954d46ef99ab4f6d2e01c681704fb696993d61275632a8f91984a59f178d6129a649d75888266d4e04b66c1ea79daf27a1b21f497b83f3", 0x4a, 0x5}, {&(0x7f0000000200)="2677c8e5284fee7025454289bbea9bac003c2326b9febc1b10a2da080862e75d9bbcbf5559cd9bfac925f5e53d2b38d5dbeaed8605ddbeaf20f2f227d293e62989960aa7fb8e6f773c9c039715220162615c8f8dfd53db86cc5f82e6f39b39085f696f1c17af9d80adb7b9e20d879890f029d11b223c242c6cfed82cb085a116f449124174b6a99fe1ab25546884a6826c6bd4e9156ad3c59008b881d3c0840a07737e19adee091458ace4a253de0e6d3c65c7c8bd638e9465d9d1c4295e9fdff228797c002fe52117ad3b88dca3f77433d8ba64b322145d", 0xd8, 0xfff}, {&(0x7f0000000180)="d65b86a4d9eb849d7ff0b597fb12cb6095969c7ee69ef3a85e725c0176ef9906852347ad8d794e26a0e47dfa6dd9c8dac2f4b73240306fe4615d58a683b139", 0x3f, 0x1}, {&(0x7f0000000340)="445a29d9601a16d24b5cbfa28bcb4867cd633642503cb07e5af997b0058b8f0a9251e9f94be2503dcd66fca9796a05036ca144e43dea42e7019f65f0bb343d1738cebc595312758261b1736b4df44a69e68100d4d151cd5b349c27a054972334bee1ba87be69e9bd66944c13fdfb9709f702935b0f06a0d03751c9d36400c747ccff2f18167b499f623f3fa78bf01f5d18af727dfc922e6da88adc1e3819", 0x9e, 0x6}, {&(0x7f0000000480)="d2771b3a1ccae0b7c01e88b05b11ad162b492ccf3a5c347b52aa39842493c7e20cf57d37d9b3265512a4fb0429a67913dfa653db107676fb89c28e0e0e2fe5cbab4bc11dc64d4513b1eee771f676a21e55ff85d2477010", 0x57, 0x8}], 0x800000, 0x0) fcntl$addseals(r1, 0x409, 0x8) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1100) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 669.048974][ T28] audit: type=1804 audit(1594825875.304:963): pid=32726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/587/bus" dev="sda1" ino=15783 res=1 [ 669.102133][T32726] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 15:11:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 669.287345][ T28] audit: type=1804 audit(1594825875.544:964): pid=32736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/705/bus" dev="sda1" ino=15937 res=1 [ 669.334257][ T28] audit: type=1804 audit(1594825875.594:965): pid=32739 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/705/bus" dev="sda1" ino=15937 res=1 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:15 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000000c0)=0x20) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 669.547297][ T28] audit: type=1804 audit(1594825875.804:966): pid=32753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/706/bus" dev="sda1" ino=16018 res=1 [ 669.600597][ T28] audit: type=1804 audit(1594825875.854:967): pid=32754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/706/bus" dev="sda1" ino=16018 res=1 15:11:16 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:11:16 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1200) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:16 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 669.982163][ T28] audit: type=1804 audit(1594825876.234:968): pid=308 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/588/bus" dev="sda1" ino=15773 res=1 [ 670.085428][ T28] audit: type=1804 audit(1594825876.284:969): pid=311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/918/bus" dev="sda1" ino=16067 res=1 15:11:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:16 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x40, @local, 0x8ad}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xed62}], 0x68) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) [ 670.287690][ T28] audit: type=1804 audit(1594825876.544:970): pid=32754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/706/bus" dev="sda1" ino=16018 res=1 15:11:16 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x157c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:17 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:17 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x2}]}]}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040808}, 0x80c0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r9, 0xffffffffffffffff], 0x2}, 0x58) 15:11:17 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1f40) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 671.153746][ T352] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 671.226592][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:17 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000200)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x8}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) io_cancel(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x20, r7, &(0x7f00000000c0)="9f093e0e045906468dc13f562c84aa835cd1ff4cdf5b56767ab65d906853288c638adcb8a3bb451b98d75c6c68b1a87a83504e0daf56d56245146fade2669cde94d65160937af4f88944f4fd498e07aaa2e27e2c86d41757f6f0a6c38ad8ab59e8e609395ef5f99353bb4092cac91e6e6580bbae73e6e6717e018a544b53d2e54bda042741530d919ea7e841a03bf7fe1c1d37138e917d50139f7fc5764acf4ab259b24c", 0xa4}, &(0x7f0000000200)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) 15:11:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5035, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x14d, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:17 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r1, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:18 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000200)=0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x8}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) io_cancel(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x20, r7, &(0x7f00000000c0)="9f093e0e045906468dc13f562c84aa835cd1ff4cdf5b56767ab65d906853288c638adcb8a3bb451b98d75c6c68b1a87a83504e0daf56d56245146fade2669cde94d65160937af4f88944f4fd498e07aaa2e27e2c86d41757f6f0a6c38ad8ab59e8e609395ef5f99353bb4092cac91e6e6580bbae73e6e6717e018a544b53d2e54bda042741530d919ea7e841a03bf7fe1c1d37138e917d50139f7fc5764acf4ab259b24c", 0xa4}, &(0x7f0000000200)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x10) 15:11:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x8000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:18 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x1b3402, 0x8) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) r3 = socket(0x2, 0x803, 0xff) mq_open(&(0x7f0000000000)='+]$%\x00', 0x2, 0x110, &(0x7f00000000c0)={0x6, 0x6af8, 0x3ff, 0x8001}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:18 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r1, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xa000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:18 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r1, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:18 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:18 executing program 4: inotify_init1(0x0) clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:18 executing program 4: clone3(&(0x7f0000001300)={0x20020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:18 executing program 4: clone3(0x0, 0x0) 15:11:18 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:19 executing program 4: clone3(0x0, 0x0) 15:11:19 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000500)=ANY=[], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x4, 0x0, "c5728eb32585f39e01b5b56dbefe016a602f0cf5f71ae9d13f985c366027573f8e8b4224d1f67e05638cd7ac1e1c636af3496e49151cd471280090b9be546106619d915b76d68835cc8f1e0033851bb8"}, 0xd8) sendto$inet(r2, &(0x7f0000000240)="80d0e2c0d93d2f92580cb5c4a1fd37f453c1c8ff03", 0x15, 0x4008015, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x8, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x3, 0x1, [0x7fffffff, 0x4, 0x20, 0x7fffffff, 0x20, 0x8, 0x3, 0x76d]}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r5, r6, 0x0, 0x8000fffffff6) 15:11:19 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000002000/0x3000)=nil) r2 = socket(0x2, 0x803, 0xff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0x0, 0x8, {0x9, 0x4, 0x4, 0x101}}, 0x20) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:19 executing program 4: clone3(0x0, 0x0) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb000200, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:11:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:11:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:19 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0], 0x1}, 0x58) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0], 0x1}, 0x58) 15:11:19 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:19 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0], 0x1}, 0x58) [ 673.640604][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 673.640616][ T28] audit: type=1804 audit(1594825879.895:985): pid=536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/711/bus" dev="sda1" ino=16242 res=1 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff], 0x1}, 0x58) 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff], 0x1}, 0x58) 15:11:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff], 0x1}, 0x58) [ 673.913927][ T28] audit: type=1804 audit(1594825880.175:986): pid=553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/712/bus" dev="sda1" ino=15921 res=1 15:11:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:20 executing program 4 (fault-call:0 fault-nth:0): clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:20 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x401f) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) 15:11:20 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) getsockname$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) 15:11:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 674.646279][ T28] audit: type=1804 audit(1594825880.905:987): pid=553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/712/bus" dev="sda1" ino=15921 res=1 15:11:20 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x304, 0x3, 0x3, 0x80, 0x19, @local}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 15:11:21 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x60) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='veth0_macvtap\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x141800, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x82, &(0x7f00000003c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r7, 0xb8}, 0x8) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00008884ffff00a97f14ffffffff0000000000000002ffffffffffffffffffff04012144109ced3127e0ec6a972a0f0cab329a4dfc39ac2a285e226202c8d261411c45ed77893aa1b463b0d71acded01d2972dcdc87fb8ed6e5db4846d77d02e574d3c65d1bd2722d98330d0505d1fc8390b4c911ef3dc23139c6bb65b670e248c07aa35d00dc02283feaf38e986b08f346dca50028c17b48896480bffe77b8e5164b95f660000000000000000"], 0xad) 15:11:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 674.884591][ T28] audit: type=1804 audit(1594825881.145:988): pid=605 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/713/bus" dev="sda1" ino=16242 res=1 [ 674.953149][ T28] audit: type=1804 audit(1594825881.215:989): pid=606 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/713/bus" dev="sda1" ino=16242 res=1 15:11:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:21 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x8, 0x8, 0x9, 0x9be, 0x8, 0xfffffff7, 0x65, 0x5, 0x44d, 0xc0000000, 0x9, 0xfffffe00, 0x3f0, 0x2, 0x6, 0x80, 0x800, 0xfffffe00, 0x80, 0x3, 0x1ff, 0x8, 0xf9, 0x0, 0x0, 0x7f, 0x88a, 0x3, 0x101, 0xe43c]}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, &(0x7f0000000180)=""/69, 0x45}, 0x2143) 15:11:21 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4d01) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:21 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x797f9000) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x2, 0x3, {0x0}, {0xffffffffffffffff}, 0xfffffffffffffe01, 0xfffffffffffffffb}) clone3(&(0x7f0000001300)={0x41387380, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, r1], 0x2}, 0x58) [ 675.271837][ T28] audit: type=1804 audit(1594825881.525:990): pid=625 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/594/bus" dev="sda1" ino=16292 res=1 15:11:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @value}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x0, [0x6c10, 0x471, 0xff00, 0x1, 0x5, 0xff, 0x7ff, 0x0, 0x126a, 0x7, 0xaaa, 0x8, 0x4, 0x6, 0xee8c, 0x7fff, 0x8001, 0x5, 0x8000, 0xa9c7, 0x673, 0x6, 0x2, 0xdd74, 0x4, 0xc, 0x23c, 0x1000, 0x0, 0x3f, 0x9, 0x5aac, 0x3ff, 0xfffb, 0xfff7, 0x0, 0x6, 0x0, 0x5, 0x1, 0x3ff, 0x40, 0x1, 0x1, 0x4, 0x2, 0xba80, 0x9], 0x3}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) fcntl$setlease(r0, 0x400, 0x0) 15:11:21 executing program 4: r0 = clone3(&(0x7f0000001300)={0x142208000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x63}, 0x20001399) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000011c0)=0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r3, 0x13) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001200)={0x0, 0x0}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) clone3(&(0x7f0000001380)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/233, &(0x7f0000001240)=[r1, r0, r3, r0, r4], 0x5, {r5}}, 0x58) 15:11:21 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x10000, 0x3, 0x2}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', r4, 0x4, 0x3, 0xff, 0x1, 0x9, @remote, @dev={0xfe, 0x80, [], 0x1c}, 0x7800, 0x8000, 0x4, 0xbf}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', r6}) 15:11:21 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x420200, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) move_mount(r2, &(0x7f00000000c0)='./bus\x00', r3, &(0x7f0000000100)='./bus\x00', 0x96fa7598f23b5034) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x140e, 0x469ed5f1029ac867, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) dup(0xffffffffffffffff) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f0000000200)=""/160, 0xa0) sendfile(r5, r6, 0x0, 0x8000fffffff6) [ 675.614000][ T28] audit: type=1804 audit(1594825881.875:991): pid=606 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/713/bus" dev="sda1" ino=16242 res=1 15:11:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x11000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 675.681439][ T28] audit: type=1804 audit(1594825881.875:992): pid=606 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/713/bus" dev="sda1" ino=16242 res=1 [ 675.704841][ T643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.743997][ T643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.769270][ T643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x20000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 675.792075][ T652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 675.875159][ T28] audit: type=1804 audit(1594825882.135:993): pid=658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/714/bus" dev="sda1" ino=16242 res=1 15:11:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:22 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r0, @ANYBLOB="ff838100000016000020", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x35e2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004084) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x105800, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0xba, {{0xa, 0x4e22, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf5dd}}}, 0x88) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:22 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x40000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:22 executing program 4: ftruncate(0xffffffffffffffff, 0x2) clone3(&(0x7f0000001300)={0x2b0950000, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:22 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) dup(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ftruncate(r1, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), 0x10) clone3(&(0x7f00000000c0)={0x400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000140)=0x5, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x100d}) 15:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x401f0000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 676.403085][ T28] audit: type=1804 audit(1594825882.665:994): pid=692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir232615125/syzkaller.9bGniz/595/bus" dev="sda1" ino=16243 res=1 15:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4d010000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:22 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:22 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7c15) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:22 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x2, {0x4}}, 0x18) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 15:11:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7c150000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x11) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:23 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x82, &(0x7f00000003c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r5, 0x8, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r6, 0xda, "650405f202eb05a7a34d46b9dd755613c3a909b924b3d3c8dfa7a47ef77a157b079146bdc8db000f4b24ecafd841c9a31dce42b36ca3a999d801ae6411d8d9d67b0272f31fc53358906144d7f093d01befe0be54a6d74f1e68bcff4e641fca1daae046f41de0f0c6e52788412aa372a6e35aab856a5c27aa1d9638f10749bbafc0bbee03aa4ec3ce654b0ce296ce3b77a2fc41537eec77fc486d7d1ded6701a39e451c2a1faec7eb59b5defec7a6f61a6a0caf8754fad4bc180ccb4a334b614ca9dcb683a515068d7a5cbf5c55ad9bdec83f14e6e5a442d43c58"}, &(0x7f00000001c0)=0xe2) r7 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r7, 0x0, 0x30007, 0x0) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:23 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x3) r4 = dup(r2) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x9a020000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7d00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:23 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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") r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) 15:11:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xa, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r0}, 0xe1a, 0x1e, 0x8}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000080)="c65c1de1e8c35880f2958c9d3fde1977b7bdef4c27ca751aee2376160748a76e1d51c618c18b467ed7efb4d9509f6e8624eef9a2df81c49d2ca402fd5ec132e13d8c4bfce868d93079ab3c57f395d2b9ec88fe95459a46e6d7ebc38c767c15a9be35757bbefee895c65e9ef1e3193bebbfcaf13bc9dea5d319a74733a45bc576ee50981b670973bf1a4335487a78858826bf2ff704a6fc3a60e689cae827d4fe2c0a0f9a3a341473127006f530c6bf10999f245cf063ad0f5fc909ed70a33902127a8e9256f6fc287091c4808e7742313ca369c52defa73b8eb3bad8744dab0356dfd0d730aa159d74760826d22dc7dd4db0a711", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="130d77e8059585a66016a568691ab8ed2bcfb5a2e051fbef093eb16fd5b44a371395512c1471f148d398e22817f3f63e58de820e2597b35f1c8caea687db19ef3621708da5c38926", &(0x7f0000000240)="aee4836b6f80d72aa10df7efeaf41535547f705b24803f7e0673d56af3f5ed76c6aebfd2230c1edb97cfa4254397d3bd6d6df1f576c10d5dfc93745fc6beede0b862d25c942f3ffac36209bec6f776b8353e311992cd4367176905dd4219dc0c4f15c59ee7112bd866e2a0c7a4145598b3ca4559bdae75d53c0a3597e2e4823d92868d173133591f8d80d883d2102fdaa18251f9660915610e025442e28236a9e6db9fb7f7c9e0605de77e0f6dab7cf23a1d3e2d94fa", 0x4, r2}, 0x38) accept$inet(r0, 0x0, &(0x7f0000000000)) 15:11:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x12) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:24 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 15:11:24 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/195, &(0x7f0000000200)=0xc3) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507500307000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001280090001047665746800000000180002801400010000000000cef42aafcd5b81d3f09fc58f1fae015332214c3194459e911384245f67cc968ae1a6160d81054e0a21875bc337908a9bef212273270c9f35d57666df52829065f173a487ea5fbaafbcc228c1ebb6b7b6b4fd142433747f360a395c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x4, 0x1, 0xf9, 0x6, 0x44, @local, @empty, 0x10, 0x7, 0x9, 0x4}}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000300)={@local, r6}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r7, 0x13) r8 = syz_open_procfs(r7, &(0x7f0000000080)='net/dev_mcast\x00') openat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 15:11:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfeffffff, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 678.125211][ T780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:24 executing program 4: r0 = clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) syz_open_procfs(r0, &(0x7f0000000000)='net\x00') 15:11:24 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 678.198682][ T785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffff7f, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9a02) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:24 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = pidfd_open(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r5) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x30, 0x0, &(0x7f00000012c0)=[0x0, r6], 0x2}, 0x58) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000040)={{0x35}, 'port1\x00', 0x65, 0x10008, 0x80, 0x1, 0x2, 0x10000003, 0xffffffff, 0x0, 0x1, 0x7}) [ 678.372590][ T804] FAULT_INJECTION: forcing a failure. [ 678.372590][ T804] name failslab, interval 1, probability 0, space 0, times 0 [ 678.386906][ T804] CPU: 0 PID: 804 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 678.395411][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.405450][ T804] Call Trace: [ 678.408741][ T804] dump_stack+0x10f/0x19d [ 678.413118][ T804] should_fail+0x23c/0x250 [ 678.417527][ T804] __should_failslab+0x81/0x90 [ 678.422274][ T804] should_failslab+0x5/0x20 [ 678.426761][ T804] kmem_cache_alloc_node+0x38/0x260 [ 678.431949][ T804] ? __alloc_skb+0x97/0x2e0 [ 678.436446][ T804] __alloc_skb+0x97/0x2e0 [ 678.440768][ T804] ? netlink_autobind+0x143/0x150 [ 678.445781][ T804] netlink_sendmsg+0x4b1/0x7a0 [ 678.450537][ T804] ? netlink_getsockopt+0x690/0x690 [ 678.455727][ T804] ____sys_sendmsg+0x360/0x4d0 [ 678.460484][ T804] ? import_iovec+0x171/0x1c0 [ 678.465234][ T804] __sys_sendmsg+0x1df/0x260 [ 678.469824][ T804] ? __this_cpu_preempt_check+0x18/0x20 [ 678.475362][ T804] ? vfs_write+0x480/0x690 [ 678.479773][ T804] ? __fget_light+0x219/0x260 [ 678.484497][ T804] ? check_preemption_disabled+0x51/0x140 [ 678.490203][ T804] ? debug_smp_processor_id+0x18/0x20 [ 678.495570][ T804] ? fpregs_assert_state_consistent+0x7e/0x90 [ 678.501624][ T804] __x64_sys_sendmsg+0x42/0x50 [ 678.506394][ T804] do_syscall_64+0x51/0xb0 [ 678.510806][ T804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.516684][ T804] RIP: 0033:0x45cba9 15:11:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfffffffe, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 678.520599][ T804] Code: Bad RIP value. [ 678.524652][ T804] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.533048][ T804] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 678.541197][ T804] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 678.549165][ T804] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.557130][ T804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 678.565272][ T804] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) recvfrom$ax25(r3, &(0x7f0000000180)=""/194, 0xc2, 0x2162, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:24 executing program 3 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 678.721911][ T827] FAULT_INJECTION: forcing a failure. [ 678.721911][ T827] name failslab, interval 1, probability 0, space 0, times 0 [ 678.743928][ T827] CPU: 1 PID: 827 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 678.752441][ T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.762477][ T827] Call Trace: [ 678.765751][ T827] dump_stack+0x10f/0x19d [ 678.770055][ T827] should_fail+0x23c/0x250 [ 678.774444][ T827] __should_failslab+0x81/0x90 [ 678.779190][ T827] should_failslab+0x5/0x20 [ 678.783664][ T827] kmem_cache_alloc_node_trace+0x3b/0x260 [ 678.789356][ T827] ? __kmalloc_node_track_caller+0x30/0x40 [ 678.795133][ T827] ? kmem_cache_alloc_node+0x12b/0x260 [ 678.800590][ T827] ? netlink_sendmsg+0x4b1/0x7a0 [ 678.805551][ T827] __kmalloc_node_track_caller+0x30/0x40 [ 678.811224][ T827] __alloc_skb+0xd3/0x2e0 [ 678.815527][ T827] netlink_sendmsg+0x4b1/0x7a0 [ 678.820265][ T827] ? netlink_getsockopt+0x690/0x690 [ 678.825446][ T827] ____sys_sendmsg+0x360/0x4d0 [ 678.830180][ T827] ? import_iovec+0x171/0x1c0 [ 678.834829][ T827] __sys_sendmsg+0x1df/0x260 [ 678.839447][ T827] ? __this_cpu_preempt_check+0x18/0x20 [ 678.844994][ T827] ? vfs_write+0x480/0x690 [ 678.849384][ T827] ? __fget_light+0x219/0x260 [ 678.854035][ T827] ? check_preemption_disabled+0x51/0x140 [ 678.859738][ T827] ? debug_smp_processor_id+0x18/0x20 [ 678.865110][ T827] ? fpregs_assert_state_consistent+0x7e/0x90 [ 678.871173][ T827] __x64_sys_sendmsg+0x42/0x50 [ 678.875951][ T827] do_syscall_64+0x51/0xb0 [ 678.880346][ T827] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 678.886212][ T827] RIP: 0033:0x45cba9 [ 678.890098][ T827] Code: Bad RIP value. [ 678.894135][ T827] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.902552][ T827] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 678.910681][ T827] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 15:11:25 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x25) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:25 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(r0) r5 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r5, 0xcb9bf000) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4001, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_void(r6, 0x1, 0x48, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffff6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$clear(0x7, r8) [ 678.918649][ T827] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 678.926680][ T827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 678.934637][ T827] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:25 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000fec000/0x3000)=nil, 0x3000, 0x1000006, 0x2812, r3, 0xffffd000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x83a, 0x1, 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0x2) 15:11:25 executing program 3 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 679.059500][ T849] FAULT_INJECTION: forcing a failure. [ 679.059500][ T849] name failslab, interval 1, probability 0, space 0, times 0 [ 679.078655][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 679.078667][ T28] audit: type=1804 audit(1594825885.335:1003): pid=853 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/717/bus" dev="sda1" ino=16303 res=1 [ 679.113324][ T849] CPU: 0 PID: 849 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 679.121835][ T849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.131877][ T849] Call Trace: [ 679.135329][ T849] dump_stack+0x10f/0x19d [ 679.139677][ T849] should_fail+0x23c/0x250 [ 679.144091][ T849] __should_failslab+0x81/0x90 [ 679.148854][ T849] should_failslab+0x5/0x20 [ 679.153344][ T849] kmem_cache_alloc+0x29/0x2b0 [ 679.158102][ T849] ? skb_clone+0x131/0x1f0 15:11:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000b) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 679.162509][ T849] skb_clone+0x131/0x1f0 [ 679.166747][ T849] netlink_deliver_tap+0x2a0/0x470 [ 679.171854][ T849] netlink_unicast+0x5ca/0x6b0 [ 679.176614][ T849] netlink_sendmsg+0x6d8/0x7a0 [ 679.181372][ T849] ? netlink_getsockopt+0x690/0x690 [ 679.186585][ T849] ____sys_sendmsg+0x360/0x4d0 [ 679.191351][ T849] ? import_iovec+0x171/0x1c0 [ 679.196020][ T849] __sys_sendmsg+0x1df/0x260 [ 679.200611][ T849] ? __this_cpu_preempt_check+0x18/0x20 [ 679.206220][ T849] ? vfs_write+0x480/0x690 [ 679.210645][ T849] ? __fget_light+0x219/0x260 [ 679.215312][ T849] ? check_preemption_disabled+0x51/0x140 [ 679.221028][ T849] ? debug_smp_processor_id+0x18/0x20 [ 679.226386][ T849] ? fpregs_assert_state_consistent+0x7e/0x90 [ 679.232443][ T849] __x64_sys_sendmsg+0x42/0x50 [ 679.237201][ T849] do_syscall_64+0x51/0xb0 [ 679.241611][ T849] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 679.247525][ T849] RIP: 0033:0x45cba9 [ 679.251406][ T849] Code: Bad RIP value. [ 679.255550][ T849] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 15:11:25 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r2, 0x13) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, r2], 0x2, {r0}}, 0x58) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) [ 679.263955][ T849] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 679.271975][ T849] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 679.279936][ T849] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.287939][ T849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 679.295908][ T849] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x40000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:25 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x88db15a43a, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:25 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) getegid() 15:11:25 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) stat(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000500)='127.0.0.1\x00', &(0x7f0000000540)='./bus\x00', &(0x7f0000000580)='9p\x00', 0x2004, &(0x7f0000000680)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@rq={'rq', 0x3d, 0x1ff}}, {@common=@version_L='version=9p2000.L'}, {@rq={'rq', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r1}}, {@dont_appraise='dont_appraise'}]}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x6, 0x7, 0x3, 0x12, '\x00', 0x2}, 0x0, [0x5, 0x6, 0x34, 0x9, 0xc87, 0x0, 0x6, 0x4e5, 0x400, 0x54, 0x9, 0x401, 0x0, 0x4, 0x3ff, 0x20, 0x100000000, 0x59071e3f, 0x2, 0x6, 0x31, 0x4, 0x2851, 0x92a7, 0x0, 0x9, 0x1f, 0x3a, 0x3, 0x1, 0x81, 0x3, 0x0, 0x80000000, 0x4fe, 0xfffffffffffffffe, 0x1, 0x4, 0xffff, 0x10001, 0x9, 0x0, 0x100, 0xbf, 0x3000000, 0xffff, 0x7, 0x100000001, 0x6, 0x4, 0x80000001, 0x3, 0x4, 0x4, 0x7, 0x4b72, 0x7f, 0x3, 0x9, 0x2, 0x160, 0x7ff, 0x2, 0x5, 0x8, 0x7, 0x2, 0x5, 0x0, 0x7, 0x8000, 0x5, 0x20, 0x1, 0x1f, 0x4, 0x8, 0xffffffffffffff52, 0x0, 0x1, 0xffff, 0x1, 0x40, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x800, 0x3, 0x3, 0xfffffffffffff01d, 0x80000001, 0x3f, 0x4, 0x0, 0x10001, 0x20, 0x6, 0x7, 0xfffffffffffffffd, 0x6c4, 0x0, 0x6, 0x7, 0xecbe, 0x4, 0x7, 0x1, 0x3c6, 0x1000, 0x7, 0x0, 0x401, 0x4, 0xff0b, 0x4, 0xffffffff, 0x2, 0x0, 0x2, 0x401, 0x8, 0x8c000, 0x4, 0x0, 0x1e, 0x6, 0x5]}) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000780)=""/239) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') 15:11:25 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:25 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, {r1}}, 0x58) [ 679.780503][ T28] audit: type=1804 audit(1594825886.035:1004): pid=859 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/717/bus" dev="sda1" ino=16303 res=1 15:11:26 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:26 executing program 3 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001200)={0x4, 0x101, 0x800, 0x7e, &(0x7f0000000100)=""/126, 0x52, &(0x7f0000000180)=""/82, 0x1000, &(0x7f0000000200)=""/4096}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x28d3c00, 0x1ff) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000001240)=""/113) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:11:26 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) dup(r2) sendfile(r3, r4, 0x0, 0x8000fffffff6) [ 679.838168][ T28] audit: type=1804 audit(1594825886.085:1005): pid=893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/717/bus" dev="sda1" ino=16303 res=1 [ 679.904204][ T898] FAULT_INJECTION: forcing a failure. [ 679.904204][ T898] name failslab, interval 1, probability 0, space 0, times 0 [ 679.943007][ T898] CPU: 0 PID: 898 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 679.951524][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.961558][ T898] Call Trace: [ 679.964838][ T898] dump_stack+0x10f/0x19d [ 679.969158][ T898] should_fail+0x23c/0x250 [ 679.973555][ T898] __should_failslab+0x81/0x90 [ 679.978298][ T898] ? genl_family_rcv_msg_attrs_parse+0x7b/0x190 [ 679.984518][ T898] should_failslab+0x5/0x20 [ 679.989004][ T898] __kmalloc+0x43/0x2d0 [ 679.993145][ T898] genl_family_rcv_msg_attrs_parse+0x7b/0x190 [ 679.999183][ T898] ? ns_capable+0x86/0xb0 [ 680.003484][ T898] genl_rcv_msg+0x438/0x640 [ 680.007962][ T898] ? __skb_clone+0x2b9/0x2d0 [ 680.012587][ T898] netlink_rcv_skb+0x13e/0x240 [ 680.017441][ T898] ? genl_rcv+0x40/0x40 [ 680.021577][ T898] genl_rcv+0x24/0x40 [ 680.025532][ T898] netlink_unicast+0x5e2/0x6b0 [ 680.030269][ T898] netlink_sendmsg+0x6d8/0x7a0 [ 680.035020][ T898] ? netlink_getsockopt+0x690/0x690 [ 680.040205][ T898] ____sys_sendmsg+0x360/0x4d0 [ 680.045025][ T898] ? import_iovec+0x171/0x1c0 [ 680.049685][ T898] __sys_sendmsg+0x1df/0x260 [ 680.054263][ T898] ? __this_cpu_preempt_check+0x18/0x20 [ 680.059779][ T898] ? vfs_write+0x480/0x690 [ 680.064173][ T898] ? __fget_light+0x219/0x260 [ 680.068852][ T898] ? check_preemption_disabled+0x51/0x140 [ 680.074543][ T898] ? debug_smp_processor_id+0x18/0x20 [ 680.080406][ T898] ? fpregs_assert_state_consistent+0x7e/0x90 [ 680.086487][ T898] __x64_sys_sendmsg+0x42/0x50 [ 680.091221][ T898] do_syscall_64+0x51/0xb0 [ 680.095675][ T898] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 680.101538][ T898] RIP: 0033:0x45cba9 [ 680.105400][ T898] Code: Bad RIP value. [ 680.109440][ T898] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.117888][ T898] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 680.125829][ T898] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 680.133781][ T898] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.141723][ T898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 680.149668][ T898] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:26 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7d000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:26 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = eventfd(0x8000) ioctl$FITHAW(r0, 0xc0045878) [ 680.185046][ T28] audit: type=1804 audit(1594825886.445:1006): pid=906 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/718/bus" dev="sda1" ino=16322 res=1 15:11:26 executing program 3 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 680.298461][ T919] FAULT_INJECTION: forcing a failure. [ 680.298461][ T919] name failslab, interval 1, probability 0, space 0, times 0 [ 680.324169][ T919] CPU: 0 PID: 919 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 680.332694][ T919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.342742][ T919] Call Trace: [ 680.346027][ T919] dump_stack+0x10f/0x19d [ 680.350372][ T919] should_fail+0x23c/0x250 [ 680.354778][ T919] __should_failslab+0x81/0x90 [ 680.359528][ T919] should_failslab+0x5/0x20 [ 680.364029][ T919] kmem_cache_alloc_node+0x38/0x260 [ 680.369220][ T919] ? __alloc_skb+0x97/0x2e0 [ 680.373710][ T919] __alloc_skb+0x97/0x2e0 [ 680.378121][ T919] netlink_ack+0x1f8/0x5d0 [ 680.382531][ T919] netlink_rcv_skb+0x1b8/0x240 [ 680.387284][ T919] ? genl_rcv+0x40/0x40 [ 680.391432][ T919] genl_rcv+0x24/0x40 [ 680.395413][ T919] netlink_unicast+0x5e2/0x6b0 [ 680.400171][ T919] netlink_sendmsg+0x6d8/0x7a0 [ 680.404926][ T919] ? netlink_getsockopt+0x690/0x690 [ 680.410115][ T919] ____sys_sendmsg+0x360/0x4d0 [ 680.414916][ T919] ? import_iovec+0x171/0x1c0 [ 680.419585][ T919] __sys_sendmsg+0x1df/0x260 [ 680.424172][ T919] ? __this_cpu_preempt_check+0x18/0x20 [ 680.429712][ T919] ? vfs_write+0x480/0x690 [ 680.434118][ T919] ? __fget_light+0x219/0x260 [ 680.438784][ T919] ? check_preemption_disabled+0x51/0x140 [ 680.444493][ T919] ? debug_smp_processor_id+0x18/0x20 [ 680.449854][ T919] ? fpregs_assert_state_consistent+0x7e/0x90 [ 680.455992][ T919] __x64_sys_sendmsg+0x42/0x50 [ 680.460816][ T919] do_syscall_64+0x51/0xb0 [ 680.465260][ T919] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 680.471138][ T919] RIP: 0033:0x45cba9 [ 680.475017][ T919] Code: Bad RIP value. [ 680.479064][ T919] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.487584][ T919] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 15:11:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7d0000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 680.495562][ T919] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 680.503522][ T919] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.511480][ T919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 680.519448][ T919] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:26 executing program 4: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r2, 0x13) r3 = inotify_init1(0x800) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r4, 0x13) getpgid(r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r6, 0x10) r7 = inotify_init1(0x0) fcntl$getownex(r7, 0x10, &(0x7f00000000c0)) clone3(&(0x7f0000001300)={0xa000, 0x0, 0x0, 0x0, {0x20000082}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r6, r6, 0x0, 0x0], 0x4}, 0x58) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f0000000000)={0x8, 0xa, 0x4}) 15:11:26 executing program 3 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:26 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x10001, 0x1, 0x8, 0x5, 0x66, 0x2}, &(0x7f00000000c0)={0x1, 0x8, 0x3f, 0x9, 0x0, 0x40, 0x56aa, 0x1}, &(0x7f0000000140)={0x40, 0x101, 0x100000001, 0x1, 0x2, 0xfffffffffffffff7, 0x80, 0x1}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x82, &(0x7f00000003c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0xc0}, 0x8) ioctl$TIOCSIG(r0, 0x40045436, 0x40) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) [ 680.653152][ T932] FAULT_INJECTION: forcing a failure. [ 680.653152][ T932] name failslab, interval 1, probability 0, space 0, times 0 [ 680.677145][ T932] CPU: 0 PID: 932 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 680.685661][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.695707][ T932] Call Trace: [ 680.698995][ T932] dump_stack+0x10f/0x19d [ 680.703318][ T932] should_fail+0x23c/0x250 [ 680.707727][ T932] __should_failslab+0x81/0x90 [ 680.712477][ T932] should_failslab+0x5/0x20 [ 680.717022][ T932] kmem_cache_alloc_node_trace+0x3b/0x260 [ 680.722734][ T932] ? __kmalloc_node_track_caller+0x30/0x40 [ 680.728532][ T932] ? kmem_cache_alloc_node+0x12b/0x260 [ 680.733981][ T932] ? netlink_ack+0x1f8/0x5d0 [ 680.738584][ T932] __kmalloc_node_track_caller+0x30/0x40 [ 680.744212][ T932] __alloc_skb+0xd3/0x2e0 [ 680.748558][ T932] netlink_ack+0x1f8/0x5d0 [ 680.752968][ T932] netlink_rcv_skb+0x1b8/0x240 [ 680.757723][ T932] ? genl_rcv+0x40/0x40 [ 680.761875][ T932] genl_rcv+0x24/0x40 [ 680.765848][ T932] netlink_unicast+0x5e2/0x6b0 [ 680.770603][ T932] netlink_sendmsg+0x6d8/0x7a0 [ 680.775359][ T932] ? netlink_getsockopt+0x690/0x690 [ 680.780552][ T932] ____sys_sendmsg+0x360/0x4d0 [ 680.785397][ T932] ? import_iovec+0x171/0x1c0 [ 680.790113][ T932] __sys_sendmsg+0x1df/0x260 [ 680.794702][ T932] ? __this_cpu_preempt_check+0x18/0x20 [ 680.800314][ T932] ? vfs_write+0x480/0x690 [ 680.804768][ T932] ? __fget_light+0x219/0x260 [ 680.809438][ T932] ? check_preemption_disabled+0x51/0x140 [ 680.815153][ T932] ? debug_smp_processor_id+0x18/0x20 [ 680.820513][ T932] ? fpregs_assert_state_consistent+0x7e/0x90 [ 680.826574][ T932] __x64_sys_sendmsg+0x42/0x50 [ 680.831326][ T932] do_syscall_64+0x51/0xb0 [ 680.835738][ T932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 680.841611][ T932] RIP: 0033:0x45cba9 [ 680.845484][ T932] Code: Bad RIP value. [ 680.849532][ T932] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.857930][ T932] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 680.865893][ T932] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 680.873963][ T932] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.881919][ T932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 680.889884][ T932] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:27 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x20}, 0x20001358) [ 680.922522][ T28] audit: type=1804 audit(1594825887.185:1007): pid=941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/718/bus" dev="sda1" ino=16322 res=1 15:11:27 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x300) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 680.998381][ T28] audit: type=1804 audit(1594825887.255:1008): pid=946 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/718/bus" dev="sda1" ino=16322 res=1 15:11:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x100000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:27 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0), 0x10) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:27 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x56) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) clone3(&(0x7f0000001300)={0x80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:27 executing program 4: r0 = syz_open_dev$audion(0x0, 0xfffffffffffffff7, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xff04) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r2, 0x0, r5, r3}, 0xb8fb, 0x0, 0x0, 0x8000}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, r1, r3}, 0xc) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="2458b28831034118aa4e91f933cfb2d43e32a1fdad6aee3f25ebfd5be560c0bd4774e432ceab4bafbeffa17e99897aeceec743d7f8032ac7d4cdd36d3d0e28f5929110acebb905c4b9b91be4448af2fe59ee9cde3bc7f15674035ff12e848b774c46e2c199c5c8ca27b0680c942892310238c36bb29a24fb3e7add50adbf936fd02b44d89e8f896ebac3e4c4ff0f1618b454f1a0db9493d2fcf10fb004df5413d5f18ad273da3a22c582c7cd9f4700507b85bdfe7e7ad6d1ede915c1d678d8371530844df46d0c0c1b1c03e7ee9bc4c926dcafc201ff6a9090f752e355ad3bb104e091cc", 0xe4, 0x8}, {&(0x7f0000000180)="b16294c6bd93fa486a72e9a6c3fd2a4c852d575219022a435592da348f21d6c2f8e5b84476e743889ffbdb05affa3ac297e8874070", 0x35, 0x69509950}, {&(0x7f00000001c0), 0x0, 0x7}, {&(0x7f0000000200)="3d1247e47265cabf876710ce2e158cb96502ee9087ad61351b0aa845c72403a46024c7733afebc756f423e34d593ece542650808a933bba01997c14e9cf2184440dde7006ba3aea86ddd83eb108660340ca5064803758987836e58db8058e910b6caef8346a448fef233cdaf7793ef96ea029182a5a4178b7fc74e248c832b1985f0b1612324fd2b40602c1035fce1003284a8eee525cf6a1901a3415ba4849b9bf71b1527ba8c521c96465ca37aec61d40089b3238450bddbc633585576c95878b53bc8c909aab3ac027a578831d71e6e32dd86652b0c8f0814dc01cdb77e85b172c6d7e76a5bf5daf0de", 0xeb, 0x100}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="687567653d77617468696e5f73697a653dd75c2c50e9687567653d6e647665723d2cf93d643d", @ANYRESHEX=r3, @ANYBLOB="2c6d706f6c3d62696e643d7374617469632c73697a653d673831e82c6e725f696e6f6465733d383234347439362c666f776e65723c", @ANYRESDEC=r6, @ANYBLOB=',measure,\x00']) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:27 executing program 3 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 681.210611][ T965] tmpfs: Bad value for 'huge' [ 681.266852][ T28] audit: type=1804 audit(1594825887.525:1009): pid=972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/719/bus" dev="sda1" ino=16304 res=1 [ 681.307341][ T975] tmpfs: Bad value for 'huge' [ 681.316773][ T977] FAULT_INJECTION: forcing a failure. [ 681.316773][ T977] name failslab, interval 1, probability 0, space 0, times 0 [ 681.359506][ T977] CPU: 0 PID: 977 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 681.368196][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.378240][ T977] Call Trace: [ 681.381524][ T977] dump_stack+0x10f/0x19d [ 681.385843][ T977] should_fail+0x23c/0x250 [ 681.390251][ T977] __should_failslab+0x81/0x90 [ 681.395093][ T977] should_failslab+0x5/0x20 [ 681.399588][ T977] kmem_cache_alloc+0x29/0x2b0 [ 681.404344][ T977] ? skb_clone+0x131/0x1f0 [ 681.408754][ T977] skb_clone+0x131/0x1f0 [ 681.412990][ T977] netlink_deliver_tap+0x2a0/0x470 [ 681.418085][ T977] ? netlink_attachskb+0x3f8/0x550 [ 681.423192][ T977] netlink_unicast+0x436/0x6b0 [ 681.428081][ T977] netlink_ack+0x57b/0x5d0 [ 681.432491][ T977] netlink_rcv_skb+0x1b8/0x240 [ 681.437260][ T977] ? genl_rcv+0x40/0x40 [ 681.441408][ T977] genl_rcv+0x24/0x40 [ 681.445383][ T977] netlink_unicast+0x5e2/0x6b0 [ 681.450141][ T977] netlink_sendmsg+0x6d8/0x7a0 [ 681.454902][ T977] ? netlink_getsockopt+0x690/0x690 [ 681.460090][ T977] ____sys_sendmsg+0x360/0x4d0 [ 681.464843][ T977] ? import_iovec+0x171/0x1c0 [ 681.469510][ T977] __sys_sendmsg+0x1df/0x260 [ 681.474166][ T977] ? __this_cpu_preempt_check+0x18/0x20 [ 681.479707][ T977] ? vfs_write+0x480/0x690 [ 681.484118][ T977] ? __fget_light+0x219/0x260 [ 681.488790][ T977] ? check_preemption_disabled+0x51/0x140 [ 681.494498][ T977] ? debug_smp_processor_id+0x18/0x20 [ 681.499869][ T977] ? fpregs_assert_state_consistent+0x7e/0x90 [ 681.505929][ T977] __x64_sys_sendmsg+0x42/0x50 [ 681.510683][ T977] do_syscall_64+0x51/0xb0 [ 681.515097][ T977] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 681.520977][ T977] RIP: 0033:0x45cba9 [ 681.524860][ T977] Code: Bad RIP value. [ 681.528907][ T977] RSP: 002b:00007fa1e8c74c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.537307][ T977] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 681.545267][ T977] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 681.553226][ T977] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 681.561251][ T977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.569383][ T977] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007fa1e8c756d4 15:11:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:27 executing program 3 (fault-call:2 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:27 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) 15:11:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x200000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:28 executing program 4: clone3(&(0x7f0000001300)={0x40021000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 681.965401][ T1013] IPVS: ftp: loaded support on port[0] = 21 [ 682.016853][ T28] audit: type=1804 audit(1594825888.275:1010): pid=1037 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/719/bus" dev="sda1" ino=16304 res=1 [ 682.070122][ T1013] IPVS: ftp: loaded support on port[0] = 21 15:11:28 executing program 5: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffff9, 0x4a41) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000000c0)={{0x7, 0x1f}, 0x39}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x101040, 0x0) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:28 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x10010000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 682.106357][ T28] audit: type=1804 audit(1594825888.365:1011): pid=1046 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/719/bus" dev="sda1" ino=16304 res=1 [ 682.132108][ T25] tipc: TX() has been purged, node left! 15:11:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:28 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0xa, 0xc5c41a7e3c2c8554, r1, 0xffca6000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/145) 15:11:28 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) r2 = getpid() r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r4, 0x13) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r6, 0x13) clone3(&(0x7f0000001300)={0x20800, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r1, r1, r2, r4, r6]}, 0x58) 15:11:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7d0000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:28 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) 15:11:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 682.385041][ T28] audit: type=1804 audit(1594825888.645:1012): pid=1091 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/720/bus" dev="sda1" ino=16179 res=1 15:11:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x600) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:29 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x100000001) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:29 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0)=0x3, 0x8080fffffffe) r2 = socket(0x28, 0x803, 0xfe) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101c00, 0x8) dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:29 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x24, 0x1, 0x1000, 0x1}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:29 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x18000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00700) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:29 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80ac1) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r1, 0xffffffffffffffff], 0x2}, 0x58) r3 = openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x200480, 0x1, 0x4}, 0x18) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000100)={0x5, 0x9, 0x800, 0x16}) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:29 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x0, 0x1a739b1a, &(0x7f0000000040)=0x1}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x7f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}}, r2}}, 0x38) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 683.553732][ T25] tipc: TX() has been purged, node left! 15:11:29 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x700) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:30 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x20010, r2, 0x2c45f000) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xd007, 0x5, 0x9, 0x9, 0x40a], 0x5, 0x80800, 0x0, r4}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="95000000df5000000000000000000003019f611e74cdde98854845cfa866eb6f73f9e5cf4a69f302e1e63c0d9a14770f89fd63c4818976a2506dcfe9b3"], 0x15) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xff04) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, r7, r5}, 0xb8fb, 0x0, 0x0, 0x8000}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, r5}, 0xc) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="040003000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="10000000000008002000030000000000"], 0x84, 0x0) 15:11:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x20000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:30 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="a2a304433918e1cf059b148dbfadf974dd11915b538c4d0cb87c8320538c971ae1897c8175791d279f0d77aafc38ebd762", @ANYRESHEX=r0], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) fsopen(&(0x7f00000000c0)='sockfs\x00', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = dup(r0) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r7, r8, 0x0, 0x8000fffffff6) 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 684.242751][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 684.242762][ T28] audit: type=1804 audit(1594825890.505:1016): pid=1204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/983/bus" dev="sda1" ino=16376 res=1 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x863, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 684.282121][ T28] audit: type=1804 audit(1594825890.535:1017): pid=1214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/983/bus" dev="sda1" ino=16376 res=1 15:11:30 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) [ 684.332853][ T28] audit: type=1804 audit(1594825890.575:1018): pid=1214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/983/bus" dev="sda1" ino=16376 res=1 [ 684.357396][ T28] audit: type=1804 audit(1594825890.575:1019): pid=1214 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/983/bus" dev="sda1" ino=16376 res=1 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:30 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000040)={0xc, {0x82b7, 0x3, 0x800, 0x4}}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) [ 684.464891][ T28] audit: type=1804 audit(1594825890.685:1020): pid=1227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/722/bus" dev="sda1" ino=16383 res=1 15:11:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x900) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:30 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x802, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x5, 0x2, 0x4, 0x2, 0x20, {0x0, 0xea60}, {0x1, 0x2, 0x4, 0x0, 0x1, 0xf7, "d4431064"}, 0x1, 0x1, @fd, 0x20, 0x0, r1}) 15:11:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:31 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd0070000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 685.120684][ T28] audit: type=1804 audit(1594825891.375:1021): pid=1286 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/722/bus" dev="sda1" ino=16383 res=1 15:11:31 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup(r0) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:31 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) tkill(0x0, 0x13) clone3(&(0x7f0000000100)={0x4040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0x0], 0x2}, 0x31) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000000)={{0x6, 0xcb}, 'port0\x00', 0x3, 0x80008, 0x5, 0x2, 0x1000, 0x1, 0x2, 0x0, 0x4, 0x3e}) 15:11:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6308, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:31 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf0000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 685.155636][ T28] audit: type=1804 audit(1594825891.415:1022): pid=1287 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/722/bus" dev="sda1" ino=16383 res=1 15:11:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:31 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = dup2(r3, r0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f00000001c0)) tkill(r1, 0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000052cafe5a78d58e6f1aed3016a2091900000073014300000000009500000000000000777b5ac0ba410e25c8963d6d2111e52377572dbca4f62bc6ba53ab7c663a3d21a29854e8dd348322291c0b9ab73cc02eb7d6dc191dd9cb1ea2c59cf85d8fb6b97f4a4207d1926c1c7979d28dbddd79dc108e4ad9b9b96da5ec3c226021512fe287151919381b26070e2cf7531f7de938ff15d0d944e3b5bedd685784e01b44762fca555649"], &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x40080, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r5, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xd) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='\xd3&:-^\x00', r6}, 0x30) clone3(&(0x7f0000001300)={0x28040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r7, 0xffffffffffffffff], 0x2}, 0x58) [ 685.342972][ T28] audit: type=1804 audit(1594825891.605:1023): pid=1311 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/723/bus" dev="sda1" ino=16371 res=1 15:11:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x3000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:32 executing program 4: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) [ 686.106103][ T28] audit: type=1804 audit(1594825892.366:1024): pid=1362 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/723/bus" dev="sda1" ino=16371 res=1 15:11:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:32 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = mq_open(&(0x7f0000000000)=']#-#\x00', 0x1, 0x0, &(0x7f0000000040)={0x9, 0xfff, 0x6, 0x70000000000000}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x220000, 0x0) name_to_handle_at(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x3c, 0x4, "92d2b894f15d4071ebf55c1d6f935ed4e92e25306a3c9522ee5cf0d1fc83047c9d6d3d5bafa6e0e28d9825b4aeb9517c77e1a2dc"}, &(0x7f00000002c0), 0x1000) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x3d, 0x1, @thr={&(0x7f0000000080)="127f9ca98d9a9c029316938f501d6c10a1dbdf541d4e79ec299baafe8f88a833d4e9a2cf291f3e1cdc46a893f22d7d2cec95b8b3a6143f40a91822917dacfad28c228c44df57d2888b3486d8f5e598b35aec81d6bf5115a39c203ed3eb", &(0x7f0000000100)="5ddba5d3c477e1ebd276eb6109be48b0e7a0eb55f1700df54d7b23b4fec11f46d812bbb355c1b555adade5e064a9995438f858792cebb472956f583b544b190e110f68432011fddd9945f244c4d07ded3c96f49f7e53cdc9cf8f96c94d77fd2ddb9be2334d421b7f36494a4d67900a9e7a6497a93ec35784e7da95e8f68acd5331a0091c3716048c6865da5f7fdacc570aeb24af8f36555b"}}) 15:11:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:32 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000180)=0x4, 0x4) sendfile(r3, r4, 0x0, 0x8000fffffff6) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x3000) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x10001, 0x3) accept4(0xffffffffffffffff, &(0x7f0000000280)=@hci, &(0x7f0000000000)=0x80, 0x80000) [ 686.193473][ T28] audit: type=1804 audit(1594825892.456:1025): pid=1363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/723/bus" dev="sda1" ino=16371 res=1 15:11:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:32 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 15:11:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:32 executing program 4: clone3(&(0x7f0000001300)={0x80000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f00000012c0), 0x2}, 0xfffffffffffffe60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15:11:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:32 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r2}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x8, 0x4) 15:11:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x300000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x400000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:33 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:33 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:33 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0xce834000) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = dup(0xffffffffffffffff) sendfile(r4, r5, 0x0, 0x8000fffffff6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) r8 = socket$kcm(0x29, 0x0, 0x0) r9 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x14400) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r10, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4461}, {0xffffffffffffffff, 0x140b}, {}, {r7, 0x2}, {r8, 0x4000}, {0xffffffffffffffff, 0x241}, {r6, 0x4}, {r9, 0x2033}, {r10, 0x8008}], 0x9, &(0x7f0000000180), &(0x7f0000000040)={[0x40000000005ff]}, 0x8) 15:11:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x500000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:33 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x88}}, 0x2) 15:11:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x63080000, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:33 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x84000, 0x9a, 0xb}, 0x18) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x70, 0x1, 0x5, 0x0, 0x5, 0x0, 0x100000001, 0x408, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x100, 0x7, 0x0, 0x1, 0x100000001, 0x172, 0x3}, r0, 0xc, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000140)) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010100, r7}, 0xc) 15:11:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x600000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r3, 0x13) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x12a80, 0x169) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000240)="0f07eae20000000701c4e114557b00b805000000a2d800b14d00ee1000ee10b9800000c00f3235002080000f4ae7e70f658f06000000b9370300000f32b9c901130000ec2f00ec2f3e0f219366baf80cb854146881ef66bafc0ced", 0xfffffe7c}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) lseek(r8, 0x1, 0x2) clone3(&(0x7f0000001300)={0x290800000, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r1, 0xffffffffffffffff, r3], 0x4000000000000113, {r4}}, 0x58) 15:11:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:34 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r3, 0x309, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x401, 0x6, 0xc43, 0x7f}, 0x14) 15:11:34 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14000, 0xae) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x3) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) sendfile(r3, r6, 0x0, 0x8000fffffff6) 15:11:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xefffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x700000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x6000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xa00000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffffef, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 689.311886][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 689.311897][ T28] audit: type=1804 audit(1594825895.576:1039): pid=1556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/726/bus" dev="sda1" ino=16368 res=1 15:11:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x8000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb00000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xb00020000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYRES16=r0, @ANYRES64=r2, @ANYRES64=r2, @ANYRES64, @ANYBLOB="bc15480942830a9c71025a4d48cb98c40e6b345f988e414a403e91a4ed0de3a8e4e98532d8c6f9", @ANYRES64, @ANYRES32], 0x1f) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r7 = socket(0x2, 0x803, 0xff) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r8 = dup(r7) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendfile(r8, r9, 0x0, 0x5) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1100) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x200002dc, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 689.941358][ T28] audit: type=1804 audit(1594825896.196:1040): pid=1637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/727/bus" dev="sda1" ino=16382 res=1 15:11:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xd00000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x6, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x8, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xe00000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 690.624601][ T28] audit: type=1804 audit(1594825896.886:1041): pid=1637 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/727/bus" dev="sda1" ino=16382 res=1 15:11:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x300, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1200) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x2, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x3, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x4, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x5, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x8, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x9, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xf, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:37 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xf00000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x60, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1000000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x300, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1100000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x500, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2000000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x863, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x6000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x900, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x2, {0xa, 0x4e23, 0x756, @empty, 0x1ff}, r3}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb000200) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xf00, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, r1], 0x2}, 0x58) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x6000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x6308, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x30000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3aa415db88000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r1, 0x120, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffbff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x320f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24000}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x804, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)=0x0) clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, r4], 0x2}, 0x58) 15:11:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x34000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x2e25d1d1, 0x1, 0x401, 0xff}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000040)) 15:11:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c00) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:39 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x100, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x4, 0x9, 0x497], 0x3, 0x5, 0x8, 0x8000, 0x2, 0xf3, 0x800, {0x1, 0x3, 0x5, 0x2, 0x8001, 0x3, 0x9, 0x6ca8, 0x5, 0x4, 0x5962, 0x6, 0x800, 0x7, "412b603bf01ae850bd55e2961693205e03c26ab27e04e381e7c376d356ec3004"}}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x400300, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x82, &(0x7f00000003c0)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x8}, 0x8) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x2000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x401f000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x3000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x1}, 0x20001358) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x1, @empty, 0x6a7}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000380)={r8, 0x5751}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000081c9158d8c45e002e0003000000"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x2f, 0x3f, 0x5, 0x1, 0x28, @private0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x32}}, 0x1, 0x1, 0x2, 0x10000}}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) [ 693.998552][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.018656][ T1947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.031131][ T28] audit: type=1804 audit(1594825900.286:1042): pid=1947 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/1005/bus" dev="sda1" ino=16384 res=1 [ 694.056820][ T1954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.066262][ T1947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 694.076972][ T28] audit: type=1804 audit(1594825900.316:1043): pid=1954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/1005/bus" dev="sda1" ino=16384 res=1 [ 694.101326][ T28] audit: type=1804 audit(1594825900.316:1044): pid=1954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir684812002/syzkaller.I43xsQ/1005/bus" dev="sda1" ino=16384 res=1 15:11:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:40 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4d01000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x4000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @empty}, &(0x7f0000000100)=0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2, {r2}}, 0x58) 15:11:40 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x5000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x8000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x9000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:40 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x200400, 0x0) ioctl(r0, 0x1, &(0x7f0000000040)="c592e96357e891eec4ce9535f70d83b98529c5b0c935c8092f9a9c10547a94e09a1cb7fcabe2e73052fe7881eba8d1aa535377b7802835bccbc8e7d3a8a3065147746563b8932bca51278fb815db2dd4bc9e1cbd32dd2d5aafbd346bb4c5a089ac5030d87f5dc46391ec048077bf7f21353d") clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xf000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:41 executing program 4: clone3(&(0x7f0000001300)={0x1000900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) 15:11:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x60000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x5000000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:41 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x7c15000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x63080000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:41 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x8, 0x0, 0x0, 0x0}, 0x20) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xff}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge0\x00'}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x5) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x703283, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0x4}) 15:11:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x9effffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:41 executing program 4: clone3(&(0x7f0000001300)={0x10000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) 15:11:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x3000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xefffffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:42 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xd8, 0x93, 0x3, 0x1, 0x7, [{0x56a, 0xda9, 0x5, [], 0x1}, {0x56, 0x41b, 0x97b, [], 0x2080}, {0x8001, 0x100000001, 0x20, [], 0x480}, {0x61201646, 0x6, 0x92e, [], 0x2800}, {0x5, 0x7, 0x100000001, [], 0x700}, {0x3, 0x0, 0x1, [], 0x2}, {0x3, 0x6, 0x80000000, [], 0x3000}]}) 15:11:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x400000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:42 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "2324f6ef8fed5abf", "6294258e67b1e2258b66faf391a10637", "b304d487", "e94b5a7a9137c373"}, 0x28) 15:11:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x9a02000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xf0ffffff, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfeffffff00000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:42 executing program 4: chmod(&(0x7f0000000000)='./file0\x00', 0x5) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000040005d68000000000000000000000000000000004ad3e40ac5d48124a7b3957ded"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="000000800000000028001280090801007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf250d0000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006361696630000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069705f76746930000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5200018008000200", @ANYRES32=r1, @ANYBLOB="14000200736974300000000000000000000000001400020076657468305f766c616e000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="18000180140002006272696467655f736c6176655f3100000c0001800800030000000000200001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r9, @ANYBLOB], 0xf8}, 0x1, 0x0, 0x0, 0x8001}, 0x40000d1) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xffffff7f, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 696.317517][ T2122] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.336586][ T2122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xffffff9e, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 696.360680][ T2122] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.377368][ T2136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 696.423327][ T2122] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xffffffef, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:43 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6ffe000000000000000004000000140003800d0001007564703a73797a3100000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01000000000000000000090000003c00038008000100000000001400020076657468300000000000000000000000080003000000000014000600"/74], 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2a}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x90}, 0x240000c0) 15:11:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x400000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0xfffffff0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x11000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:43 executing program 4: get_thread_area(&(0x7f0000000000)={0xffff7fff, 0x20000800, 0x400, 0x0, 0x2, 0x0, 0x1}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffff7f00000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:43 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r4, 0x13) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r5, 0x0, 0x2, &(0x7f0000000080)='/\x00', 0xffffffffffffffff}, 0x30) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r7, 0x13) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f00000000c0)={0x0, 0x0}) clone3(&(0x7f0000000180)={0x9a8964dd190c885a, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0x0, r9], 0x3}, 0x58) 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x2, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:43 executing program 4: r0 = getuid() r1 = syz_open_dev$audion(0x0, 0xfffffffffffffff7, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xff04) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r3, 0x0, r6, r4}, 0xb8fb, 0x0, 0x0, 0x8000}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, r2, r4}, 0xc) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [{0x2, 0x4, r0}], {0x4, 0x5}, [{0x8, 0x5, r4}], {0x10, 0x1}, {0x20, 0x6}}, 0x34, 0x3) r7 = eventfd(0x1) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/122, 0x7a}], 0x5, 0x5) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x3, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x4, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x5, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r2, 0x58d}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000001600)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020225bd7000fedbdf250400000005000600200000001400010000000000000000000000ffffffffffff0500060009000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x40080c0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r5) 15:11:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x12000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x400000000000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:44 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffff00000000, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) tkill(0x0, 0x13) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100230040000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "607c4a3fffd29437526b42244f"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) clone3(&(0x7f00000001c0)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f0000000140)=""/58, &(0x7f0000000180)=[r1, 0x0], 0x2, {r3}}, 0x58) 15:11:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x9, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101c00, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000000c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xf, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 15:11:44 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x60, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x20000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x6000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r2, 0x309, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8}}]}, 0x124}}, 0x40094) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x300, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x500, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 4: r0 = clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r2, 0x13) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) accept(r3, 0x0, &(0x7f0000000000)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) kcmp(r0, r2, 0x1, r6, r4) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x863, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x900, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x1, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000400)={0x7, 0x1ff, 0x80}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0xffffff01, 0x6, 0x3], 0x3, 0x80800, 0x0, r4}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', r6}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20048000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001014280226bd7000fcdbdf2508004a0000000000080015edffffff0008004f000000000008004a000100000008004b0013000000080015000400000008004a0001faff5d"], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x10) [ 699.027484][ T2350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:11:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xf00, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="1400000013000507ed008064d600100034000080", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$kcm(r1, &(0x7f000000cb80)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r3, 0x15}, 0x10) 15:11:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x25000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x6000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:45 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) time(&(0x7f0000000080)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x3000) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={r2, 0xf}) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000000c0)={0x3, 0x7a7, 0x401}) 15:11:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x3}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:45 executing program 4: clone3(&(0x7f0000001300)={0x80000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x6308, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:46 executing program 4: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}) 15:11:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x30000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:46 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x101000, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 15:11:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x8000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:46 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x34000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x40000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:46 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup(r0) sendfile(r3, r4, 0x0, 0x8000fffffff6) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x400300, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x1000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 700.540428][ T28] audit: type=1804 audit(1594825906.796:1045): pid=2464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/742/bus" dev="sda1" ino=16338 res=1 15:11:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x401f0000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x2000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x5}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x3000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x6}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x4000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:47 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x3f4, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9f, 0x3, "5f9ce025efb017343ea2bbd355c468150865c7cfb8ca77a721e1ea57baeb68ee36d7a6a654996a7715d7eeef756d6ab0cec2c3031942c6f0991e69cf784f0e59036f5e27d1f674b44306abdd13940cf96e39d946c842cabcd557fbd464ee1211b3f74b4ea41835c10103ff25f0ba6bf6edc15a46565b7d4bc2cca1aa405f257033e02eecba39b698cb6998fff7a4758f3b325b5b44f7416912db11"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4fef70985546671e624f942521acb990c1f99c54"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x81, 0x3, "ae52b2f347f267db22b9b7b51038fafcf369ffe37941fdf8b655115c148d23b60a0c0907026cf3a374788ad5280fce9a852b9dff75f75b3c9357f50a7fb9b3a54f017c3610b702916dfc2f8369d3e836b0f3f414710a3fdc3df8c7c6742b3f672458bd8ba76501ef04a6f61fb1daad47246a2686e279b6a990c14d46e7"}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9c07}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xafb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76df}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffffff, @loopback, 0x80000001}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @loopback, 0x6de}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, [], 0x37}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1f}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x65d}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r2}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0xffffd406, 0x8}, 0xc) 15:11:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x7}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:47 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x5000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:47 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r3, 0x13) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x400, 0x0) kcmp(r1, r3, 0x3, r5, r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000000)) 15:11:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4d010000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x8000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:47 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x9, 0xfffffffc}]}, 0xc, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) io_setup(0x3f, &(0x7f0000000100)) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x3ff) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x9000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xf000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x60000000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:48 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/177, 0xb1, 0x40002040, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x8}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:48 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000040)) 15:11:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x63080000, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x9effffff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:48 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0x0, 0x0, &(0x7f00000012c0)}, 0x58) 15:11:48 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x16241, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) 15:11:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xefffffff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:48 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000100030109022400010101800509040007020701010109050102400020c0bde70582022000000901807e15c932c17aab8b3d087766734166d019b86df6756c0545560bcb929c3562714fe81ffdab8d457145fdcaab11349e114f3ec45a43b05e704c106f1a4f02e14a05035e50847dc0416821a98ea4e23d4734ffb92a299c420a2198033491"], &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x20, 0x5, 0x4, 0x40, 0x2}, 0x25, &(0x7f0000000080)={0x5, 0xf, 0x25, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x1, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb0, 0x9, 0x1f, 0x7, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x6, 0x96, 0x401, 0x7}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc04}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "f92f39c7b9f55d4b8e8f9d229c5bc648e3c416f5b4b818f6a58e0952"}}, {0x8e, &(0x7f00000001c0)=@string={0x8e, 0x3, "d7d831393e1dcde9bd3f1d865bdd91c9ebc507081965a397a1544d46d9d3739fc332c0fbec737556964b69279f111b20c7e2b592d42a3a1c5399b83903c52ac6a138d535152b434d24726d037a0bd2aa9451911fb971d2f41882de3ede21b86220e4541ccfc326d3030ab9f08bc36391a1e5981ed142f2af05de28b1a8f15393fc4acd400d2f1f6d7e50c5fd"}}, {0x90, &(0x7f0000000280)=@string={0x90, 0x3, "be32a56bc2650c9c51df7af9f604eb7bd9858185b9fbb61447e30a5ce938e94d6a7489db3d564ea5be4aae61bc5f03316309b5cda0ece851cda60cd563d6d4d3f29a79d60e6b0429270e630495d7580ac782f546829adfa17638b405bb04c4e098b598d191b0939eb4b27f9b6ee10ebb5201f0cc3783fb6f4b97782b1f10d980c65bde49a22292022df3d624985e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 15:11:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:49 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xa}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x8}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xffffff7f, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7c150000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:49 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) getpgid(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) 15:11:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xffffff9e, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:49 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/27) 15:11:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xffffffef, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0xfffffff0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:49 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r1, 0x13) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) 15:11:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xb}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9a020000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x2}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x3}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x4}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x5}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x8}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfdfdffff) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xd}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x9}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xe}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0xf}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x60}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfeffffff) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x10}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0xf}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffdfd) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x60}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x11}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfeffffff) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x300}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x18}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x500}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x863}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:52 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x11000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xffffff7f) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0xf00}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffdfd) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x6000}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x6308}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x3}]}, 0x1c}}, 0x0) 15:11:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x4}]}, 0x1c}}, 0x0) [ 707.099230][ T3008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 707.109584][ T3010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x2}]}, 0x1c}}, 0x0) [ 707.148686][ T3013] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 707.165012][ T3014] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 15:11:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x12000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x5}]}, 0x1c}}, 0x0) 15:11:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffe) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:53 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x100000001) clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r0, 0xffffffffffffffff], 0x2}, 0x58) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x6}]}, 0x1c}}, 0x0) 15:11:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x500) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) [ 707.745328][ T3053] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 707.767820][ T3056] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x8}]}, 0x1c}}, 0x0) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x9}]}, 0x1c}}, 0x0) [ 707.863863][ T3066] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 707.877634][ T3069] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 15:11:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x14d}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xa}]}, 0x1c}}, 0x0) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0xb}]}, 0x1c}}, 0x0) 15:11:54 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x25000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x10}]}, 0x1c}}, 0x0) 15:11:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x29a}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x11}]}, 0x1c}}, 0x0) [ 708.546534][ T3115] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 708.555809][ T3116] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 15:11:54 executing program 4: clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x20001358) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0xa, 0xc5c41a7e3c2c8554, r1, 0xffca6000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/145) 15:11:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x12}]}, 0x1c}}, 0x0) 15:11:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x13}]}, 0x1c}}, 0x0) [ 708.679698][ T3136] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 708.698310][ T3141] netlink: 'syz-executor.3': attribute type 18 has an invalid length. 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x116}]}, 0x1c}}, 0x0) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x125}]}, 0x1c}}, 0x0) 15:11:55 executing program 5: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1030fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x1f) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup(r0) r5 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r5, 0xcb9bf000) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4001, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_void(r6, 0x1, 0x48, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffff6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r7) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$clear(0x7, r8) [ 709.145346][ T28] audit: type=1804 audit(1594825915.407:1046): pid=3168 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir343669860/syzkaller.dFViw9/753/bus" dev="sda1" ino=16316 res=1 15:11:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x40000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x2001}]}, 0x1c}}, 0x0) 15:11:55 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7d0000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x300}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x4801}]}, 0x1c}}, 0x0) 15:11:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9a02) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x10}}, 0x0) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x14}}, 0x0) 15:11:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0xc0}}, 0x0) 15:11:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0xec0}}, 0x0) 15:11:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x33fe0}}, 0x0) 15:11:56 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 710.092254][ T3231] FAULT_INJECTION: forcing a failure. [ 710.092254][ T3231] name failslab, interval 1, probability 0, space 0, times 0 [ 710.119815][ T3231] CPU: 1 PID: 3231 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 710.128421][ T3231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.138462][ T3231] Call Trace: [ 710.141795][ T3231] dump_stack+0x10f/0x19d [ 710.146095][ T3231] should_fail+0x23c/0x250 [ 710.150534][ T3231] __should_failslab+0x81/0x90 [ 710.155266][ T3231] should_failslab+0x5/0x20 [ 710.159737][ T3231] kmem_cache_alloc_node+0x38/0x260 [ 710.164997][ T3231] ? __alloc_skb+0x97/0x2e0 [ 710.169468][ T3231] __alloc_skb+0x97/0x2e0 [ 710.173805][ T3231] ? netlink_autobind+0x143/0x150 [ 710.178821][ T3231] netlink_sendmsg+0x4b1/0x7a0 [ 710.183594][ T3231] ? netlink_getsockopt+0x690/0x690 [ 710.188770][ T3231] ____sys_sendmsg+0x360/0x4d0 [ 710.193518][ T3231] ? import_iovec+0x171/0x1c0 [ 710.198183][ T3231] __sys_sendmsg+0x1df/0x260 [ 710.202763][ T3231] ? __this_cpu_preempt_check+0x18/0x20 [ 710.208303][ T3231] ? vfs_write+0x480/0x690 [ 710.212706][ T3231] ? __fget_light+0x219/0x260 [ 710.217371][ T3231] ? check_preemption_disabled+0x51/0x140 [ 710.223066][ T3231] ? debug_smp_processor_id+0x18/0x20 [ 710.228411][ T3231] ? fpregs_assert_state_consistent+0x7e/0x90 [ 710.234724][ T3231] __x64_sys_sendmsg+0x42/0x50 [ 710.239477][ T3231] do_syscall_64+0x51/0xb0 [ 710.243957][ T3231] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 710.249830][ T3231] RIP: 0033:0x45cba9 [ 710.253741][ T3231] Code: Bad RIP value. [ 710.257784][ T3231] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.266186][ T3231] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 710.274338][ T3231] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 710.282293][ T3231] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:11:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x200002dc}}, 0x0) 15:11:56 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x500}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 710.290311][ T3231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 710.298266][ T3231] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 15:11:56 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 710.385510][ T3250] FAULT_INJECTION: forcing a failure. [ 710.385510][ T3250] name failslab, interval 1, probability 0, space 0, times 0 [ 710.397538][ T3252] FAULT_INJECTION: forcing a failure. [ 710.397538][ T3252] name failslab, interval 1, probability 0, space 0, times 0 [ 710.398230][ T3250] CPU: 1 PID: 3250 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 710.419387][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.429502][ T3250] Call Trace: [ 710.432779][ T3250] dump_stack+0x10f/0x19d [ 710.437098][ T3250] should_fail+0x23c/0x250 [ 710.441503][ T3250] __should_failslab+0x81/0x90 [ 710.446251][ T3250] should_failslab+0x5/0x20 [ 710.450741][ T3250] kmem_cache_alloc_node_trace+0x3b/0x260 [ 710.456469][ T3250] ? __kmalloc_node_track_caller+0x30/0x40 [ 710.462260][ T3250] ? kmem_cache_alloc_node+0x12b/0x260 [ 710.467711][ T3250] ? netlink_sendmsg+0x4b1/0x7a0 [ 710.472636][ T3250] __kmalloc_node_track_caller+0x30/0x40 [ 710.478259][ T3250] __alloc_skb+0xd3/0x2e0 [ 710.482599][ T3250] netlink_sendmsg+0x4b1/0x7a0 [ 710.487354][ T3250] ? netlink_getsockopt+0x690/0x690 [ 710.492530][ T3250] ____sys_sendmsg+0x360/0x4d0 [ 710.497283][ T3250] ? import_iovec+0x171/0x1c0 [ 710.502208][ T3250] __sys_sendmsg+0x1df/0x260 [ 710.506779][ T3250] ? __this_cpu_preempt_check+0x18/0x20 [ 710.512332][ T3250] ? vfs_write+0x480/0x690 [ 710.516732][ T3250] ? __fget_light+0x219/0x260 [ 710.521451][ T3250] ? check_preemption_disabled+0x51/0x140 [ 710.527174][ T3250] ? debug_smp_processor_id+0x18/0x20 [ 710.532531][ T3250] ? fpregs_assert_state_consistent+0x7e/0x90 [ 710.538583][ T3250] __x64_sys_sendmsg+0x42/0x50 [ 710.543327][ T3250] do_syscall_64+0x51/0xb0 [ 710.547732][ T3250] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 710.553607][ T3250] RIP: 0033:0x45cba9 [ 710.557478][ T3250] Code: Bad RIP value. [ 710.561725][ T3250] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.570108][ T3250] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 710.578126][ T3250] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 710.586074][ T3250] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 710.594030][ T3250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 710.602077][ T3250] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 [ 710.610048][ T3252] CPU: 0 PID: 3252 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 710.618624][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.628668][ T3252] Call Trace: [ 710.631946][ T3252] dump_stack+0x10f/0x19d 15:11:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x7ffff000}}, 0x0) [ 710.636270][ T3252] should_fail+0x23c/0x250 [ 710.640672][ T3252] __should_failslab+0x81/0x90 [ 710.645420][ T3252] should_failslab+0x5/0x20 [ 710.649948][ T3252] kmem_cache_alloc_trace+0x32/0x2c0 [ 710.655286][ T3252] ? snd_pcm_oss_change_params_locked+0xa9/0x2730 [ 710.661693][ T3252] snd_pcm_oss_change_params_locked+0xa9/0x2730 [ 710.667919][ T3252] ? path_openat+0x1e48/0x20e0 [ 710.672843][ T3252] ? __rcu_read_unlock+0x4b/0x260 [ 710.677853][ T3252] ? aa_file_perm+0x129/0xe00 [ 710.682519][ T3252] ? kstrtoull+0x30b/0x350 15:11:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x600}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 710.686928][ T3252] snd_pcm_oss_write+0x1ca/0x890 [ 710.691858][ T3252] ? rw_verify_area+0x12c/0x240 [ 710.696692][ T3252] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 710.701701][ T3252] vfs_write+0x1d6/0x690 [ 710.705927][ T3252] ? __fget_light+0x219/0x260 [ 710.710694][ T3252] ksys_write+0xce/0x180 [ 710.714924][ T3252] __x64_sys_write+0x3e/0x50 [ 710.719529][ T3252] do_syscall_64+0x51/0xb0 [ 710.724623][ T3252] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 710.730502][ T3252] RIP: 0033:0x45cba9 15:11:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0xfffffdef}}, 0x0) 15:11:57 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 710.734371][ T3252] Code: Bad RIP value. [ 710.738419][ T3252] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 710.746870][ T3252] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 710.754851][ T3252] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 710.762815][ T3252] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 710.770799][ T3252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 710.778786][ T3252] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:11:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x700}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 710.814596][ T3278] FAULT_INJECTION: forcing a failure. [ 710.814596][ T3278] name failslab, interval 1, probability 0, space 0, times 0 [ 710.830058][ T3278] CPU: 0 PID: 3278 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 710.840470][ T3278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.850512][ T3278] Call Trace: [ 710.853829][ T3278] dump_stack+0x10f/0x19d [ 710.858151][ T3278] should_fail+0x23c/0x250 [ 710.862595][ T3278] __should_failslab+0x81/0x90 [ 710.867352][ T3278] should_failslab+0x5/0x20 [ 710.871847][ T3278] kmem_cache_alloc+0x29/0x2b0 [ 710.876669][ T3278] ? skb_clone+0x131/0x1f0 [ 710.881081][ T3278] skb_clone+0x131/0x1f0 [ 710.885323][ T3278] netlink_deliver_tap+0x2a0/0x470 [ 710.890485][ T3278] netlink_unicast+0x5ca/0x6b0 [ 710.895233][ T3278] netlink_sendmsg+0x6d8/0x7a0 [ 710.899979][ T3278] ? netlink_getsockopt+0x690/0x690 [ 710.905156][ T3278] ____sys_sendmsg+0x360/0x4d0 [ 710.910042][ T3278] ? import_iovec+0x171/0x1c0 [ 710.914717][ T3278] __sys_sendmsg+0x1df/0x260 [ 710.919284][ T3278] ? __this_cpu_preempt_check+0x18/0x20 [ 710.924825][ T3278] ? vfs_write+0x480/0x690 [ 710.929273][ T3278] ? __fget_light+0x219/0x260 [ 710.933954][ T3278] ? check_preemption_disabled+0x51/0x140 [ 710.939682][ T3278] ? debug_smp_processor_id+0x18/0x20 [ 710.945046][ T3278] ? fpregs_assert_state_consistent+0x7e/0x90 [ 710.951086][ T3278] __x64_sys_sendmsg+0x42/0x50 [ 710.955822][ T3278] do_syscall_64+0x51/0xb0 [ 710.960293][ T3278] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 710.966158][ T3278] RIP: 0033:0x45cba9 [ 710.970029][ T3278] Code: Bad RIP value. [ 710.974072][ T3278] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.982475][ T3278] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 710.990421][ T3278] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 710.998424][ T3278] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.006371][ T3278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 15:11:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xa00}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 711.014322][ T3278] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 15:11:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfdfdffff) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x2}, 0x0) 15:11:57 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xb00}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x6}, 0x0) [ 711.168314][ T3300] FAULT_INJECTION: forcing a failure. [ 711.168314][ T3300] name failslab, interval 1, probability 0, space 0, times 0 [ 711.203908][ T3300] CPU: 0 PID: 3300 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 711.212522][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.222589][ T3300] Call Trace: [ 711.225899][ T3300] dump_stack+0x10f/0x19d [ 711.230210][ T3300] should_fail+0x23c/0x250 [ 711.234602][ T3300] __should_failslab+0x81/0x90 [ 711.239338][ T3300] should_failslab+0x5/0x20 [ 711.243814][ T3300] kmem_cache_alloc_trace+0x32/0x2c0 [ 711.249104][ T3300] ? snd_pcm_oss_change_params_locked+0xce/0x2730 [ 711.255498][ T3300] snd_pcm_oss_change_params_locked+0xce/0x2730 [ 711.261710][ T3300] ? path_openat+0x1e48/0x20e0 [ 711.266492][ T3300] ? __rcu_read_unlock+0x4b/0x260 [ 711.271488][ T3300] ? aa_file_perm+0x129/0xe00 [ 711.276139][ T3300] ? kstrtoull+0x30b/0x350 [ 711.280591][ T3300] snd_pcm_oss_write+0x1ca/0x890 [ 711.285936][ T3300] ? rw_verify_area+0x12c/0x240 [ 711.290760][ T3300] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 711.295771][ T3300] vfs_write+0x1d6/0x690 [ 711.299999][ T3300] ? __fget_light+0x219/0x260 [ 711.304649][ T3300] ksys_write+0xce/0x180 [ 711.308965][ T3300] __x64_sys_write+0x3e/0x50 [ 711.313786][ T3300] do_syscall_64+0x51/0xb0 [ 711.318224][ T3300] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 711.324103][ T3300] RIP: 0033:0x45cba9 [ 711.327967][ T3300] Code: Bad RIP value. [ 711.332003][ T3300] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.340830][ T3300] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 711.349036][ T3300] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 711.356980][ T3300] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 711.364943][ T3300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 711.372896][ T3300] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:11:57 executing program 5 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:11:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x8}, 0x0) [ 711.474290][ T3329] FAULT_INJECTION: forcing a failure. [ 711.474290][ T3329] name failslab, interval 1, probability 0, space 0, times 0 [ 711.516241][ T3329] CPU: 1 PID: 3329 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 711.524846][ T3329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.534898][ T3329] Call Trace: [ 711.538172][ T3329] dump_stack+0x10f/0x19d [ 711.542483][ T3329] should_fail+0x23c/0x250 [ 711.546946][ T3329] __should_failslab+0x81/0x90 [ 711.551733][ T3329] ? genl_family_rcv_msg_attrs_parse+0x7b/0x190 [ 711.557956][ T3329] should_failslab+0x5/0x20 [ 711.562519][ T3329] __kmalloc+0x43/0x2d0 [ 711.566671][ T3329] genl_family_rcv_msg_attrs_parse+0x7b/0x190 [ 711.572724][ T3329] ? ns_capable+0x86/0xb0 [ 711.577101][ T3329] genl_rcv_msg+0x438/0x640 [ 711.581584][ T3329] ? __skb_clone+0x2b9/0x2d0 [ 711.586231][ T3329] netlink_rcv_skb+0x13e/0x240 [ 711.590983][ T3329] ? genl_rcv+0x40/0x40 [ 711.595192][ T3329] genl_rcv+0x24/0x40 [ 711.599166][ T3329] netlink_unicast+0x5e2/0x6b0 [ 711.603944][ T3329] netlink_sendmsg+0x6d8/0x7a0 [ 711.608749][ T3329] ? netlink_getsockopt+0x690/0x690 [ 711.613918][ T3329] ____sys_sendmsg+0x360/0x4d0 [ 711.618656][ T3329] ? import_iovec+0x171/0x1c0 [ 711.623305][ T3329] __sys_sendmsg+0x1df/0x260 [ 711.627872][ T3329] ? __this_cpu_preempt_check+0x18/0x20 [ 711.633422][ T3329] ? vfs_write+0x480/0x690 [ 711.637811][ T3329] ? __fget_light+0x219/0x260 [ 711.642536][ T3329] ? check_preemption_disabled+0x51/0x140 [ 711.648228][ T3329] ? debug_smp_processor_id+0x18/0x20 [ 711.653569][ T3329] ? fpregs_assert_state_consistent+0x7e/0x90 [ 711.659623][ T3329] __x64_sys_sendmsg+0x42/0x50 [ 711.664356][ T3329] do_syscall_64+0x51/0xb0 [ 711.668783][ T3329] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 711.674739][ T3329] RIP: 0033:0x45cba9 [ 711.678601][ T3329] Code: Bad RIP value. [ 711.682638][ T3329] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.691081][ T3329] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 711.699031][ T3329] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 711.706980][ T3329] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x300}, 0x0) [ 711.715108][ T3329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 711.723056][ T3329] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 15:11:58 executing program 5 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:11:58 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 711.799877][ T3343] FAULT_INJECTION: forcing a failure. [ 711.799877][ T3343] name failslab, interval 1, probability 0, space 0, times 0 [ 711.814902][ T3343] CPU: 1 PID: 3343 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 711.823931][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.833972][ T3343] Call Trace: [ 711.837253][ T3343] dump_stack+0x10f/0x19d [ 711.841638][ T3343] should_fail+0x23c/0x250 [ 711.846041][ T3343] __should_failslab+0x81/0x90 [ 711.849653][ T3345] FAULT_INJECTION: forcing a failure. [ 711.849653][ T3345] name failslab, interval 1, probability 0, space 0, times 0 [ 711.850787][ T3343] should_failslab+0x5/0x20 [ 711.850798][ T3343] kmem_cache_alloc_node+0x38/0x260 [ 711.850813][ T3343] ? __alloc_skb+0x97/0x2e0 [ 711.877778][ T3343] __alloc_skb+0x97/0x2e0 [ 711.882096][ T3343] netlink_ack+0x1f8/0x5d0 [ 711.886505][ T3343] netlink_rcv_skb+0x1b8/0x240 [ 711.891298][ T3343] ? genl_rcv+0x40/0x40 [ 711.895440][ T3343] genl_rcv+0x24/0x40 [ 711.899451][ T3343] netlink_unicast+0x5e2/0x6b0 [ 711.904274][ T3343] netlink_sendmsg+0x6d8/0x7a0 [ 711.909076][ T3343] ? netlink_getsockopt+0x690/0x690 [ 711.914254][ T3343] ____sys_sendmsg+0x360/0x4d0 [ 711.919000][ T3343] ? import_iovec+0x171/0x1c0 [ 711.923668][ T3343] __sys_sendmsg+0x1df/0x260 [ 711.928243][ T3343] ? __this_cpu_preempt_check+0x18/0x20 [ 711.933815][ T3343] ? vfs_write+0x480/0x690 [ 711.938270][ T3343] ? __fget_light+0x219/0x260 [ 711.942948][ T3343] ? check_preemption_disabled+0x51/0x140 [ 711.948663][ T3343] ? debug_smp_processor_id+0x18/0x20 [ 711.954017][ T3343] ? fpregs_assert_state_consistent+0x7e/0x90 [ 711.960071][ T3343] __x64_sys_sendmsg+0x42/0x50 [ 711.964817][ T3343] do_syscall_64+0x51/0xb0 [ 711.969388][ T3343] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 711.975258][ T3343] RIP: 0033:0x45cba9 [ 711.979126][ T3343] Code: Bad RIP value. [ 711.983165][ T3343] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.991554][ T3343] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 711.999528][ T3343] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 712.007564][ T3343] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 712.015554][ T3343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 712.023561][ T3343] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 [ 712.031699][ T3345] CPU: 0 PID: 3345 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 712.040290][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.050323][ T3345] Call Trace: [ 712.053601][ T3345] dump_stack+0x10f/0x19d [ 712.057917][ T3345] should_fail+0x23c/0x250 [ 712.062487][ T3345] __should_failslab+0x81/0x90 [ 712.067232][ T3345] should_failslab+0x5/0x20 [ 712.071722][ T3345] kmem_cache_alloc_trace+0x32/0x2c0 [ 712.076996][ T3345] ? snd_pcm_oss_change_params_locked+0xf3/0x2730 [ 712.083430][ T3345] snd_pcm_oss_change_params_locked+0xf3/0x2730 [ 712.089658][ T3345] ? path_openat+0x1e48/0x20e0 [ 712.094408][ T3345] ? __rcu_read_unlock+0x4b/0x260 15:11:58 executing program 5 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:11:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffdfd) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x2}, 0x0) 15:11:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x20000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 712.099419][ T3345] ? aa_file_perm+0x129/0xe00 [ 712.104157][ T3345] ? kstrtoull+0x30b/0x350 [ 712.108594][ T3345] snd_pcm_oss_write+0x1ca/0x890 [ 712.113546][ T3345] ? rw_verify_area+0x12c/0x240 [ 712.118406][ T3345] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 712.123596][ T3345] vfs_write+0x1d6/0x690 [ 712.127829][ T3345] ? __fget_light+0x219/0x260 [ 712.132494][ T3345] ksys_write+0xce/0x180 [ 712.136726][ T3345] __x64_sys_write+0x3e/0x50 [ 712.141364][ T3345] do_syscall_64+0x51/0xb0 [ 712.145773][ T3345] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 712.151644][ T3345] RIP: 0033:0x45cba9 [ 712.155518][ T3345] Code: Bad RIP value. [ 712.159559][ T3345] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 712.167951][ T3345] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 712.175909][ T3345] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 712.183861][ T3345] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 712.191842][ T3345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 712.199792][ T3345] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:11:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xd00}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:58 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x3}, 0x0) [ 712.248249][ T3360] FAULT_INJECTION: forcing a failure. [ 712.248249][ T3360] name failslab, interval 1, probability 0, space 0, times 0 [ 712.273417][ T3360] CPU: 0 PID: 3360 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 712.282014][ T3360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.292061][ T3360] Call Trace: [ 712.295340][ T3360] dump_stack+0x10f/0x19d [ 712.299661][ T3360] should_fail+0x23c/0x250 [ 712.304068][ T3360] __should_failslab+0x81/0x90 [ 712.308906][ T3360] should_failslab+0x5/0x20 [ 712.313392][ T3360] kmem_cache_alloc_node_trace+0x3b/0x260 [ 712.319094][ T3360] ? __kmalloc_node_track_caller+0x30/0x40 [ 712.324883][ T3360] ? kmem_cache_alloc_node+0x12b/0x260 [ 712.330358][ T3360] ? netlink_ack+0x1f8/0x5d0 [ 712.334930][ T3360] __kmalloc_node_track_caller+0x30/0x40 [ 712.340889][ T3360] __alloc_skb+0xd3/0x2e0 [ 712.345207][ T3360] netlink_ack+0x1f8/0x5d0 [ 712.349611][ T3360] netlink_rcv_skb+0x1b8/0x240 [ 712.354356][ T3360] ? genl_rcv+0x40/0x40 [ 712.358500][ T3360] genl_rcv+0x24/0x40 [ 712.362468][ T3360] netlink_unicast+0x5e2/0x6b0 [ 712.367220][ T3360] netlink_sendmsg+0x6d8/0x7a0 [ 712.371974][ T3360] ? netlink_getsockopt+0x690/0x690 [ 712.377157][ T3360] ____sys_sendmsg+0x360/0x4d0 [ 712.381967][ T3360] ? import_iovec+0x171/0x1c0 [ 712.386622][ T3360] __sys_sendmsg+0x1df/0x260 [ 712.391202][ T3360] ? __this_cpu_preempt_check+0x18/0x20 [ 712.396736][ T3360] ? vfs_write+0x480/0x690 [ 712.401188][ T3360] ? __fget_light+0x219/0x260 [ 712.405854][ T3360] ? check_preemption_disabled+0x51/0x140 [ 712.411557][ T3360] ? debug_smp_processor_id+0x18/0x20 [ 712.416924][ T3360] ? fpregs_assert_state_consistent+0x7e/0x90 [ 712.422997][ T3360] __x64_sys_sendmsg+0x42/0x50 [ 712.427746][ T3360] do_syscall_64+0x51/0xb0 [ 712.432222][ T3360] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 712.438095][ T3360] RIP: 0033:0x45cba9 [ 712.441971][ T3360] Code: Bad RIP value. 15:11:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x4}, 0x0) [ 712.446019][ T3360] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.454407][ T3360] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 712.462393][ T3360] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 712.470405][ T3360] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 712.478360][ T3360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 712.486749][ T3360] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 [ 712.516162][ T3382] FAULT_INJECTION: forcing a failure. [ 712.516162][ T3382] name failslab, interval 1, probability 0, space 0, times 0 [ 712.528837][ T3382] CPU: 0 PID: 3382 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 712.537400][ T3382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.547431][ T3382] Call Trace: [ 712.550714][ T3382] dump_stack+0x10f/0x19d [ 712.555018][ T3382] should_fail+0x23c/0x250 [ 712.559449][ T3382] __should_failslab+0x81/0x90 [ 712.564214][ T3382] ? kmalloc_array+0x2d/0x40 [ 712.568803][ T3382] should_failslab+0x5/0x20 [ 712.573292][ T3382] __kmalloc+0x43/0x2d0 [ 712.577428][ T3382] kmalloc_array+0x2d/0x40 [ 712.581819][ T3382] constrain_params_by_rules+0x70/0x860 [ 712.587338][ T3382] ? fsnotify+0x9c2/0x9e0 [ 712.591640][ T3382] ? fsnotify_parent+0x58/0x180 [ 712.596464][ T3382] ? bcmp+0x33/0x60 [ 712.600312][ T3382] ? snd_interval_refine+0x3d2/0x400 [ 712.605639][ T3382] ? constrain_interval_params+0x275/0x2b0 [ 712.611439][ T3382] snd_pcm_hw_refine+0x11b/0x160 [ 712.616421][ T3382] snd_pcm_oss_change_params_locked+0x5ac/0x2730 [ 712.622725][ T3382] ? aa_file_perm+0x129/0xe00 [ 712.627407][ T3382] snd_pcm_oss_write+0x1ca/0x890 [ 712.632318][ T3382] ? rw_verify_area+0x12c/0x240 [ 712.637193][ T3382] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 712.642289][ T3382] vfs_write+0x1d6/0x690 [ 712.646513][ T3382] ? __fget_light+0x219/0x260 [ 712.651190][ T3382] ksys_write+0xce/0x180 [ 712.655412][ T3382] __x64_sys_write+0x3e/0x50 [ 712.659979][ T3382] do_syscall_64+0x51/0xb0 [ 712.664380][ T3382] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 712.670246][ T3382] RIP: 0033:0x45cba9 [ 712.674304][ T3382] Code: Bad RIP value. [ 712.678379][ T3382] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 712.686940][ T3382] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 712.694886][ T3382] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 712.702830][ T3382] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x5}, 0x0) 15:11:59 executing program 5 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 712.710817][ T3382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 712.718783][ T3382] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:11:59 executing program 4 (fault-call:1 fault-nth:4): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x10000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:59 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd0070000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 712.860477][ T3396] FAULT_INJECTION: forcing a failure. [ 712.860477][ T3396] name failslab, interval 1, probability 0, space 0, times 0 [ 712.874196][ T3397] FAULT_INJECTION: forcing a failure. [ 712.874196][ T3397] name failslab, interval 1, probability 0, space 0, times 0 [ 712.904319][ T3396] CPU: 0 PID: 3396 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 712.913008][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.923043][ T3396] Call Trace: [ 712.926333][ T3396] dump_stack+0x10f/0x19d [ 712.930651][ T3396] should_fail+0x23c/0x250 [ 712.935092][ T3396] __should_failslab+0x81/0x90 [ 712.939844][ T3396] should_failslab+0x5/0x20 [ 712.944333][ T3396] kmem_cache_alloc_trace+0x32/0x2c0 [ 712.949607][ T3396] ? snd_pcm_oss_change_params_locked+0x665/0x2730 [ 712.956702][ T3396] snd_pcm_oss_change_params_locked+0x665/0x2730 [ 712.963019][ T3396] ? aa_file_perm+0x129/0xe00 [ 712.967685][ T3396] snd_pcm_oss_write+0x1ca/0x890 [ 712.972676][ T3396] ? rw_verify_area+0x12c/0x240 [ 712.977517][ T3396] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 712.982527][ T3396] vfs_write+0x1d6/0x690 [ 712.986754][ T3396] ? __fget_light+0x219/0x260 [ 712.991478][ T3396] ksys_write+0xce/0x180 [ 712.995706][ T3396] __x64_sys_write+0x3e/0x50 [ 713.000278][ T3396] do_syscall_64+0x51/0xb0 [ 713.004680][ T3396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 713.010555][ T3396] RIP: 0033:0x45cba9 [ 713.014425][ T3396] Code: Bad RIP value. [ 713.018466][ T3396] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.026908][ T3396] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 713.034859][ T3396] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 713.042874][ T3396] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.050827][ T3396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.058818][ T3396] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 [ 713.066798][ T3397] CPU: 1 PID: 3397 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 713.084494][ T3397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.094533][ T3397] Call Trace: [ 713.097887][ T3397] dump_stack+0x10f/0x19d [ 713.102213][ T3397] should_fail+0x23c/0x250 [ 713.106619][ T3397] __should_failslab+0x81/0x90 [ 713.111447][ T3397] should_failslab+0x5/0x20 [ 713.115937][ T3397] kmem_cache_alloc+0x29/0x2b0 [ 713.120722][ T3397] ? skb_clone+0x131/0x1f0 [ 713.125124][ T3397] skb_clone+0x131/0x1f0 [ 713.129357][ T3397] netlink_deliver_tap+0x2a0/0x470 [ 713.131406][ T3418] FAULT_INJECTION: forcing a failure. [ 713.131406][ T3418] name failslab, interval 1, probability 0, space 0, times 0 [ 713.134471][ T3397] ? netlink_attachskb+0x3f8/0x550 [ 713.134488][ T3397] netlink_unicast+0x436/0x6b0 [ 713.156878][ T3397] netlink_ack+0x57b/0x5d0 [ 713.161314][ T3397] netlink_rcv_skb+0x1b8/0x240 [ 713.166080][ T3397] ? genl_rcv+0x40/0x40 [ 713.170227][ T3397] genl_rcv+0x24/0x40 [ 713.174185][ T3397] netlink_unicast+0x5e2/0x6b0 [ 713.178987][ T3397] netlink_sendmsg+0x6d8/0x7a0 [ 713.183808][ T3397] ? netlink_getsockopt+0x690/0x690 [ 713.188985][ T3397] ____sys_sendmsg+0x360/0x4d0 [ 713.193726][ T3397] ? import_iovec+0x171/0x1c0 [ 713.198378][ T3397] __sys_sendmsg+0x1df/0x260 [ 713.202945][ T3397] ? __this_cpu_preempt_check+0x18/0x20 [ 713.208470][ T3397] ? vfs_write+0x480/0x690 [ 713.212871][ T3397] ? __fget_light+0x219/0x260 [ 713.217564][ T3397] ? check_preemption_disabled+0x51/0x140 [ 713.223286][ T3397] ? debug_smp_processor_id+0x18/0x20 [ 713.228633][ T3397] ? fpregs_assert_state_consistent+0x7e/0x90 [ 713.234672][ T3397] __x64_sys_sendmsg+0x42/0x50 [ 713.239408][ T3397] do_syscall_64+0x51/0xb0 [ 713.243829][ T3397] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 713.249695][ T3397] RIP: 0033:0x45cba9 [ 713.253565][ T3397] Code: Bad RIP value. 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x8}, 0x0) 15:11:59 executing program 4 (fault-call:1 fault-nth:5): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x9}, 0x0) [ 713.257661][ T3397] RSP: 002b:00007f163a401c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.266069][ T3397] RAX: ffffffffffffffda RBX: 00000000005023e0 RCX: 000000000045cba9 [ 713.274041][ T3397] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 713.282025][ T3397] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.290619][ T3397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.298566][ T3397] R13: 0000000000000a0b R14: 00000000004d71a8 R15: 00007f163a4026d4 [ 713.306516][ T3418] CPU: 0 PID: 3418 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 713.315098][ T3418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.325176][ T3418] Call Trace: [ 713.328454][ T3418] dump_stack+0x10f/0x19d [ 713.332770][ T3418] should_fail+0x23c/0x250 [ 713.337179][ T3418] __should_failslab+0x81/0x90 [ 713.341926][ T3418] ? kmalloc_array+0x2d/0x40 [ 713.346561][ T3418] should_failslab+0x5/0x20 [ 713.351044][ T3418] __kmalloc+0x43/0x2d0 [ 713.355191][ T3418] kmalloc_array+0x2d/0x40 [ 713.359597][ T3418] constrain_params_by_rules+0x70/0x860 [ 713.365129][ T3418] ? snd_interval_refine+0x3d9/0x400 [ 713.370402][ T3418] ? constrain_interval_params+0x275/0x2b0 [ 713.376192][ T3418] snd_pcm_hw_refine+0x11b/0x160 [ 713.381125][ T3418] snd_pcm_oss_change_params_locked+0x7f4/0x2730 [ 713.387604][ T3418] snd_pcm_oss_write+0x1ca/0x890 [ 713.392527][ T3418] ? rw_verify_area+0x12c/0x240 [ 713.397426][ T3418] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 713.402434][ T3418] vfs_write+0x1d6/0x690 [ 713.406723][ T3418] ? __fget_light+0x219/0x260 [ 713.411394][ T3418] ksys_write+0xce/0x180 [ 713.415642][ T3418] __x64_sys_write+0x3e/0x50 [ 713.420227][ T3418] do_syscall_64+0x51/0xb0 [ 713.424632][ T3418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 713.430506][ T3418] RIP: 0033:0x45cba9 [ 713.434513][ T3418] Code: Bad RIP value. [ 713.438555][ T3418] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.447061][ T3418] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 713.455020][ T3418] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 15:11:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xe00}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf}, 0x0) [ 713.462975][ T3418] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 713.471008][ T3418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 713.478962][ T3418] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:11:59 executing program 5 (fault-call:2 fault-nth:7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:11:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x100000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:11:59 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x100000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x60}, 0x0) 15:11:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:11:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf00}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:11:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x300}, 0x0) 15:11:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:00 executing program 4 (fault-call:1 fault-nth:6): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x500}, 0x0) 15:12:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:00 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1100}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 713.865132][ T3479] FAULT_INJECTION: forcing a failure. [ 713.865132][ T3479] name failslab, interval 1, probability 0, space 0, times 0 [ 713.894611][ T3479] CPU: 0 PID: 3479 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 713.903223][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.913268][ T3479] Call Trace: [ 713.916547][ T3479] dump_stack+0x10f/0x19d [ 713.920861][ T3479] should_fail+0x23c/0x250 [ 713.925265][ T3479] __should_failslab+0x81/0x90 [ 713.930014][ T3479] should_failslab+0x5/0x20 [ 713.934502][ T3479] kmem_cache_alloc_trace+0x32/0x2c0 [ 713.939774][ T3479] ? snd_pcm_hw_param_near+0x7c/0x4a0 [ 713.945129][ T3479] snd_pcm_hw_param_near+0x7c/0x4a0 [ 713.950374][ T3479] snd_pcm_oss_change_params_locked+0x9b9/0x2730 [ 713.956695][ T3479] snd_pcm_oss_write+0x1ca/0x890 [ 713.961626][ T3479] ? rw_verify_area+0x12c/0x240 [ 713.966463][ T3479] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 713.971471][ T3479] vfs_write+0x1d6/0x690 [ 713.975701][ T3479] ? __fget_light+0x219/0x260 [ 713.980411][ T3479] ksys_write+0xce/0x180 [ 713.984643][ T3479] __x64_sys_write+0x3e/0x50 [ 713.989235][ T3479] do_syscall_64+0x51/0xb0 [ 713.993638][ T3479] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 713.999774][ T3479] RIP: 0033:0x45cba9 [ 714.003647][ T3479] Code: Bad RIP value. [ 714.007700][ T3479] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.016102][ T3479] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 714.024067][ T3479] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 714.032022][ T3479] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.039985][ T3479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.047943][ T3479] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:00 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x200000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x863}, 0x0) 15:12:00 executing program 4 (fault-call:1 fault-nth:7): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:00 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x200000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 714.423509][ T3513] FAULT_INJECTION: forcing a failure. [ 714.423509][ T3513] name failslab, interval 1, probability 0, space 0, times 0 [ 714.449231][ T3513] CPU: 0 PID: 3513 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 714.457835][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.467878][ T3513] Call Trace: [ 714.471158][ T3513] dump_stack+0x10f/0x19d [ 714.475506][ T3513] should_fail+0x23c/0x250 [ 714.479947][ T3513] __should_failslab+0x81/0x90 [ 714.484750][ T3513] ? kmalloc_array+0x2d/0x40 [ 714.489317][ T3513] should_failslab+0x5/0x20 [ 714.493797][ T3513] __kmalloc+0x43/0x2d0 [ 714.497985][ T3513] kmalloc_array+0x2d/0x40 [ 714.502379][ T3513] constrain_params_by_rules+0x70/0x860 [ 714.507912][ T3513] ? debug_smp_processor_id+0x18/0x20 [ 714.513253][ T3513] ? ___cache_free+0x2a/0x510 [ 714.517901][ T3513] ? snd_interval_refine+0x3d9/0x400 [ 714.523159][ T3513] ? constrain_interval_params+0x275/0x2b0 [ 714.528939][ T3513] ? check_preemption_disabled+0x51/0x140 [ 714.534632][ T3513] snd_pcm_hw_refine+0x11b/0x160 [ 714.539544][ T3513] snd_pcm_hw_param_first+0x33a/0x3f0 [ 714.544890][ T3513] snd_pcm_hw_param_near+0x48f/0x4a0 [ 714.550173][ T3513] snd_pcm_oss_change_params_locked+0x9b9/0x2730 [ 714.556484][ T3513] ? delay_tsc+0x96/0xe0 [ 714.560704][ T3513] snd_pcm_oss_write+0x1ca/0x890 [ 714.565616][ T3513] ? rw_verify_area+0x12c/0x240 [ 714.570444][ T3513] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 714.575530][ T3513] vfs_write+0x1d6/0x690 [ 714.579750][ T3513] ? __fget_light+0x219/0x260 [ 714.584407][ T3513] ksys_write+0xce/0x180 [ 714.588627][ T3513] __x64_sys_write+0x3e/0x50 [ 714.593188][ T3513] do_syscall_64+0x51/0xb0 [ 714.597595][ T3513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 714.603457][ T3513] RIP: 0033:0x45cba9 [ 714.607579][ T3513] Code: Bad RIP value. [ 714.611617][ T3513] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 15:12:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x900}, 0x0) 15:12:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:00 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x157c}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 714.620012][ T3513] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 714.627965][ T3513] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 714.635908][ T3513] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.643852][ T3513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.651799][ T3513] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:00 executing program 4 (fault-call:1 fault-nth:8): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf00}, 0x0) 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 714.745773][ T3536] FAULT_INJECTION: forcing a failure. [ 714.745773][ T3536] name failslab, interval 1, probability 0, space 0, times 0 [ 714.779373][ T3536] CPU: 0 PID: 3536 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 714.788049][ T3536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.798094][ T3536] Call Trace: [ 714.801377][ T3536] dump_stack+0x10f/0x19d [ 714.805696][ T3536] should_fail+0x23c/0x250 [ 714.810115][ T3536] __should_failslab+0x81/0x90 [ 714.814907][ T3536] should_failslab+0x5/0x20 [ 714.819401][ T3536] kmem_cache_alloc_trace+0x32/0x2c0 [ 714.824688][ T3536] ? snd_pcm_hw_param_near+0x7c/0x4a0 [ 714.830127][ T3536] snd_pcm_hw_param_near+0x7c/0x4a0 [ 714.835368][ T3536] ? snd_interval_refine+0x3d9/0x400 [ 714.840657][ T3536] snd_pcm_oss_change_params_locked+0x1c53/0x2730 [ 714.847131][ T3536] snd_pcm_oss_write+0x1ca/0x890 [ 714.852064][ T3536] ? rw_verify_area+0x12c/0x240 [ 714.856901][ T3536] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 714.861911][ T3536] vfs_write+0x1d6/0x690 [ 714.866144][ T3536] ? __fget_light+0x219/0x260 [ 714.870815][ T3536] ksys_write+0xce/0x180 [ 714.875063][ T3536] __x64_sys_write+0x3e/0x50 [ 714.879641][ T3536] do_syscall_64+0x51/0xb0 [ 714.884047][ T3536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 714.889921][ T3536] RIP: 0033:0x45cba9 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 714.893877][ T3536] Code: Bad RIP value. [ 714.897935][ T3536] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.906327][ T3536] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 714.914285][ T3536] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 714.922242][ T3536] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 714.930349][ T3536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 714.938308][ T3536] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x300000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:01 executing program 4 (fault-call:1 fault-nth:9): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x6000}, 0x0) 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 715.044751][ T3572] FAULT_INJECTION: forcing a failure. [ 715.044751][ T3572] name failslab, interval 1, probability 0, space 0, times 0 [ 715.057787][ T3572] CPU: 0 PID: 3572 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 715.066367][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.076408][ T3572] Call Trace: [ 715.079692][ T3572] dump_stack+0x10f/0x19d [ 715.084087][ T3572] should_fail+0x23c/0x250 [ 715.088491][ T3572] __should_failslab+0x81/0x90 [ 715.093317][ T3572] ? kmalloc_array+0x2d/0x40 [ 715.097893][ T3572] should_failslab+0x5/0x20 [ 715.102422][ T3572] __kmalloc+0x43/0x2d0 [ 715.106564][ T3572] ? constrain_params_by_rules+0x82c/0x860 [ 715.112357][ T3572] kmalloc_array+0x2d/0x40 [ 715.116795][ T3572] constrain_params_by_rules+0x70/0x860 [ 715.122328][ T3572] ? bcmp+0x33/0x60 [ 715.126185][ T3572] ? snd_interval_refine+0x3d2/0x400 [ 715.131460][ T3572] ? constrain_interval_params+0x275/0x2b0 [ 715.137260][ T3572] snd_pcm_hw_refine+0x11b/0x160 [ 715.142194][ T3572] snd_pcm_hw_param_near+0xde/0x4a0 [ 715.147374][ T3572] ? snd_interval_refine+0x3d9/0x400 [ 715.152825][ T3572] snd_pcm_oss_change_params_locked+0x1c53/0x2730 [ 715.159231][ T3572] snd_pcm_oss_write+0x1ca/0x890 [ 715.164164][ T3572] ? rw_verify_area+0x12c/0x240 [ 715.169055][ T3572] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 715.174070][ T3572] vfs_write+0x1d6/0x690 [ 715.178567][ T3572] ? __fget_light+0x219/0x260 [ 715.183232][ T3572] ksys_write+0xce/0x180 [ 715.187541][ T3572] __x64_sys_write+0x3e/0x50 [ 715.192120][ T3572] do_syscall_64+0x51/0xb0 [ 715.196530][ T3572] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 715.202410][ T3572] RIP: 0033:0x45cba9 [ 715.206289][ T3572] Code: Bad RIP value. [ 715.210338][ T3572] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.218733][ T3572] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 715.226951][ T3572] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 715.234968][ T3572] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 15:12:01 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x300000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x6308}, 0x0) 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 715.242927][ T3572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 715.250890][ T3572] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:01 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1800}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x30000}, 0x0) 15:12:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x34000}, 0x0) 15:12:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x400000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:02 executing program 4 (fault-call:1 fault-nth:10): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8d7, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x400300}, 0x0) [ 715.855919][ T3638] FAULT_INJECTION: forcing a failure. [ 715.855919][ T3638] name failslab, interval 1, probability 0, space 0, times 0 [ 715.874685][ T3638] CPU: 0 PID: 3638 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 715.883294][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.893390][ T3638] Call Trace: [ 715.896670][ T3638] dump_stack+0x10f/0x19d [ 715.900991][ T3638] should_fail+0x23c/0x250 [ 715.905396][ T3638] __should_failslab+0x81/0x90 [ 715.910150][ T3638] ? kmalloc_array+0x2d/0x40 [ 715.914725][ T3638] should_failslab+0x5/0x20 [ 715.919269][ T3638] __kmalloc+0x43/0x2d0 [ 715.923441][ T3638] kmalloc_array+0x2d/0x40 [ 715.927894][ T3638] constrain_params_by_rules+0x70/0x860 [ 715.933427][ T3638] ? constrain_params_by_rules+0x82c/0x860 [ 715.939213][ T3638] ? snd_interval_refine+0x3d9/0x400 [ 715.944484][ T3638] ? constrain_interval_params+0x275/0x2b0 [ 715.950291][ T3638] ? check_preemption_disabled+0x51/0x140 [ 715.956001][ T3638] snd_pcm_hw_refine+0x11b/0x160 [ 715.960926][ T3638] snd_pcm_hw_param_first+0x33a/0x3f0 [ 715.966754][ T3638] snd_pcm_hw_param_near+0x48f/0x4a0 [ 715.972036][ T3638] ? snd_interval_refine+0x3d9/0x400 [ 715.977323][ T3638] snd_pcm_oss_change_params_locked+0x1c53/0x2730 [ 715.983735][ T3638] snd_pcm_oss_write+0x1ca/0x890 [ 715.988672][ T3638] ? rw_verify_area+0x12c/0x240 [ 715.993614][ T3638] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 715.998628][ T3638] vfs_write+0x1d6/0x690 [ 716.002869][ T3638] ? __fget_light+0x219/0x260 [ 716.007587][ T3638] ksys_write+0xce/0x180 [ 716.011826][ T3638] __x64_sys_write+0x3e/0x50 [ 716.016406][ T3638] do_syscall_64+0x51/0xb0 [ 716.020832][ T3638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.026707][ T3638] RIP: 0033:0x45cba9 [ 716.030600][ T3638] Code: Bad RIP value. [ 716.034643][ T3638] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.043091][ T3638] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 716.051043][ T3638] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 716.059014][ T3638] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.066972][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.074930][ T3638] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x1000000}, 0x0) 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x400000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:02 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1f40}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:02 executing program 4 (fault-call:1 fault-nth:11): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x2000000}, 0x0) [ 716.383329][ T3669] FAULT_INJECTION: forcing a failure. [ 716.383329][ T3669] name failslab, interval 1, probability 0, space 0, times 0 [ 716.403082][ T3669] CPU: 0 PID: 3669 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 716.411681][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.421722][ T3669] Call Trace: [ 716.425008][ T3669] dump_stack+0x10f/0x19d [ 716.429326][ T3669] should_fail+0x23c/0x250 [ 716.433738][ T3669] __should_failslab+0x81/0x90 [ 716.438490][ T3669] should_failslab+0x5/0x20 [ 716.442982][ T3669] kmem_cache_alloc_trace+0x32/0x2c0 [ 716.448264][ T3669] ? snd_pcm_hw_param_near+0x7c/0x4a0 [ 716.453623][ T3669] snd_pcm_hw_param_near+0x7c/0x4a0 [ 716.458801][ T3669] ? snd_interval_refine+0x3d9/0x400 [ 716.464075][ T3669] snd_pcm_oss_change_params_locked+0x1c90/0x2730 [ 716.470483][ T3669] snd_pcm_oss_write+0x1ca/0x890 [ 716.475444][ T3669] ? rw_verify_area+0x12c/0x240 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 716.480288][ T3669] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 716.485302][ T3669] vfs_write+0x1d6/0x690 [ 716.489598][ T3669] ? __fget_light+0x219/0x260 [ 716.494264][ T3669] ksys_write+0xce/0x180 [ 716.498938][ T3669] __x64_sys_write+0x3e/0x50 [ 716.503511][ T3669] do_syscall_64+0x51/0xb0 [ 716.507916][ T3669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.513836][ T3669] RIP: 0033:0x45cba9 [ 716.517710][ T3669] Code: Bad RIP value. [ 716.521757][ T3669] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 15:12:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x500000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xd708, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x3000000}, 0x0) [ 716.530191][ T3669] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 716.538151][ T3669] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 716.546112][ T3669] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.554068][ T3669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.562037][ T3669] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:02 executing program 4 (fault-call:1 fault-nth:12): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x4000000}, 0x0) 15:12:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 716.648064][ T3699] FAULT_INJECTION: forcing a failure. [ 716.648064][ T3699] name failslab, interval 1, probability 0, space 0, times 0 [ 716.660765][ T3699] CPU: 0 PID: 3699 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 716.669334][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.679372][ T3699] Call Trace: [ 716.682677][ T3699] dump_stack+0x10f/0x19d [ 716.686991][ T3699] should_fail+0x23c/0x250 [ 716.691536][ T3699] __should_failslab+0x81/0x90 [ 716.696286][ T3699] ? kmalloc_array+0x2d/0x40 [ 716.700930][ T3699] should_failslab+0x5/0x20 [ 716.705421][ T3699] __kmalloc+0x43/0x2d0 [ 716.709824][ T3699] ? constrain_params_by_rules+0x82c/0x860 [ 716.715620][ T3699] kmalloc_array+0x2d/0x40 [ 716.720031][ T3699] constrain_params_by_rules+0x70/0x860 [ 716.725562][ T3699] ? snd_interval_refine+0x3d9/0x400 [ 716.730839][ T3699] ? constrain_interval_params+0x275/0x2b0 [ 716.736717][ T3699] ? _snd_pcm_hw_param_min+0x34e/0x490 [ 716.742165][ T3699] snd_pcm_hw_refine+0x11b/0x160 [ 716.747097][ T3699] snd_pcm_hw_param_near+0xde/0x4a0 [ 716.752284][ T3699] ? snd_interval_refine+0x3d9/0x400 [ 716.757559][ T3699] snd_pcm_oss_change_params_locked+0x1c90/0x2730 [ 716.763972][ T3699] snd_pcm_oss_write+0x1ca/0x890 [ 716.770206][ T3699] ? rw_verify_area+0x12c/0x240 [ 716.775058][ T3699] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 716.780102][ T3699] vfs_write+0x1d6/0x690 [ 716.784335][ T3699] ? __fget_light+0x219/0x260 [ 716.789007][ T3699] ksys_write+0xce/0x180 [ 716.793240][ T3699] __x64_sys_write+0x3e/0x50 [ 716.797815][ T3699] do_syscall_64+0x51/0xb0 [ 716.802220][ T3699] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.808096][ T3699] RIP: 0033:0x45cba9 [ 716.811969][ T3699] Code: Bad RIP value. [ 716.816012][ T3699] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.824400][ T3699] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 716.832356][ T3699] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 716.840316][ T3699] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 716.848279][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.856234][ T3699] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x500000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x5000000}, 0x0) 15:12:03 executing program 4 (fault-call:1 fault-nth:13): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x600000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 717.238611][ T3734] FAULT_INJECTION: forcing a failure. [ 717.238611][ T3734] name failslab, interval 1, probability 0, space 0, times 0 [ 717.269122][ T3734] CPU: 0 PID: 3734 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 717.277727][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.287767][ T3734] Call Trace: [ 717.291073][ T3734] dump_stack+0x10f/0x19d [ 717.295391][ T3734] should_fail+0x23c/0x250 [ 717.299817][ T3734] __should_failslab+0x81/0x90 [ 717.304643][ T3734] ? kmalloc_array+0x2d/0x40 [ 717.309212][ T3734] should_failslab+0x5/0x20 [ 717.313728][ T3734] __kmalloc+0x43/0x2d0 [ 717.317878][ T3734] kmalloc_array+0x2d/0x40 [ 717.322318][ T3734] constrain_params_by_rules+0x70/0x860 [ 717.327855][ T3734] ? bcmp+0x33/0x60 [ 717.331646][ T3734] ? snd_interval_refine+0x3d2/0x400 [ 717.336920][ T3734] ? constrain_interval_params+0x275/0x2b0 [ 717.342717][ T3734] snd_pcm_hw_params+0x2bf/0xce0 [ 717.347732][ T3734] snd_pcm_kernel_ioctl+0xd6/0xc20 [ 717.352840][ T3734] snd_pcm_oss_change_params_locked+0x1cc4/0x2730 [ 717.359247][ T3734] snd_pcm_oss_write+0x1ca/0x890 [ 717.364178][ T3734] ? rw_verify_area+0x12c/0x240 [ 717.369018][ T3734] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 717.374060][ T3734] vfs_write+0x1d6/0x690 [ 717.378290][ T3734] ? __fget_light+0x219/0x260 [ 717.382956][ T3734] ksys_write+0xce/0x180 [ 717.387191][ T3734] __x64_sys_write+0x3e/0x50 [ 717.391776][ T3734] do_syscall_64+0x51/0xb0 [ 717.396185][ T3734] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 717.402064][ T3734] RIP: 0033:0x45cba9 [ 717.405937][ T3734] Code: Bad RIP value. [ 717.410076][ T3734] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.418469][ T3734] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 717.426427][ T3734] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 717.434379][ T3734] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.442329][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.450284][ T3734] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:03 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x600000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x8000000}, 0x0) 15:12:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4000}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x700000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:03 executing program 4 (fault-call:1 fault-nth:14): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x9000000}, 0x0) [ 717.539190][ T3763] FAULT_INJECTION: forcing a failure. [ 717.539190][ T3763] name failslab, interval 1, probability 0, space 0, times 0 [ 717.551963][ T3763] CPU: 0 PID: 3763 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 717.560533][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.570576][ T3763] Call Trace: [ 717.573860][ T3763] dump_stack+0x10f/0x19d [ 717.578180][ T3763] should_fail+0x23c/0x250 [ 717.582586][ T3763] __should_failslab+0x81/0x90 [ 717.587344][ T3763] ? kmalloc_array+0x2d/0x40 [ 717.591918][ T3763] should_failslab+0x5/0x20 [ 717.596423][ T3763] __kmalloc+0x43/0x2d0 [ 717.600572][ T3763] kmalloc_array+0x2d/0x40 [ 717.604980][ T3763] constrain_params_by_rules+0x70/0x860 [ 717.610521][ T3763] ? check_preemption_disabled+0x51/0x140 [ 717.616230][ T3763] ? debug_smp_processor_id+0x18/0x20 [ 717.621674][ T3763] ? ___cache_free+0x2a/0x510 [ 717.626339][ T3763] ? snd_interval_refine+0x3d9/0x400 [ 717.631610][ T3763] ? constrain_interval_params+0x275/0x2b0 [ 717.637408][ T3763] snd_pcm_hw_refine+0x11b/0x160 [ 717.642336][ T3763] snd_pcm_hw_param_first+0x33a/0x3f0 [ 717.647710][ T3763] snd_pcm_hw_params_choose+0x94/0x420 [ 717.653166][ T3763] snd_pcm_hw_params+0x2f1/0xce0 [ 717.658178][ T3763] snd_pcm_kernel_ioctl+0xd6/0xc20 [ 717.663290][ T3763] snd_pcm_oss_change_params_locked+0x1cc4/0x2730 [ 717.669703][ T3763] snd_pcm_oss_write+0x1ca/0x890 [ 717.674640][ T3763] ? rw_verify_area+0x12c/0x240 [ 717.679481][ T3763] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 717.684494][ T3763] vfs_write+0x1d6/0x690 [ 717.688730][ T3763] ? __fget_light+0x219/0x260 [ 717.693397][ T3763] ksys_write+0xce/0x180 [ 717.697660][ T3763] __x64_sys_write+0x3e/0x50 [ 717.702244][ T3763] do_syscall_64+0x51/0xb0 [ 717.706665][ T3763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 717.712543][ T3763] RIP: 0033:0x45cba9 [ 717.716426][ T3763] Code: Bad RIP value. [ 717.720470][ T3763] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.728864][ T3763] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 15:12:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x401f}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf000000}, 0x0) 15:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 717.736878][ T3763] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 717.744836][ T3763] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 717.752794][ T3763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.760752][ T3763] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:04 executing program 4 (fault-call:1 fault-nth:15): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) [ 717.855090][ T3794] FAULT_INJECTION: forcing a failure. [ 717.855090][ T3794] name failslab, interval 1, probability 0, space 0, times 0 [ 717.902360][ T3794] CPU: 0 PID: 3794 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 717.911010][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.921103][ T3794] Call Trace: [ 717.924391][ T3794] dump_stack+0x10f/0x19d [ 717.928706][ T3794] should_fail+0x23c/0x250 [ 717.933160][ T3794] __should_failslab+0x81/0x90 [ 717.937916][ T3794] should_failslab+0x5/0x20 [ 717.942408][ T3794] kmem_cache_alloc_node_trace+0x3b/0x260 [ 717.948109][ T3794] ? __kmalloc_node+0x30/0x40 [ 717.952769][ T3794] __kmalloc_node+0x30/0x40 [ 717.957311][ T3794] kvmalloc_node+0x81/0xf0 [ 717.961728][ T3794] snd_pcm_oss_change_params_locked+0x255b/0x2730 [ 717.968140][ T3794] snd_pcm_oss_write+0x1ca/0x890 [ 717.973069][ T3794] ? rw_verify_area+0x12c/0x240 [ 717.977903][ T3794] ? snd_pcm_oss_read+0x8b0/0x8b0 [ 717.982912][ T3794] vfs_write+0x1d6/0x690 [ 717.987154][ T3794] ? __fget_light+0x219/0x260 [ 717.991884][ T3794] ksys_write+0xce/0x180 [ 717.996136][ T3794] __x64_sys_write+0x3e/0x50 [ 718.000728][ T3794] do_syscall_64+0x51/0xb0 [ 718.005134][ T3794] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 718.011180][ T3794] RIP: 0033:0x45cba9 [ 718.015055][ T3794] Code: Bad RIP value. [ 718.019102][ T3794] RSP: 002b:00007fb69c840c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.027521][ T3794] RAX: ffffffffffffffda RBX: 000000000050f5e0 RCX: 000000000045cba9 [ 718.035480][ T3794] RDX: 00000000ffffffdb RSI: 0000000020000100 RDI: 0000000000000003 [ 718.043435][ T3794] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 718.051435][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 718.059401][ T3794] R13: 0000000000000d53 R14: 00000000004d98c0 R15: 00007fb69c8416d4 15:12:04 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x700000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x4d01}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x60000000}, 0x0) 15:12:04 executing program 4 (fault-call:1 fault-nth:16): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:04 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x800000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x63080000}, 0x0) 15:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x9effffff}, 0x0) 15:12:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x7c15}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x800000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xefffffff}, 0x0) 15:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:05 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x9a02}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:05 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:05 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x900000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 15:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 15:12:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xffffff9e}, 0x0) 15:12:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x900000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xffffffef}, 0x0) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xd7080000, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:06 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:06 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0xf000}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xefffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x3000000000000}, 0x0) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0) 15:12:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xa00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 15:12:07 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:07 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:07 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x200000000000000}, 0x0) 15:12:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xffffffef, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x300000000000000}, 0x0) 15:12:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 15:12:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:07 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb00020000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xb00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x9, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x500000000000000}, 0x0) 15:12:08 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x3, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:08 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x800000000000000}, 0x0) 15:12:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x900000000000000}, 0x0) 15:12:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) 15:12:08 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x3}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xc00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x6000000000000000}, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:09 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x6308000000000000}, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x8000000000000000}, 0x0) 15:12:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x200002e0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 15:12:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xd00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xefffffff00000000}, 0x0) 15:12:09 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x5, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:09 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) 15:12:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 15:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x2, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) 15:12:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xe00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x6, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x7}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 15:12:10 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x6, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x8, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 15:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x300, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:10 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x8}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) 15:12:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1000000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x5}, 0x0) 15:12:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x2, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:11 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:11 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1000000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x8}, 0x0) 15:12:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x3, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x9}, 0x0) 15:12:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf}, 0x0) 15:12:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x4, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:11 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1100000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1100000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x60}, 0x0) 15:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x5, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:12 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:12 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1200000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) 15:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x8, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x500}, 0x0) 15:12:12 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xb}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x9, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xf, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x863}, 0x0) 15:12:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x1200000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x900}, 0x0) 15:12:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x60, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xd}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:13 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xa, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x300, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) 15:12:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x500, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xe}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x6000}, 0x0) 15:12:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2500000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x8d7, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x6308}, 0x0) 15:12:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xb, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x900, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xf00, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0) 15:12:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x6000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:14 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4000000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xd708, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x401f000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:14 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xd, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x30000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 15:12:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x34000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x10}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x400300, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x1000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 15:12:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x11}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:15 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x4d01000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x2000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x8000000}, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x3000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 15:12:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x4000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) 15:12:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x5000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:15 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x2]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfdfdffff00000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0) 15:12:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x8000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:16 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x3]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:16 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x5c00000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x9000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x63080000}, 0x0) 15:12:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xf000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) 15:12:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x60000000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xefffffff}, 0x0) 15:12:16 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x10, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="66baf80cb8fa335984ef66bafc0c66ed0f01c30f0ff90c66ba210066ed0febb2bf000000660fc7b6270a0000660f383cc766baf80cb82c0e768bef66bafc0cedc4c17c53e50f01d8", 0x48}], 0x1, 0x50, &(0x7f0000000100)=[@dstype0={0x6, 0x9}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x24400, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000440)={0x29, "8e26ac1cf3bbb37d407fd58124dfefbacd1b5cdb074373126889512533453ade2fab013d0d53e7396ba783c46ff0dabc9680cea0055058677411f65c367302295319d712fdb98e57ba2e3fdee159f85d3fc4cb1f8da58eb1a22f8f6cc69a1b211a0c5e294d1e4180f2c096fe59d684544e3da0a7609d639747559c551f95fe67"}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000200)={0x2, 0x1, [0x6, 0x40, 0x200, 0x8, 0x1, 0x3, 0x7, 0x1]}) write$capi20_data(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 15:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x9effffff, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:17 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x7c15000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:17 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x4]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xd7080000, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 15:12:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x16, 0xc, 0x0, 0x1a, 0x0, 0x3e8c, 0x1, 0xf9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 15:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xefffffff, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xf0ffffff, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:17 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x11, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffffef}, 0x0) 15:12:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 15:12:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xffffff7f, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x9a02000000000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xffffff9e, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) 15:12:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x5]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:18 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048051}, 0x20000000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xffffffef, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:18 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x18, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0) 15:12:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x6]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0xfffffff0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 15:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:18 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfdfdffff00000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:18 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x7]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 15:12:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x2, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 15:12:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x3, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x8]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup3(r3, r6, 0x80000) write$capi20_data(r7, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:19 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x4, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 15:12:19 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xfeffffff00000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x5, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:19 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xa]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 15:12:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x8, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 15:12:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x323200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1000003f000000000000000000e38b2c3315b6145ee92b1949ec609a0000000000"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x14d, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x9, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xf, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:20 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xffffff7f00000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x6308000000000000}, 0x0) 15:12:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xb]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x60, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x8000000000000000}, 0x0) 15:12:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x300, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:20 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x3}}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = dup3(r0, r4, 0x0) write$capi20_data(r5, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x500, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 15:12:20 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xd]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x29a, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xffffffff00000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x8d7, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) geteuid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x6c, 0x0, 0x5, 0x0, 0x1}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) r4 = semget$private(0x0, 0x1, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f00000002c0)=""/243) semtimedop(r4, &(0x7f0000000080)=[{0x4, 0x8, 0x1000}, {0x4, 0x1ff, 0x1000}, {0x3, 0x3, 0x1800}, {0x5, 0x1, 0x1000}, {0x4, 0x4, 0x1800}, {0x2, 0x3, 0x1800}], 0x6, &(0x7f0000000180)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x121, 0x4) socket$unix(0x1, 0x1, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x900, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xf00, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x6000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xe]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xd708, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:21 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x300, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 15:12:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x5}, 0x8) r4 = dup3(r0, r2, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:21 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0xf]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x82, &(0x7f00000003c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x2, 0x4}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r5, 0xa37, 0x200, 0x1, 0x4749, 0x9}, 0x14) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) sendto$l2tp6(r6, &(0x7f0000000140)="d60dfb49e89e4bdfee66df98cfe6e02471df962184b677862ce76edb8cdd77817042d4367e0850c3d2ab6767d224b60e3519c4922d7eb0a74df45636de703a746217332f9c9ab0edc7b87876e92a49f8cebf666a147fd31fb1ecb9ff574b282424ac1bf0931ab69cab599e400ca3add38c1508c46746d1b77ba57e315749ba94ea32e16eb305ad778f58954365fbe94e6858bca113a2a8a82d91ddca51af221c085ef12b5a4ac79e4aaec0990b8a9e14e1a62d1c3da5944ed411457408b6ec4eb8c7b3506752ab5504cee2205ddbc1e2c34248b379a417022b8478d462a0d8", 0xdf, 0x4044010, &(0x7f0000000040)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x10001, 0x4}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x3f, 0x4, 0x10, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x7, 0x40d5, 0x7fffffff}}) 15:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x30000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x34000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 15:12:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x10]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 15:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x400300, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x500, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x1000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000080)={0x0, {0x7f}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) write$char_usb(r5, &(0x7f0000000180)="8ec8a816fa0ebb5b7531b960944852d3d47c26c2f9eaa3bb83f9b61b5a00ab56a7e7a42fd2ec7bdac2bc097cd421ecc8f479aabc8c9646ef974ae1028f738ace2398a0c565090267c99344c36c396b9b99a9dec0237d55aaf470991972f82ee38ed6870f07af2a188f767de6f35a90036d687b1a32859e38bbe7439a17accbbfe90589e0b3846c43e0af6294654fc9ab11d278b022c6973e1d34fdcd3df5f3752596f21417d0f9d7b05bce83560830153586b388d0cdeffafa9a7fbe7321ca234b2327bea173cc6d89201b905e41bba2dc4d402377aaaa050198d315f2548049313055a8c9f85e420c6bcc181914ecc8121404bfdc68a09df8438d2c4c4781", 0xff) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 15:12:22 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) 15:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x2000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x11]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 15:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x3000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0) 15:12:22 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x600, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x4000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 15:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 15:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x5000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:23 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x4b8082) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x110) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) 15:12:23 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x700, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x8000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x863}, 0x0) 15:12:23 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x9000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 15:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xf000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x60000000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x9effffff, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6308}, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xd7080000, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 15:12:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x4]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xefffffff, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 15:12:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 15:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xffffff7f, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 738.735383][ T28] audit: type=1804 audit(1594825944.999:1047): pid=5390 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir466663751/syzkaller.Gm3n7V/721/bus" dev="sda1" ino=16348 res=1 15:12:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xb00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 15:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xffffff9e, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 15:12:25 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x5]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xffffffef, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 739.451572][ T28] audit: type=1804 audit(1594825945.719:1048): pid=5426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir466663751/syzkaller.Gm3n7V/721/bus" dev="sda1" ino=16348 res=1 15:12:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 15:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0xfffffff0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) [ 739.497255][ T28] audit: type=1804 audit(1594825945.749:1049): pid=5426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir466663751/syzkaller.Gm3n7V/721/bus" dev="sda1" ino=16348 res=1 15:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 15:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xd00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 15:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 15:12:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x6]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0x8, 0x7, "75b41db918e9e82a52d2c422704df97b72993cbb0773a973f60a3248d25c75f6effb525d520d34cb5a1a046df785f386e781df1cd62ee8372d3bb335e47f17", 0x15}, 0x60) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x6, 0x5, 0x6, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000240)={r4}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup3(r1, r5, 0x0) write$capi20_data(r6, &(0x7f0000000140)={{0x10}}, 0x12) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x50000, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)) 15:12:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000700), &(0x7f0000000780)=0x6e) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 15:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x2}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 15:12:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:26 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xe00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x63080000}, 0x0) 15:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x3}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x8]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 15:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x4}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 15:12:27 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1000"/18], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 15:12:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = dup(r0) syz_usb_connect(0x5, 0xae3, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xc8, 0x7a, 0xd6, 0xff, 0x1c9e, 0x9603, 0xfd96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad1, 0x4, 0xc1, 0xff, 0x80, 0x3, [{{0x9, 0x4, 0x22, 0x80, 0x0, 0x85, 0xc8, 0xc7, 0x0, [@uac_as, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x7f}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0x80, 0x5, "28f1e89e"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x4697060712f06a11, 0x1, 0x7, 0x6, 0xa, 0x3], 0x2}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x100, 0x2, ','}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x4, 0xff, 0xfff7}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x3, 0x5, 0x3}]}]}}, {{0x9, 0x4, 0x98, 0x0, 0xd, 0x2, 0x2, 0xff, 0x7, [@hid_hid={0x9, 0x21, 0x8c4, 0x8f, 0x1, {0x22, 0x687}}], [{{0x9, 0x5, 0x1, 0xbffdc5e6eeceb5a9, 0x200, 0x36, 0x6, 0x1}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x80, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf1, 0x3}, @generic={0x5f, 0xc, "b5fe76044c2a93c38309f8340cca01ef8f7295cbee5dca9095a0d09b1082c7697e32b8c36d069cff70219cebbc69d90305bf3a559cf437cca1233dfea0407afc5f63c4d1711507515d44c7379780f299594000573aac91f8a9e32c3b00"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x5, 0x5, 0x88, [@generic={0xc2, 0x0, "1bbf19ef772423123b0fcdfb6137ef0c5580c963bf8e102d5db4b4a6a58e2ae1215584dd6f1dd068bd714b0970f2ccaa430457349d6d456da1fed781b413b4737cabcd6b2d23b2605c35c6f3e91a8b2960efc1eeed5a5fcb69973eb9a424ee8c297ba4d4386288b50109f0c09e3ced89435d22e426376c938f3c809a12a6e06ea3111404baafe812ae9a8e67979b0def89204160c9dc6419bddbab84248b8d9bca1d4d3521818e6a184a1653ba9f6d017c47c369605b4ee435553f92d587cee9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1e, 0x1000}]}}, {{0x9, 0x5, 0x4, 0x8, 0x0, 0x0, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9b, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x400}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x3, 0x6, 0x7f}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x6, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x4, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xbb}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x1, 0x8, [@generic={0x70, 0x8, "924fd5bec10d86544c7ef8818b111fa735ebb0e6b4dc68c82291c04bbc2ad0c49df1e58d59a69a204c9b97f27dd7a8b42ec1c79cae7f2f5961a31ed89035d786f62019c3fbe0ce0c65cc03fdf9fa52d3b097c93e64e78a67b11307bdbb1ace4618fe4262a305b30bede71be98ec3"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xd, 0x7f, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xe8, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9c}, @generic={0xbf, 0x23, "12b1fb8ca6a55d8ab59eaf466b57b8af0fc91c12ed38059a35957a045d4f9397335d996aa2a184db5ad28d70096af60215e4b7ca624db69e8efaba7c4cd39a518611f4b021d1702174b0b8dcc021b76c59cffc10758edfc25eef2add83e16fd571417832e670c7e2cc4a94e80eb3449f2cc7a816670f04f84ecbbcde096e549c237c697f4340ca88850370f925509c714bd92800da53939113a8fb31b9945d1734973f2dca323e9dedae1caea9deee69c90b8ee19c43658370a60665b9"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x7, 0x2, 0x80}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x32, 0x1, 0x3f, [@generic={0xbc, 0x21, "6bf6d3adcefb89eb35b38a08009298ff1d3d7f69e01ab6d2ee755e56ef09dbe6f4f9f0bdf1d49373f6235ca3484ae113b02fcea92df00d536fb97f14aa6dd4da0acc8e4fd298d9970dcca27e635c705ee64aa18615f55f0bcd732622691571f9b53bb676f0dee2b36975e2896810b93b4b0e1e728d3ccdb3ccd3e8df67921f3bda0fde474e86232f8c26ebab06922fb4280348fa0e5e7fd22e757fd3d51ea23350301c6a7a12f49c6062be8a7dfac7bd72b9a08e6b480f632bdb"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x3}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x6, 0x5, 0x3, [@generic={0x18, 0x21, "a0d272b0fc97356746b69659861d2d9f29145db484ae"}, @generic={0xbd, 0x23, "84ac99b3c9a06cc9eb93970d7e361c4af4082b83c1214071d4e3322c130de04f8a001e34b9e2b7c3d5ff126863756977c618b62107e54ad524b472000918fa1fa551a1593524bf7b1ebbab2cbd9eaaecfe138a4a0e233b7b1e0b166764c3e247ac55781574a221857d2f219e7df58dd9b726e27999d59718e0adf85bcd7a42e890e9240067682d7be2a3035f95330dcc11d4128b3fec536dce46d3856c4a455ba6816de42d970fb77993ea822d83ae17f763a37c1ee1bb9fdf038b"}]}}]}}, {{0x9, 0x4, 0x26, 0xf9, 0xd, 0xc4, 0xe1, 0x26, 0x2, [], [{{0x9, 0x5, 0x233ddb4a38441093, 0x4, 0x10, 0x8, 0x81, 0xc0}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x7f, 0x1, 0xbb}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x3, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xce, 0x4, 0x90}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xc, 0x9, 0x3f}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x5}, @generic={0xf0, 0xe, "e2b1d03c962686906ac5f3fa21fb4bdb8b617251144dbe8826d6abf202411148c5caaf91a798050fe1633fe161735e344168e7a9ff1a7d6cb087829027a5e9834c1fe20d38e138c10f30dd53a0d77730a5b815747a302ef95751f1ba70bd04d62f86d7257c5b011294ca185d897a621d207caae86f85016b3c90eba04a20a65575b4dcf11c67733d18206f3979f6c09e4aee5e41979e3a2038abf324374f49b534c09f9575e0d8407497af233aa13fb1f90c259df47d599bc4f7d88523e1b5e240888a90d152e378a61173929d5f136c15d1a7c16d9395619394afb789bd44cb905065a64176c896af5c677d9a5b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x1, 0xc0, 0x47, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}, @generic={0x47, 0x4, "ad00f047a22676af084f44c79a5af1f5bd267c0cea8095f80663a6498fef40d845c77ddc0ce78e40c313c27d7b12b8ca20a44e577d3cde427d150bebaf8ff0c3903a43f828"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x1f, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4d3}, @generic={0xf6, 0x9, "dc7bc84e3486ac8e598d7567f33bd691f2869c1c406e75ab082665003831ee4bb74ef8eaf96a41a405b7226860998996922ef9f8add078b36f2a38d6f0a083451b0269098abfb38f6cc061554b363175e2840e6cdcd03e15ca16d68ccbbba3355600915662330fc8356a1d8fbdd91ba60e30fabdd73c397759cb79d70ce4ade489e1e893d4bec54e790d421739cdbc25bd61b7343f3f742119debbe513b2c76740596dbd8ade499eb13c840ad0ef578ac57de41d38f5699a5c3a74de0ea7a336773707368b1b5236e24f90b7b16dfb09eecf51ad7422ad884c42d87b721a7e96492f7f47c488b5199d5b3db0f6b6f306e2ce41d7"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0xfa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x4, 0x15, 0x20, 0xa7, 0x4f, 0xb6}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x7f, 0x8, 0x7, [@generic={0x32, 0x21, "2d5f650f2af5bb830baee82a24a358bdffc49796f7568e9119648d86530c9f0faf4f41787e22bd5b7836a68269e3eb22"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0xa, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8b}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x3f}]}}, {{0x9, 0x5, 0xa, 0x1, 0x0, 0x7f, 0x8, 0x6, [@generic={0x15, 0x9, "affe1fa8c429382292d1eed3fbd80b484b6c55"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0x5}]}}]}}, {{0x9, 0x4, 0xf5, 0x9, 0xe, 0x40, 0x80, 0xc5, 0x7, [], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x2, 0x7bf, 0x2, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x4, 0x1, 0xf4}}, {{0x9, 0x5, 0x4, 0x4, 0x208, 0x4f, 0xa2, 0xf7, [@generic={0x63, 0x3, "84eb8734ac05eaa8eb138af9b2c03d3f0bd8d2613caa50494cd13b7fb91b85381496c23f83ac7d8249f956d4065349b6bb28a6c2817d7753b907a8d93d69aedb1aa6970352e43bedb75d876bea9da5aa3d116838037a1fd0d00085f3a38077f869"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3f}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x15, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x89, 0x3, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x8000}]}}, {{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x40, 0x9, 0x1, [@generic={0xa, 0x22, "f3a5cbc1e9a76c9d"}]}}, {{0x9, 0x5, 0xf, 0x5, 0x3ff, 0x0, 0x7, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0xff, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x80}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7f, 0x5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x81}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x2, 0x3f, 0xfe, [@generic={0xb7, 0xe, "ede2180da1a1aeaa906f7f7cf7be3eff9373399d892de60f2c299984d3a0eb6dfe81cb6d6379fb18835807ca804b4b3bcfc3ba374559a5c8c3c49eeaa3647bede191e34e0156018ee6c030501b0a3679a81c3738f344b94df222506a8704553b731d9fb13c97bb57d2b99a908666979b541d95ee254b372293ba628218dc780a4e76d951d1912ab6fe4252d039198181651192765358531611b3c31f533f84c6114719988b2ef879e3ded2f9c74f150dfd362af4b3"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x80, 0x5, [@generic={0x4a, 0x10, "4b936188845f5a64403c46baee39583272434582a71e9b6aef1dcfd30c4174045a93bc2c341b120e81c52f66c2b441c58e67e385dc347183184d02b969e48f372f0ec5b56026d4de"}, @generic={0x38, 0x1, "f1b367c370a687b862b29078c6cfd93b32f87e067f8800a12baac19eab346c54d7ed5107ef51a4fdf8c2182727a42394bac5c27caabc"}]}}, {{0x9, 0x5, 0x6, 0x7d355e4bf855493a, 0x200, 0x8, 0x3, 0x1, [@generic={0x45, 0x10, "5019f52321c4100287c81478731e12f332103bdb39f04787a689a9a30d13bae0861fff827f9d1b0b8836e2cfbd442b945dce5f6f3afa98b95aef92f6ede5d75bfa5965"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x1, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x11, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0xd04de94208ccad3b, 0x2, 0x3, 0x57, 0x10, 0x2}, 0x55, &(0x7f0000000c40)={0x5, 0xf, 0x55, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "516102dd0f8fcaa309c50392e010d0ba"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x40, 0x8, 0xde1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x1, 0x4, 0x0, 0x1f}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x7, 0xf00f, 0x5, [0xff27, 0x3f0f, 0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0xbc, 0x5, 0xf4}]}, 0x1, [{0x102, &(0x7f0000000d00)=@string={0x102, 0x3, "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"}}]}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 15:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x8}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 15:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x9}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:27 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xa]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 15:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 741.708173][ T2531] usb 2-1: new high-speed USB device number 6 using dummy_hcd 15:12:28 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x30200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') write$capi20_data(r1, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0xf}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x2) [ 741.970580][ T2531] usb 2-1: Invalid ep0 maxpacket: 512 [ 742.149897][ T2531] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 742.418169][ T2531] usb 2-1: Invalid ep0 maxpacket: 512 [ 742.423590][ T2531] usb usb2-port1: attempt power cycle [ 743.148082][ T2531] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 743.238101][ T2531] usb 2-1: Invalid ep0 maxpacket: 512 [ 743.388049][ T2531] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 743.479112][ T2531] usb 2-1: Invalid ep0 maxpacket: 512 [ 743.484564][ T2531] usb usb2-port1: unable to enumerate USB device 15:12:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x440040, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:12:30 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x1100, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000080)={0x2, 0x4, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000000000000000000000000ae4cb8fada4b9c732addc41e71007fddf1f2d96899bd45c03aad2c284bba40fd03b1853f843638d6d8e740ad8fa2cf79dc93e4fc3d88e095f09b7627b17945e32a9ff1ab7e5c087b7c248073374a9c566bf62e7ebb8471f15ca91c0ad2152f77425557c084034a6ff0c1a933fe00a92ed39d54eebf7994e8f8a069c0de12f4d49e355f09b0a7834b3ee6c67dff149d67a67e0e620e431c61041e77bba259657fe9899446c4b38f8ed1d9534d260c40e6a55d5b6540321f56ad4fe16afb3f25bc52dc5dd4a5ad63da441865d9"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x60}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x3) 15:12:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xb]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4) 15:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xd]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:30 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8003, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc0000, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000240)=0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa9a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c814}, 0x448c1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x2812, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={r6, 0x4c, &(0x7f0000000300)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x4, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x82, &(0x7f00000003c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r8, 0xb2, 0x5ecb}, &(0x7f0000000200)=0x8) 15:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x5) 15:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x157c, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8) 15:12:31 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xa080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:31 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xe]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(0x0, 0x13) ptrace$getenv(0x4201, r6, 0x3, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup3(r0, r4, 0x0) write$capi20_data(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000000000000005d399e000000000000000000438b0b0736cea2e28b930149714296a105fdad8b9afdca69e11a4e8284a7db48923c77b9b92105a77baaec942f2a05fb2c40fabfc911c056c02ed10566dcbbbf7054a6bc195a0639058ddbf2dd704fee48ec93bc4dd90a89d1825d32270a7a51da0f881bb721f89ff9b37a791a6129f3863e8198d584cd1ccbf83e5739de1fd2f095aa4400445ee28d8fd4514abfc1e82a9f426679f8713c18d76c6fdb6455ddbe3ee8834b67e38305ebefb7de0f8790503322e21e53a88833c06f19199b264dfb47c47d5c3b934b770167cf00c3f8f5d124aed400"/248], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x9) 15:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) pwrite64(r1, &(0x7f0000000040)="b4a5f68e4039d16b391b0fdd1346acfff8a49a922aeec4d940cf937d907dbcdda2b999c9d7bcbdd92e4704e4e1e375b24605c1ed60606948ccffd17c02e225140c7346ed359bbb", 0x47, 0xb60) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f00000000c0)={'caif0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x5000, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:12:31 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0xf]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf) 15:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x1800, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x60) 15:12:31 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x10]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x300) 15:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x500) 15:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0xf}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:32 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x11]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20080, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3, 0xfffffc00}}, 0x10) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20a00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) futex(&(0x7f0000000180)=0x1, 0x7430088ac400f954, 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x1) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) r6 = dup3(r5, r4, 0x0) write$capi20_data(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x863) 15:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x60}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:32 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x1f40, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x900) 15:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x300}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x500}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf00) 15:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x6000) 15:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8d7}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x6308) 15:12:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x107) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) rt_sigreturn() 15:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:33 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x30000) 15:12:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x34000) 15:12:33 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/89) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0xf00}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x400300) 15:12:33 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x6000}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x1000000) 15:12:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x8001) 15:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0xd708}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0x3}]}, 0x20}}, 0x0) 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x2000000) [ 747.925176][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 747.936958][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x3000000) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0x4}]}, 0x20}}, 0x0) 15:12:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r6, 0x23f, 0x0, 0x0, {{}, {0x0, 0x2}, {0xd, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x46}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004841) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup3(r0, r7, 0x0) write$capi20_data(r8, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x5000000) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0x7}]}, 0x20}}, 0x0) [ 748.130195][ T5930] netlink: 'syz-executor.5': attribute type 153 has an invalid length. [ 748.152839][ T5934] netlink: 'syz-executor.5': attribute type 153 has an invalid length. 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8000000) [ 748.243827][ T5950] netlink: 'syz-executor.5': attribute type 153 has an invalid length. [ 748.268116][ T5952] netlink: 'syz-executor.5': attribute type 153 has an invalid length. 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0x27}]}, 0x20}}, 0x0) [ 748.364298][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 748.374633][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 15:12:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x401f, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x9000000) 15:12:34 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x2}, {0xd, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000000) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000200)={0x7, [0xffff, 0x1, 0x7ff, 0x401, 0x0, 0x101, 0x5]}, &(0x7f0000000240)=0x12) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$SHM_LOCK(0x0, 0xb) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000080)={0x6, 0x4, 0xc337, 0x5, 0x7, "1bfdb9908a4ecbe6f0e4e8708045425a9ad37e"}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000280)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf000000) 15:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x125}]}, 0x20}}, 0x0) 15:12:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x60000000) 15:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x63080000) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x9effffff) 15:12:35 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4d01, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}]}, 0x20}}, 0x0) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xefffffff) 15:12:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f00000001c0)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0xd3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x82, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4, 0xcf, 0x8000, 0x0, 0xffffff96, {r5, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x5, 0xbaa1, 0x7f, 0x8001}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r7, 0x6}, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf0ffffff) 15:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}]}, 0x20}}, 0x0) 15:12:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xffffff7f) 15:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4}}]}, 0x20}}, 0x0) 15:12:36 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7c15, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xffffff9e) 15:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}]}, 0x20}}, 0x0) 15:12:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xffffffef) 15:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x20}}, 0x0) 15:12:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xfffffff0) 15:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9}}]}, 0x20}}, 0x0) 15:12:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) r4 = accept4$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x9, "b81548852ef4cdf7281d4f"}, 0xd, 0x3) 15:12:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8482, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf}}]}, 0x20}}, 0x0) 15:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x3000000000000) 15:12:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7d00, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x60}}]}, 0x20}}, 0x0) 15:12:37 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x8]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x40030000000000) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x300}}]}, 0x20}}, 0x0) 15:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x100000000000000) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x500}}]}, 0x20}}, 0x0) 15:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x200000000000000) 15:12:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x1, 'bond0\x00', {}, 0x101}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x300000000000000) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8d7}}]}, 0x20}}, 0x0) 15:12:37 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x9a02, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x900}}]}, 0x20}}, 0x0) 15:12:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x13) r6 = syz_open_procfs(r5, &(0x7f0000000040)='net/ip_vs\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) write$capi20_data(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10edffffff0000f5ffffffffffffff000000"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x400000000000000) 15:12:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf00}}]}, 0x20}}, 0x0) 15:12:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6000}}]}, 0x20}}, 0x0) 15:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x500000000000000) 15:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x800000000000000) 15:12:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd708}}]}, 0x20}}, 0x0) 15:12:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x1, 0x9, 0x100, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x64}]}, 0x28}, 0x1, 0x0, 0x0, 0x1011}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x20300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x5000, 0x0) 15:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x900000000000000) 15:12:38 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xb]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf00000000000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x30000}}]}, 0x20}}, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x6000000000000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x34000}}]}, 0x20}}, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x6308000000000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x400300}}]}, 0x20}}, 0x0) 15:12:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xd]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1000000}}]}, 0x20}}, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8000000000000000) 15:12:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x11000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x90061) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x8, 0x8}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000000000000010000000000209ce3ff17ad06da4a82e0100570624307ae060b3816a2797cbb32e6598c1a587e53da047a661b03602efeed7b3149c07d590f291541b3aaf6d582d75d49acd207d5e98d3dcf78a3f5aa178547504458d06bf2067146be5fd6f607285807287dfbe339b7198cb44f8a3b8ee393920b3bffc268a8eab5a470709de73afea4fef858c79639890da86e9fe0fc2ceb5027bf3e8aa7d1610376f0222deed4f5189f63bb91ce58281932f6c416cccc507b7a9b440907884abb7dc0c3718bf11b37b20a20009938d79423fc162fc8bd600d06788b60f1e79be4406eb182038a23f91650ecf5cb40df65aaa5bb71a95f9d67dc4c66d4d521a2d3d3160fd7f491783458f0a05836be538affb2c1a41d429684bee146a120f118234abfc5e6a0c69d4b14ef0de0fbebaef10905d2dab4f95790d54828962c2d433890091514b98ce2dbf259df74e5091e41c2d06f3cf6bb66c03013a4d1714f4c5f53c7111e4645dc2cea93b6d95571190428682cb3ce158b218e91bd337c62a1eaf194e712e1f3d4049eac61d74276b8575526b70d265c651d776560025208"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x9effffff00000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2000000}}]}, 0x20}}, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xefffffff00000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3000000}}]}, 0x20}}, 0x0) 15:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xf0ffffff00000000) 15:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4000000}}]}, 0x20}}, 0x0) 15:12:40 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xffffff7f00000000) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5000000}}]}, 0x20}}, 0x0) 15:12:40 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000b, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8000000}}]}, 0x20}}, 0x0) 15:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0xffffffff00000000) 15:12:40 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) keyctl$get_security(0x11, r1, &(0x7f0000000240)=""/102, 0x66) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000000c0)={0x2, 0x41416770, 0x3, 0x3f, 0x1, @stepwise={{0x7, 0xfffffffc}, {0x5, 0x6}, {0xc6, 0xffff}}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6(0xa, 0x5, 0xff) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010495f9ff000088189bb44cd6bc3eb08d9af78bc17f3a79392f4c1d7c925cc3f3d0ba80b6fd4d1241c5c9903530b9d15c115e48e142767862acac07f05a9435775858b06763b4454024734a69b21667cb7aa9ed0ce4ba40ffe13190b042c01741582e27317733560334aa316284b5f5fd15de28303666a2737f49e64625c8db10709c903671809726bd267135ff88406481f953822cfdfed4e46d4ca5cb6ad4aaa7a48ffcd387c11307f8381833136ba2d4d65f76719708986417a7", @ANYRES32=r7, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', r7}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9000000}}]}, 0x20}}, 0x0) 15:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x138, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000089}, 0x24000050) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf000000}}]}, 0x20}}, 0x0) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x60000000}}]}, 0x20}}, 0x0) [ 754.333907][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.364849][ T6420] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 15:12:40 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xf]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x8000) dup(r0) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9effffff}}]}, 0x20}}, 0x0) 15:12:40 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x40000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd7080000}}]}, 0x20}}, 0x0) 15:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="1084bda02dcd514819baff7350653ece812c5cb6e3990232da3096d71dc2cd8c294e42ea58552638ffc3ed49d7e66d4569dec3537c71c7dadac0c6d5195eb0fd760e03560f02cdae9b2c5c4e95a20838c090200fdca3b027a32c2af693066a5a10103d18f6ea67723bc3f81065ae8dac8a24533fe1d915ec6078d5a283ea3c81b6ff13c99c8b29515e779f4abc7f63fbb8c49e94ad8d3998b281e8293ab4b2b3692087b01081e37ce30e57a4bdd951331e854459b14b7956c19118ce916f825c0998dbf7eb64de640d3bb0db3a42d04bccf16d5d44103154364d92cfff4ebb1fdb6f9bbf5859cbc2b6223a623141050be5652a911116ff4cc18b6a531fb322c0c889597218f7f77ff689b26bd74b992b6f1ff035a71e0d8b192ff38e7c9f01fdac438086419a8eb297956e382e92f3b0292811c69e9bb98968050b9acf1516f3a3c9a3e8eae931af29f67b4b55e364301b4f699b2453ee0dbf5c00f74660bb9916c8d3a36de941d894aee82f3d3f11039f524a4c2db9219604fbaf7328ac7f80edf54d9546b771fae84a7929652f02de3e9855b2f4435f528105b0767025089a7ca1686b4e1b6de42cdaca79"], 0x1c}}, 0x0) 15:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xefffffff}}]}, 0x20}}, 0x0) 15:12:41 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x10]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x190, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast2, @multicast1, 0xff, 0x0, 'veth0_to_batadv\x00', 'vcan0\x00', {}, {0xff}, 0x21, 0x3}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv4=@private=0xa010100, [0xff, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x12}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff, 0x0, 0xff], 0x3, 0x7, 0xff, 0x4e23, 0x4e22, 0x4e24, 0x4e21, 0x100, 0x942}, 0x1c1, 0x24}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x0, 0x7, 0x5, 0x5, 0x1], 0x5, 0x3}, {0x2, [0x0, 0x4, 0x3, 0x1, 0x2, 0x1], 0x6, 0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @remote, 0x0, 0x0, 'wg2\x00', 'veth1_vlan\x00', {}, {0xff}, 0xa98648fc44f7806e, 0x1, 0x44}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x0, 0x2], 0x0, 0x4}, {0x3, [0x3, 0x0, 0x0, 0x3, 0x2, 0x4], 0x6, 0x7}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x8000, 0xfffffff7]}}, @common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0x0, 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0xff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r4, 0xa8, 0x29}, &(0x7f0000000100)=ANY=[@ANYBLOB="656e633d706b63733120686173683d78636248bf4c1d000000006f6e000000000000000000000000000000000000e593af60eab1a1b87a00"/79], &(0x7f0000000180)="99b6095252c91789c692f961abb38ce4102abb4c62ce2f58774d1e37a1ab03092e20e251f45b2a063d6189bae7689cc8183ae6db3cf7ce29615f09450ca1722af329212764bfdac91e787d443b222130a2c0a10d96db415a6207e626d861b733a1958e3091df5e9b9e6c6129c8f9aa341c6c329f79b3f4e414b2c008d21ffdfabf7ad8af46103eeb5ea3868fbd7ac45f3e709d06f655f64bf89efbea027b8ba598d3dcb544a07598", &(0x7f0000000080)=""/41) 15:12:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x5) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x3, 0x1, 0x11be, 0x6, 0x4800, 0x505d, 0x0, 0x8}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000000000dd8e4c09000000000000002c004fbe7c6e5221d54d05f65714d155850fcbebb7e9ce6faca62f11476eec15b2aa94583ef1130b8a8c78b27f534fe2950ecf28c5e5910c4a0599f3011a5a61ca7896c558703f09a4d4dc59217e6c39e25ecbebb7ef5151d5bd90ea0c499ad0fe57205cb8fa13a4e3d65ca75319c972d00a54c1dcdbc69aed85534c7b6b05297a02ddde60a2730c22d4a51d6b7c6dffcc6f361510242545c4f0f20792a6a0c8abf3179daa64ceeb9d2e864964047f0cf02ae9ff37089a17ee491484623702c2aea3c1c14462397e68942aeaed236e21cefbf16978f70586633e86fa70c06cb28e535c2034d4d2cfeec1b15110b5d5e342194427c608350e541e6dbb7fd8ea5a9352ce06137887e121c14794aa2e4ba51b29dbc0c3d956039aaa7733d80e9448097e612fc2b9c09eb7607bc71d5302cfca1f8b14355c3c7a6790129cbe918313758e4188724445085b1874fe918620c2ae57326a9ffd355a3dc5007aafde084346b8e26d94ec52dc5f", @ANYRES32=0x0, @ANYBLOB="0000000000400000600012800b000100697036746e6c000050000280060012004e210000060011004e2100000500090000000000060012004e230000080008002400000005000900040000000800080036000000140003000000000000000000000000000000000108000a00", @ANYRES32=r6, @ANYBLOB="08001e0004000000"], 0x90}}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x5000, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000040)) [ 755.080183][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 755.097416][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:12:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x486700, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = dup3(r0, r3, 0x0) write$capi20_data(r4, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf0ffffff}}]}, 0x20}}, 0x0) 15:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="41000000000002000800170033125c7cc345868bd0d8a5af70d97120e429899f2b5d836a9e7aaaa9459aab1d63898187594ba89df70b31661d38ad750facb90c560b6c51c036ff17fd9443bd2522fcf71df580f772b9973ff443be163e88ffa65f4297dfb5e2b7bd6e74ce026432cab25428feb23399df05abd5d896c95992f491997b4e7f", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 15:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff7f}}]}, 0x20}}, 0x0) 15:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff9e}}]}, 0x20}}, 0x0) 15:12:41 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7d000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 755.276683][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 755.295191][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x4000010) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x210402, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @remote}, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, 0x10001, 0x8000, 0x7}) 15:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffef}}]}, 0x20}}, 0x0) 15:12:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x11]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x89}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x4800) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1a4) sendmsg$inet6(r3, &(0x7f0000000300)={&(0x7f0000000200)={0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="9f9a1032d7d67f88cfade57b77e53f76dbbbb0e49e45bf7cad429b54facb8ff1d73ff10ddf4bf34e288687293d260c2adb488e2c", 0x34}], 0x1, &(0x7f0000000380)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x0, 0xd, [], [@hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x5, [0x5, 0x2a7, 0x2, 0x8]}}, @ra={0x5, 0x2, 0xbce}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}], 0x88}, 0x4000800) 15:12:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x8}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff0}}]}, 0x20}}, 0x0) 15:12:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5625a26270c96282, 0xfa00, {0x1, 0x0, 0x13d, 0x3}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) write$snddsp(r4, &(0x7f0000000180)="424f030557a06bf6378867c3f91e207c8d030e33358eaf2861a9a4dd68c155271531dd639af4f480f42c19bdbc181295244021befa77c815626948e1002435b14e861f3aa61243b15bbc8079872e16901b41228e435fb26c", 0x58) r5 = dup3(r0, r3, 0x0) write$capi20_data(r5, &(0x7f0000001700)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=r1, @ANYRES32], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) dup3(0xffffffffffffffff, r7, 0x0) 15:12:42 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x100000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="21000000000076da34f1194566e25cabb600", @ANYRES32=0x0, @ANYBLOB="b0f28d5eb7d2851004d3ccacb11610"], 0x1c}}, 0x0) [ 756.122849][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) 15:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000400600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 756.170744][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:42 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_proto_private(r2, 0x89ed, &(0x7f0000000040)="51c6f69a58ca667d1b014f36007036cfa317bd60cccf07d935dec688df7072b47d8932b3cb95f45eea5e8d80dd1786c88c8ff5c6639bfc811f37b0301fca593b6237ff40c9d4d8991f1a8b20ec1007") ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2c}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1015}, 0x20000000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:42 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}, {&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000380)=""/125, 0x7d}], 0x3, &(0x7f0000000200)=""/62, 0x3e}, 0x8}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/20, 0x14}, {&(0x7f0000000480)=""/146, 0x92}], 0x2, &(0x7f0000000540)=""/38, 0x26}, 0x200}, {{&(0x7f0000000580)=@can, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)=""/39, 0x27}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/91, 0x5b}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x6, &(0x7f0000001900)=""/139, 0x8b}, 0x1f}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/108, 0x6c}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/169, 0xa9}, {&(0x7f0000002b00)=""/81, 0x51}], 0x4}, 0x5}, {{&(0x7f0000002bc0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c40)=""/241, 0xf1}, {&(0x7f0000002d40)=""/124, 0x7c}, {&(0x7f0000002dc0)=""/209, 0xd1}, {&(0x7f0000002ec0)=""/3, 0x3}], 0x4}, 0x200}, {{&(0x7f0000002f40)=@ipx, 0x80, &(0x7f0000003080)=[{&(0x7f0000002fc0)=""/132, 0x84}], 0x1}, 0xfffffc01}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/161, 0xa1}], 0x1, &(0x7f00000031c0)=""/33, 0x21}, 0x8}], 0x7, 0x40, &(0x7f00000033c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000003400)=[@in6={0xa, 0x4e20, 0x21f9, @rand_addr=' \x01\x00', 0x7}, @in={0x2, 0x4e22, @loopback}], 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) 15:12:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/88, 0x58}, {&(0x7f0000001380)=""/178, 0xb2}, {&(0x7f0000001440)=""/53, 0x35}], 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001500)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000001540)) r6 = dup3(r0, r2, 0x0) socket$inet(0x2, 0x3, 0x1) write$capi20_data(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="650100000000000000090000000000000000"], 0x12) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}]}, 0x20}}, 0x0) 15:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r5, 0x200) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r4, 0x23f, 0x0, 0x0, {{}, {0x0, 0x2}, {0xd, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000280)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r8 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x300, 0x0, 0xef2000) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)={0x178, r7, 0x80, 0x70bd2d, 0x25dfdbef, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc481}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff0ed}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000640)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) 15:12:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x100100, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}]}, 0x20}}, 0x0) 15:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000006c0)) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x334, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc838}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4b21}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb6c}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x89}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x736}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x89f9, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5c7, @private1={0xfc, 0x1, [], 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe03}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc81e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13cf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x20044020}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5}}]}, 0x20}}, 0x0) 15:12:43 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x8}}]}, 0x20}}, 0x0) 15:12:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:43 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 15:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x9}}]}, 0x20}}, 0x0) 15:12:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x2, {0x7, 0x3e1, "aba820b9663c6b6e6c85a43343306bdbdb67a573d5bf8cfee2f5aa3558b87d89e644d926d07daff889e102bbd8d03a4f1bd5f7c712a3f431392ac737adc1c4bfa8851166fff76e35e3e5dfd6ba439e2ab6bb769e506c7f7ce1a92be8dff26f47015e58c260e607a1b29fed0e315d0fe53a4498794d4793cd1a0fa3e92e47c7a0ee0b7615443055ffc31b937358c3dc446107cabe2fe81bb2ce2ab2d8f65953a8799a8f687b3e4430555be82e7eec55c1e0afd98b624bf1e1df7ee7c0b507c74e40f75be85037c8b1092ff7421d1923c7048bd8ff2e7d7b72e673ad6cfc415f55bec524223cd7a59f3b61514b2a85e17f5f58f58d1ee13a83c698ffd8f5540f4d", 0x7, 0x2, 0x74, 0x2, 0x2, 0x7, 0x81, 0x1}, r3}}, 0x128) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000002000/0x2000)=nil) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r8, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x8, {0x45, 0x4, 0x9, 0x7}}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000480)=""/219) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESDEC=r4], 0x1c}}, 0x0) 15:12:43 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x180000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xf}}]}, 0x20}}, 0x0) 15:12:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000009) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000000c0)=0x10001) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r7, 0xc0305616, &(0x7f0000000040)={0x0, {0x1, 0x5c5}}) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x60}}]}, 0x20}}, 0x0) 15:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x2}]}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000880}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x300}}]}, 0x20}}, 0x0) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x500}}]}, 0x20}}, 0x0) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x8d7}}]}, 0x20}}, 0x0) 15:12:44 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="539310779c770000000000"], 0x1c}}, 0x0) 15:12:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc6b}}, 0x0, 0x0, 0x49, 0x0, "7ad088b8fc28dae0cf8cc79b96ebd21dd43c99c4177214540aab08e6cf05f92504124f71e4437b3fcd03f0058d2fa87cad8881fc35f6f4e63082e4f08bad8396dc4b07d038d653905e1f49e0d1fa3d79"}, 0xd8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000040)=[{0x3, 0x3, {0xeaf7c87a230faeb9, 0x1, 0x1}, {0x1, 0x0, 0x3}, 0xfe}, {0x1, 0x0, {0x2, 0x1, 0x4}, {0x2, 0xff}, 0xff, 0x1}, {0x0, 0x0, {0x0, 0xff, 0x4}, {0x1, 0xff, 0x2}, 0x0, 0xfe}], 0x60) 15:12:44 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x200000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:44 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000f27d20a19514c6474f2afbc3c91c"], 0x12) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x2aa, 0x2}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_u='version=9p2000.u'}, {@posixacl='posixacl'}], [{@context={'context', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '&+'}}, {@euid_gt={'euid>', r6}}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@subj_user={'subj_user', 0x3d, '^#%'}}, {@obj_role={'obj_role', 0x3d, '/dev/dsp\x00'}}]}}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x900}}]}, 0x20}}, 0x0) 15:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = getuid() quotactl(0xdf, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="f56eade33789e5b87a1a69f986877b35c969026f60d63ccbe88db8e512760733e98681fe4e2bd912b9519461449199bd4456c724adbe757e294c51c4409feb3d726cb0e23d0d1ac0da50b19870aff9102d10375dfbe08e14fb905882783d04534df865238079cbc04e417b3d7f46f10640476049cfde285d0b16eb136154cf5b60a7e5df6f8645412ac5711044ff258b86c7df5b752454c836f0fb7e31afa59702bffe39dc5399024b3c56c3e45e53ee36fbceff9e96") 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xf00}}]}, 0x20}}, 0x0) 15:12:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) [ 758.745380][ T6768] 9pnet: p9_fd_create_tcp (6768): problem connecting socket to 127.0.0.1 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x6000}}]}, 0x20}}, 0x0) 15:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00006789fdbc9d8ed12327070000", @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000"], 0x14}}, 0x4) 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xd708}}]}, 0x20}}, 0x0) 15:12:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x1, 0x401, 0x9, 0x7f, 0xdfb]}, 0xe) 15:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="040000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="b7d425bea3422699ef9a13076b278044397cab58a895bd4ed2e73e0e93a07752aa4292aab542fd9d56dd7ea57fa4cf9606255a6387b464aa9a0a322eb7191d2c2fca4b08e2708666526cb17068fce286a9a7f4c0669986a75957276a7ec0942a0b803ef619995465a4bdf54470e2039f6b3978c9c2c19f1574fea8e6931c1a4a1ffdf095228fd69ce7979d5fb52fa3bdb9a3a50d333d9ca7a2ae558d63a131393a26395c9412acc7c61eb69e503a741821b375bc792289d0292cdaf991449bdc5510a0b8ac42eb5f4e6a094ca98acdc96411a9fcfde15d70974313b756f607ef04396de230a2e6d0ce8469251619abf74267378457"], 0x1c}}, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x8000) 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x30000}}]}, 0x20}}, 0x0) 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x34000}}]}, 0x20}}, 0x0) 15:12:45 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7d0000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x90) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x44}, 0x8001}}, 0x0, 0x0, 0x2b, 0x0, "25546a99413dba1b1060731a579924084f93ef5243176c6ea914e9401e9f5af9fc6e5e413f6756debc3557ffd4e36fbbf6eeb805c05c4ba9f9f7125d8e25e6d18b249ac912948ed7faca8945035e8888"}, 0xd8) 15:12:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) [ 759.471339][ T6827] 9pnet: p9_fd_create_tcp (6827): problem connecting socket to 127.0.0.1 15:12:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x400300}}]}, 0x20}}, 0x0) 15:12:45 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xf8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r3, 0x624, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3ff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040094}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000800) 15:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfac, 0x600480) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0x4, 0x4000}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xf6) 15:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) connect$can_j1939(r1, &(0x7f0000000800)={0x1d, r3, 0x2, {0x0, 0x0, 0x2}, 0x2}, 0x18) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x8, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004041) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 15:12:46 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xd00700, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="2af01a9c977b2c60491b3e61a7032e252207bb41829ffc6a1596a758d09394c37b3c430ff69000288005e1730a4c05f477b832854d3e8a164b6369898440ad53ec326851db97c3234e94e11c"], 0x1c}}, 0x0) 15:12:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x8000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x9000000}}]}, 0x20}}, 0x0) 15:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x40, 0x14400) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0x80, 0x7a}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xf000000}}]}, 0x20}}, 0x0) 15:12:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_proto_private(r1, 0x89e4, &(0x7f0000000040)="58c39ae3f2bea303d27777dc51ce69eb78") ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf00000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x60000000}}]}, 0x20}}, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x9effffff}}]}, 0x20}}, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xd7080000}}]}, 0x20}}, 0x0) 15:12:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = syz_open_dev$audion(0x0, 0xfffffffffffffff7, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000040), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xff04) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, 0x0, r9, r7}, 0xb8fb, 0x0, 0x0, 0x8000}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, r5, r7}, 0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7fff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="0fdd8a86322f76002fa661df061c2a4aec2336a55e90444dcc6e1f0e5c2b86010000000000000074ff06b625a089842438a9d0f19de91d6895203e7c6671a5bee6369fd5db63f6271e8e89259f34a041d3b9aa0616092892180f4a0ecd9ec599f8a16d3e772a6e38d610bf053eef4c5ede17f7042ec7126d5a358bc7fbe8f3f12a25061a51b208da938086", 0x8b, 0x6}], 0x4c0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0x6}}, {@part={'part', 0x3d, 0x8000000006}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r7}}, {@codepage={'codepage', 0x3d, 'cp874'}}, {@creator={'creator', 0x3d, "e7269267"}}, {@quiet='quiet'}, {@quiet='quiet'}, {@uid={'uid', 0x3d, r3}}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, 'n{tpcip\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_hash='dont_hash'}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}]}, 0x28}}, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r10, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="f82be6bdb12ac865a12bd0b8d014625f75bd368373b9fad5aa55df2fd515a78befe9c05a282864bdfd09b224b6f4da96f0f9f2827b3e1941ac1875951ba585f9fc96494534098b50d2f2515267e4cbc25a7e8ead933712bcb1b469b24ced58381044fb13e7fdd81fe97fffd3a438148d5cc7d609a6b1102ed82c258a82b07db008ff1deadad109d81e24e4e24f3c79d7c065cff7f15c8608dcad4dce8baa1e6884ca32d4b8daaacb444d559bf6025a5dcb4f7b525320685520d968f7028265c8b333ae3cd6dd1386425c79e173ddda1ccfe4ce57d4ab6d804672eb1938ce05bdb8d5474c4d4244ad675a38c8042e7cc0c6ade799b9a98674d9", 0xf9}, {&(0x7f00000002c0)="1b2e50bea6cf04483e4179f63dc6b6300f8a5ef5e15c457d501984ea5d08e3989283c335aa843167a9d52f82b82e4a3c9ab3bba792345aef92dd5359aea19db2b6be803f063d09154e79c7cc82cab0b733f34fe3797cf56b3a1acb520d15bc17adbe15628a91c97c", 0x68}, {&(0x7f0000000200)="8a5256f499fd41303999681e3f2bebd0458b1e6922420a77b7dddcdd779605a2e7ee055ea5878b459e6b6ccb79fd930d329cc74e762221a8d0e322480721", 0x3e}, {&(0x7f00000005c0)="7be7de890813619d6ca70fe240c0336caf9b7d2eb52a24278534da5b7abc5c354bcf43af7420ecd3e9e62ab810bbd5fd9ff34e6bfbe31506d777f499b903f5b0be74980d75833843f3cfea7c956520e22e2d5613ec", 0x55}], 0x4, &(0x7f0000000680)=[{0x108, 0x10a, 0x4, "98836cd1da3015b2fa388105f8644e6eaf65814c401f690c2cec575da8f81e322f72b996842a9fc26d7b97489101c35a54c9f662ad6365ce6dac0f8f2d855cfa0f2bcf69097672ee7488490c9636c517e8705bf7ed480f6039a69502806d7ddecd8d2b0f1d8b1fc1143d3660d9e8e03285c9aea5cc20235ac2476790a8cd4f3d421f171ca167b0cf5e58b5b0464e00649b7a4b0c844135b5b2008288e3e025ee19b65aede3024f71cfdb3e33b7fd0ae5992b77604b71e167bbf7e018df1cebaf6e2166cab780ee5b3d810c8aeb3462715ac560f2d1f4d306d104891993f42184d59ea874bbd66ba76fe6f5400cd25d0c4324b893ebbc"}, {0x60, 0x10e, 0x7ff, "1646be327a218fe314d16d7f3cb8ee9b05d29a8d63c3efd116948b3ac1c84f22435c690f0437640098c5deee6a094c6840bf543dffe70ebabddbf6f85cfc2359f7722374104d6826559603071a"}, {0x48, 0x84, 0x8, "b3cac302d3fd7b48f7fbb9edcea554dd8ac01aedde7560766010ef45c70f5029bd1266e291172b6f1f7d6a4c5f557e495525baea566e"}, {0xf8, 0x109, 0x1, "acd17d7cc918b01bce6d9bf0febe2a20ec1a4edaf0f5e205c674704f6e9318ee35df7dbe0a53ff7e976ca89ae5da00a6e6e2b05e6b3a55d2b02bdd81955ccbd3d386af71da3ac016e151a6903c619f80ce98974c30bb6ffaf7bf50459ef9b3ae90e2419588b93c964c38193057641d09e56389abe000adb27f773a6d4366547c099f7006b94f806862bbf1a684748e7bff8deb922a2e0f344b0559624087f9d01d048d759d630317c1eb7902480dea64a31fddbd2425b3100fba5e9dc8b1a041d03eb4f953fdb265d0fd34513d6241afb8b9c2275142ace1ca443bd956dbd14035e869130b"}], 0x2a8}, 0x2004c080) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xefffffff}}]}, 0x20}}, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xf0ffffff}}]}, 0x20}}, 0x0) 15:12:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x1, 0x8, 0x101, 0x0, 0x0, {0xfd7568c8c0cdec66, 0x0, 0x2006}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfc9c}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x896f8296ddf9a75c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x1000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x80100) 15:12:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffff7f}}]}, 0x20}}, 0x0) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffff9e}}]}, 0x20}}, 0x0) 15:12:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000380)={0xfd1, "3e1fb99f4cc432e32ec2b59f6f3b5dcc9979dce885ea7254b401cca633b7b91c84acfdd6287ec7bd83d564aaf1f2982099453ceb43cdbc611007bba107df1837c45e856860114a498420463549ab5b65c9a3ab6276ef875f8f72a98ba8c774c48c92e41b13e0ec397e519e8555cb29bbfae82301848a60d1bcd15cad1364263df33d2a14fc8d372a959be8d969586d33eebcc8f17d1806a7e6d2428bc466ffb62bb97be265cc0bba9d27d522d0e4cc527a2ec4da9a9f01f200db100ae71ba95ca1f1cd8451f7ea4e8dad7127965793df6af25df7805d5b6053e12b92f74e216763a816ac53152f2995f690e2759c2d759bd5ad9096c121fc515b91fc9acac0028dfab1111585fe06bf9af54182f991238f21b91751970554c9d962654da2c85a9d8e4255d30bf001b886a4115457bc8d481b14143a6e9850585a151741bdc5856c26107df0b1ebe305448878bf8029fb3e910b4d2df87cac48f1889bbdaf3fda7d6164b4a0fa7409c9125b5ecdd58fbf42974a5a31032f7f3d6fe7523dbf0fc8be0fb95bec689c7ec35ae15ba59e287ac4167d1bfa4cd7e8f31b7a7b456bbc9875b6169702caf6dfc7a9e27aac0ca5359a22c81245f4b7b20edeff1085bfca579c37858076a7907124dee4b7ce795b89589cd3c16907a57cc0db20f44ec660d202e13eab3d72e120388500805500bcdc826ede6c7f76e769c43e4639efbc746333f0da4b651d67f5a1d3fc81326757e848d46e95c61db8ae918527d419db5dffc19c56a2b5bff48666e5f8601b7631f56e9c5d9c081eac69222d9766a55241c06a111ffb219cf7a8c199d32c1924f24c36ebf50c840cf8b65183e8cfadfe64671bf73158115fdbab6ffe90f7d71b7cd953594aea9f124f290a95b88f1686f2146b3f6d72d9f9c1b255a119d844d6dfa90dfbfbfc29a9c9ad867ffce93abed5edd8497fdd2c44965c093a50c426a0d0853b21188d868a29855170348a4120d132c87f3edcf2312e3604ac6355dbae7ac53fc0380a0bd6784d43808cf81cf5b74fc683b1d04fa0313b18a9b4894cbcf94f8fcad3bbc4431ac8f27b10c5e755b7e895fd5044388a3184909a61171dbc0fef92f7cb74eb661067d1b1dee39ddbc4f8da1658bf8db16c455b03acbd2badbbc8f21f93d6ff102048689177efaf3ddd959e8448b1b237484160b20f0c02d3c8dc9618a2b6bd4298490352956ef7d9267f47e7fc0a918213b75047c46bc83e22f389d40f82ef16b4a484d263de9aa075196795af1df58f1407b0afa60ce6d2143a2f7f54a8e07249190d6ab95b960a5b4cd01d78ebae158dcff20ff7bb6964ba147ee396acd6a9f1de4d91d60e73667b4ee7a0d5b888fb94f298adce0160d0df13c912da6fe022b16ca6ecfea114eb7639d4f91c2573a8553ca724dc3296446f7b66439eac1c278925569224f9f508546f05a661d686bb22e171d5f6bcd18c8a510b5e0f9639ef3d3f628faae6d7e713ac261778421c7bd83446b569ad5df9651d95add8c1c6322d2d207cf8fb848c80bda930cbd048e13059cd6912cdf06b1a60037df0c72899a10c80a7ecffc97637fccd706307d324383a1c00d4c8d64ec16f53b57dc3284931a43d771bde47263ee490df76c542e39d1a8a7d337f54cb96e3b5c532b73ca2f9363447154c5f27927f4c4e7b7544d81a0ab3e197d27f88579137c529fdf8a6cbdf52dadea5bacecbd50cb03ca80cb25461ddde89ad29f03fcea7318a74cad7249f88513ce58752e54b533784b368a1d4060dbfc54377f4958434cff645ce3c55dcbca30e17f06c3147c5e521cbf0b283925fa7564b9ac58e90901d33e860b0407351a55f37dda3bf53d0493b02c8682641ebc6e4869551ac536c5e21841994c81bb5d2ad85a214482ba1477d2762f86d45d6d50644b77ddb0f887dec8f1362a923d5de2ef922a754af5d54c12851591d31a7e2bf0abbd866c9f499e54e6ee48c09ecfbe472a39a479b85ac750a74958f8da8e935478b03ee300323b676d6632c06ac026de2bc32603468fe76e4ef84e459e94454171f28042897ee0538b8dd211d5d494f8faba5089e7934cfba7f0b5e1c261746a7e3dcc255a91b322bbfc057d93340bc234d9f09a664564e8004dfded44e2e5e22b79b8c14cba7df6525b1bae271c71b5b4ed24065a2adbba45a5c0c47ecb35f787bab80b02b5b91f875e191d12436b5cab11614753166d5bbe4f4a3d82020a6bf08bdb78865aab81b2479d4cc2eea67f9720c8b814d8884942c6ed17040910444ca128fae6f40f3994fec1ec4d7fbcffb4d0cede0b5ea53724a36431bf8cb9b0086adf95f0e6ceafa188f9880c152c996f1cf858ce16cdb02ca4618d2bf55a8416b08b7dd485d6e3c3da1c2b009a0e5b9d30cc19860cef4fe5706bcf96fbed05d4dd69264b159c69e7d90916401d6431d8e5624d199fbf6d95cf1173e1d321125de6d155b53f6f7f804b1b09b9441f58dcd22c0523520e1750f5ddae25666c011efe383bf6b970e8a22fd16131c647abd494a1ad863461d243d3fbc6dc308999ae3a564782accaab34b263b5e22ca59194647808c6067049daac9436eafaee3debaf0e5bba6bbdba09309942b295d052e11ed080ac0ea5e21bcf97fe28cf32ddeee0791bf5043ce52d1814b8d144ea8f5b0fc595494900be44cd27f7d6b2e466ac1dc9d7dfee9d2b3228ba995c0580378a34500caa8496fb2623fd08446a6d95ee79e22f1eb03f1f4969261cda56cdb4b55b4345925c685d134aae798850fe59d37af1b49154c5e0861012a91d79db7f205a286efb8738218f79bc23946c0e0fef6f420186a7f4a64bde9fa043901a4b5c025089a08c9006c8d933e5885c9898191bb52c476eb97b7d83b6386e4c3487d445017ebbee17bfd0f0657ff57707c9ae64e73b2c7687ed6015e5d1ab613974540ec44ddacfa872abea942617669723df6099c2aa89393c35e02a276af6cd2317ec4964912f53cdf7f72dee259887fbdca9d02d3b2a04f83d377dcf1a9a74e7bb12f6c336d0ce829afdec9374173c723a030ad85b0258881c5dea3a4b420f8f780d552cee4d3a4b7a8c564cab667170c355ace65756165942b370bfe6eada04b6b721f707a6f981d636803a25faab0a65de563a3991860d4bd536fbf93550b33a9248fd13368bfa83ea51c235c739d3da0ff01955ca26d9aa7901b838b1056d2cd7b810185468114aad5bbb95ae1430fbe780351f876053d0e4f4448f96a825c8d5254b3936aeaefbe9535d244b4219653d6b4c9448480f98ea06b58d69a8e0af00a1f0cadbd41dbc7199c7a4cc73875b2554798d4a4f28bdb6e45d6a36bf73f5fb75cd14a8909a32038e4f9dd707ec214018302e020805edc9585fa47d445c907e4766519d0c48dc290e4a0f94242322116a897ff17bf334fea3dec029a8d0e6a20bd0eedb4c3334a094d535297ffb3e76590f989bf7437c03cf08d27bc9529fa3e658e4fd382218dab1998f29c8c8e52fc3270b349c26a9eaef517f1079f61a2b73af734a5fdaca63dd1daedd9bfcc0f46a28dba061ce134e83bdd7b60eb4182a1c9a9dfcc55d0da7815612a646f3e70f06d6d04763a18a70ca36026352c98c4f2d128177e473ae8f5e8ca58df07ba0ba99b69fff1734cf0e9270c70fca72638dac66d3cc79c779550d9b219b69985ff10238a8cf721fec4c11dd67cf07df89bbbf04f61d510801f1ac7ca9f2ded88fbb17bd2bde241e2df83bfc8bc26edc2122cec42e45c1e8f653495dc6bc36e2c177b963dcd98a6c6eb1faa9bb39187821e65f3549286427ddc914cb35574d78417074b65a280782135ed7ffdc024c97d777eafa3eec69ef3aa9f1f4a15a77a5fc7fc11172e9f5656996a9cc24041183dbebf309f7d9b72714868e5378bb82b40924f3cea1cbc26c38b4ae185fae6d140a1611486615ebdc4a798b2f244936c219c50063e0b44608107e676840fcab0dab19060e8dc9c939d80aaaf020bd7dc8a7e27966a417852058d58b47c1f6312b1de9b7aced1bf9ab1f10c0c84800e3948263a6f2310aa614408b0d465c26f8866018112a8d00d0bccd4807b78b8bf003b719f0ce9c666131fd06363c134228a7bda4f640e3da7d1ff781456047ddebc4199c7f631c66455ac2fd18c6b77facd5f36378744fa0f736de0889af663ec073ad766fdc8f985121dec2167f01f4cb4363b73d996efab24985a19e65d6d3ee6de7efb818fc46e247b892f9a661e5b7082443d612be8f32c19e67e0a960482733954665730b73ccfc15c8554e8d118c696614f5e2a9fe0f070ccd89e331dfa99b9a5315a9e45d5967e019826daaedabc666001df56118d66ed2d217e69209b5802d7e30114319f06324c76c1a00aaa387e41b81eca0f3e25f9425e32a256de2f21f7802934d4eea1ce992de988e46c4fbce9efe44fef657b3cbc1e12feca31adf9576fee161f0b25b2d977e1a2ade458c42d42c824670da1fb14b82dbca03cdc952475b96400b0f3c1e89f21c7002405f51b5f3433f863dcebfd0984a522107fcd6f5ac1143b1c0d372ffe5f17e7e0e5a2f5c8b65f9d0a053238b4ec071d0cd4afe8b6469678308e031c19e2a3835a01f90a6b3d65ece2fe8aaf1e0c052a8d8788fddb7b2fc38eba18399019bd288c04929f47bbe9b7f9baac52a938a95ca99ddd9dacb500ab1701255e4cd65e58e677113855d54964e4c9401d21e23c82293a836371190ef668e3ff58cae3beaa38d917c207837eb0a3114e9a32ad4c5836ebcbce7ea33b873602b04423e32d88271fd0830c078b9392b348664c1f2e1c518dec0df02eef934fe6832233a221c87a0c5f8ab857cbb3b3a9a65c887aec79896fd6ecc3ac099cb9122e54c9344d1fb2edbb319f448a249a62e5cef523a1d53a6d2b308b8245dd5aa7e59bd26f4615ab77814e8203922146e9e2b7ab7617d7e71b564102b17dc5b029d5969c75212aa787aeff4dc5833d49300617731d5f81409b9ac0019d04ca428f2e5c3c8a8400f8ecbebf851f763e37fc9aa1d3877daa2fc6dcf99d10b46ec917a7cdba9957f511dfd8517642a5abcfaf5c3f44a9439d3fc4f60cb9e599b789605270b7880197f3ab7fc1c49d01022281c97d6260e7411e722d7d19373abb7f646dd4ee1a7e651ecc4c1b2ca8421b77a7ce89e256002722e0c502ddab4d612a10b4e18c27ce09d8b7edeeec46407dfa3d13a4a09cc2bc217de3438bcd886ab9e5f51c1e288496b208b08e0a8dbc48c2b3548c866c8b2c4fd4e53b5bd31979c568fc12b87e070d25f7561b14da71aa59966403add03978c3a4cef03d98229e47f9c259984d24fc2fac49980927188a66ac3e8ec458155d073dac24b8b2c534310b19a5383a1e848636b7faf5349667a72d8d37e0e2ad9480c55c1981995b924b6f2c9800eb6e5d8fd1bba5b0fcadbe74fc505bbac2b764cac1c88f970cbad639d2cc7521e82c9d9f38cf62491fd17cb61410717cbdb28e1f7ba85b3cf36090bc3bba5a9720887446b111753802ee34752cb7170d98772802fc6af8d02c53591d9c051a5f40afe79f33181ad8260f312a6b2ed6c3c8a9f7445c1b5f07fb3da960fa95dd875f46fb96383febc60a7d2c7b088027ca6b81ba817ed72e314614f24a72f77870b4f4b24b2057f243e667ab2c0ecf4931e79a589b1104464a046ec191dcb897a5cf99b385222e8747084bd547ee564bd485c7ae6b06980c4513c4d2"}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r5, 0x1af35f3e, 0x5, 0x7}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000100)=""/130, &(0x7f0000000080)=0x82) 15:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffef}}]}, 0x20}}, 0x0) 15:12:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000169fb575dd00d400", @ANYRES16=r0, @ANYBLOB="000400000000fddbdf2506000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20040014) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xfffffff0}}]}, 0x20}}, 0x0) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x9}}, 0x0) 15:12:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x80010, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write(r3, &(0x7f0000000380)="42abe5b7f557d35c4464849a73813902d01d99be81443609887cf892a2c48915eaacb2d20185d080281c585d82119cdb8cf98a6334518b0bc324f5609463ae06707f9ad7013fd55f82ae44aeb9072cd5", 0x50) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0x6, 0x3f, 0xffffffff, 0x3}, &(0x7f0000000100)=0x98) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r5, 0x6, 0x1000, 0x469, 0x2, 0x5}, 0x14) 15:12:48 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:48 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x10}}, 0x0) 15:12:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x480c4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x1) 15:12:48 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0xffe00000, 0x0, 0x10000, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000180)={r2, 0x5}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x40, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x111402) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000001c0)={0x30b2}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup3(r3, r6, 0x0) write$capi20_data(r7, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f00000000c0)) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x14}}, 0x0) 15:12:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0xc0}}, 0x0) 15:12:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0xec0}}, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x33fe0}}, 0x0) 15:12:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x3000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x200002e0}}, 0x0) 15:12:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x7ffff000}}, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0xfffffdef}}, 0x0) 15:12:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x2}, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x6}, 0x0) 15:12:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f00000003c0)="5cc67032aae03525335280313a5dfb3b17a89067fffe9181e89d4173a962080cc0a3334810af204df21866a633b6c4b5c17ceee3ee8e8fdafd80114400373289eb81d272f2ef7bba688503a746c1b4cdb59344a6e27e9cf09e461af04e16879c2baf78a73b4e7dfbeec5d7ffce97a1a5ce6591c7ed2b772892cafefad0b7912a0da3a05f19c19a91d47fd73a520bb9a4890b2954dbc38fb2ca49db5cefcbe2055d339b7036da149f7e93a371570360801d97a4987897f5ae1afc6cc61b945e89149c47ecc5b6d26e5a13454b9c6bc40cce422867dd555551645470b31004c958db0c1211bcf0d39c1ee26d99365d1afee52b095cc060e8f300a897c9c4b2c3cd68bf41d51af0db941499250e0e4477332f05afbaf5ecb8cf4f0ed45a04b9ace712c659c6c10eee07a72254fd1b962f5ea6c94316962717057ad06f5e221747fac768742e9617bcde3b3af58af3bafc81de767300717176af1176bcd0c28f25186669422c4848d3730d3e50", &(0x7f0000000240)=""/240, &(0x7f0000000040)="c0293c3e379294597cfbe1cad661cb463def50bdc63b14dbbd8e712f944a07d057b0523c50eb49232307742d4d7cc33cbc785d157b9734d6d0eaa5ca2803a24457029d6c000804ddc393f2f863acd0d74dfc1695e391e68f3dd728e50262af9463cd0ccea343b991af0574bd743ce3e4ae5cd2688fdeedac1a8438ed611bdc6e1ed772b522088bf848c770c522815fa7602bdcc48ee0ab272098604f", &(0x7f0000000340)="c465ea2eaf96db3bc8", 0x4, 0xffffffffffffffff, 0x4}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x200000000000, 0x0}}, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000540)={0xd71, "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"}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:49 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:49 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x701002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/142) 15:12:49 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x4000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:49 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'netpci0\x00', {0x2}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup3(r0, r6, 0x0) write$capi20_data(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000300002000"/18], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x8}, 0x0) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x300}, 0x0) 15:12:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:50 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', r5}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {0xfff1, 0x6}, {0x7, 0xb}}}, 0x24}}, 0x40000) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x5000, 0x0) 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x2}, 0x0) 15:12:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000060000000800039e8e1c12971923645db9f4498f002cddc7c76953857303daea778343d9baf9813683d189387b8b13cef91515839f57e7669923b8bc2ca4ef6dfd85ceb677a3b4d2475ac1274c4c3b6963a16c98522cde7ad3796d2d0e0b6d25f26b9963aba1963febfe09a4fe7a72a7723a36ca08646f7355f5093caac246c03abbd89099426c0d26b988f639fd7b2d7df74a41483a19d2506303ef67720ac0576f6464c8e29312a7b988e490d9ebfd8c92950dc5d8bb1d2de3560e0000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) [ 763.826306][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x3}, 0x0) 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x4}, 0x0) [ 763.902813][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x5}, 0x0) 15:12:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') pause() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x8000) [ 763.953665][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:50 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x5000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000066dc036c00"/22], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x8}, 0x0) 15:12:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x80003002}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x501, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x487a8a1f2599bae5, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1404, 0x20, 0x70b527, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xffffffffffffff8f, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x440c4}, 0x4000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:50 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x9}, 0x0) 15:12:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf}, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x60}, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x300}, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x500}, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x8d7}, 0x0) 15:12:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="24fe57b6107fc77000000600000007000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 15:12:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x6000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(r0, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) write$capi20_data(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="100021c80000040003000080000000000000c173c3000083785b45bec1d9afacb01b41c634ce6945df4c1b047439d4d4aba8c7f5"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x900}, 0x0) 15:12:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15:12:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r3, 0xc}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000440)={0x800, 0x2, 'client0\x00', 0x0, "950ba88921bd5ac6", "eafd9f4fd0168c270803f6337f9bb429cecd4a1786d6dc2cbb851e12eda7cd9c", 0x200, 0x8000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4, 0x2000}, {0xa, 0x4e24, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0x7f}}, 0x18) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x60, 0x32780) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000514000429bd700085fedbdf25080001000100000008000300010000000800846472310000000003000300000008000100020000000800030004000000080001000000000008000300000000000800e7000000000008000300010000"], 0x60}, 0x1, 0x0, 0x0, 0x4008084}, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf00}, 0x0) 15:12:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x9a0000, 0x2, 0x6, r0, 0x0, &(0x7f0000000040)={0xa10903, 0xdd93, [], @p_u8=&(0x7f0000000000)=0x6}}) epoll_wait(r3, &(0x7f0000000100)=[{}, {}], 0x2, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x101100, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x60, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x33}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x10001}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6f88, 0x2}}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xffffffffffffffff}}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x48}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x100}, 0x90) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x6000}, 0x0) 15:12:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESDEC=r3], 0x48}}, 0x40400e0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', r5, 0x29, 0x6, 0x1, 0x3, 0xc, @local, @empty, 0x7800, 0x8, 0x4, 0x9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x7000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xd708}, 0x0) 15:12:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 765.609894][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.654811][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x82, &(0x7f00000003c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e20, 0xeb, @loopback, 0x6}}, 0xdf, 0x80, 0x3, 0x401, 0x49}, &(0x7f0000000100)=0x98) 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x30000}, 0x0) 15:12:52 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1c54ccd49ff7ceb2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(r0, r2, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000080)={0xfffffff, 0xb05, 0x9, r5, 0x0, &(0x7f0000000040)={0x9909d8, 0xffffffff, [], @ptr=0x7fff}}) write$capi20_data(r7, &(0x7f0000000140)={{0x10}}, 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x8000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x34000}, 0x0) 15:12:52 executing program 1: r0 = socket(0x2a, 0x80000, 0x2800009) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000040)=0xfff, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@can={0x1d, r5}, {&(0x7f0000000240)=""/167, 0xa7}, &(0x7f0000000300), 0x20}, 0xa0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0xe00, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e21, @broadcast}}) r8 = accept4$llc(r6, 0x0, &(0x7f0000000080), 0x800) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) 15:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r3, @ANYRES16=r6, @ANYRES64=r4, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x400300}, 0x0) 15:12:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) [ 766.439783][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x1000000}, 0x0) 15:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000001634e272001afa475d4e885e1927cbf6dc2e36b3d46dd5dbb70600123adce19a1329adc4cb9a32a0a1a95f43032cdffd7e999d3fecc276d2d44474d5f4622da342efe8219528996e89c8464c95050000009ca0fec245937cfd10aefe7a1cd8275fb04851eb2884128daef8acf1a0cbc6155cdf8f87eee5923bad28e53ff193a8e3c0dc5d8e8c57", @ANYRES32=0x0, @ANYBLOB="192d053e632bd43eefb4151941a64e67"], 0x1c}}, 0x0) 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x2000000}, 0x0) 15:12:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x3000000}, 0x0) [ 767.106198][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x4000000}, 0x0) 15:12:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x2812, r2, 0x0) lgetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@random={'btrfs.', '#]+}\x00'}, &(0x7f0000000100)=""/49, 0x31) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xa000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) 15:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1000000004, 0x0, 0x0, 0x2}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000000000000000000007c577e3db5f96d02a32c0000"], 0x12) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000002c0)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000180)=""/199) 15:12:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x200, 0xfffffffc, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:53 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x5000000}, 0x0) 15:12:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x8000000}, 0x0) 15:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) write$capi20_data(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="10003179a611866439e581aecd5aea361a1fb9f26e222b7e7ff32aa7920cec25f15dabe5638b873dc0829da479218e1173d0bc624d2d022640e2d3c7e0cb76a1f2d86a748ca6ffc6576787325f080000003bdbeb2f3a0eb521766ec4ec22e5b78adf1bf2a4efeb2dfa0e77dde319ea4dc71f9d9bd1a6350bd363970001000000000000a06871c1fb7476539083c4b3272765f8d56e83e3d1cae7d81ca3f300d60000000000"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f00000002c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000ed8fbeb5f20113d490b8c8aa5f7e137667515dd3e62f4499344a78d2d014daad1acd475a50bc617971c7e74693e06d25195ee74322e66c127747f0beb7e066f256ed5f4a51c784e5bb8d9cdd154d1cfb6a4f875d970d5cce7045a54e5c53d157a4e7a8f6051481505f3c2ff258a9596f3e2c842e65", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r7, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, &(0x7f0000000280)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}}, 0x0) 15:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x9000000}, 0x0) [ 767.471370][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf000000}, 0x0) [ 767.529580][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xb000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1c}}, 0x0) 15:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x60000000}, 0x0) 15:12:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mkdirat(r1, &(0x7f0000000140)='./bus\x00', 0x115) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0xffffd000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000200)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000240)={0x4}, 0x4) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x82, &(0x7f00000003c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @remote, 0x5}}, 0x7ff, 0x800}, 0x90) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) 15:12:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x9effffff}, 0x0) 15:12:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0) 15:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xd7080000}, 0x0) [ 768.248532][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xefffffff}, 0x0) 15:12:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$SNAPSHOT_POWER_OFF(r3, 0x3310) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40001) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 15:12:54 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$capi20_data(r3, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="f2dec3"], 0x12) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000180)=0x88000, 0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xb000200, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 15:12:54 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x54f7, 0x48140) sendmsg$netlink(r0, &(0x7f0000000180)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8904018}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000380)={0x23c, 0x41, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@generic="8e19d213410a3deca98593f62ec9027c661058ed8e2cd5d75619e348e9d202a89d71de84570a38e465209a07ded7dfe2b5dacb470141910453831270c75d3443bcc8fe0ba66c7e588e0455292c46ab90cd6c9708eb7aabc6c2ebf4ba019fe56601a0c384353ea770a82bbc5ce1e9c81a774648013a186be7f0314f3e162a04f3c12a642f158dd03a8168eccd35a54ae250366c5cb87cc51e2af254df08e212a9a4919e5b077f53cf9ed4a5e21995f3106f17f6925436fc77f8adf99a6a17a607d463f54a698baa58a1f54130afcf5a3f79cd4a2746aa08ca9120cc13300c416c1dd3fb2e658080963bea", @typed={0x4, 0x41}, @nested={0x7d, 0x94, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x23, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@multicast2}, @generic="3a16139cf592a680bd3f69a7b6d42aaa5f0298732b8245109cb9ddff146df9211dc3b66411ac3d78fce7c18c25f503f23851975e02bf28a4a680950326ecbca94e9e0889c895b81a7b8deb495bd789ffbe3f42caecfc3313ed", @typed={0x8, 0x4c, 0x0, 0x0, @fd=r3}]}, @typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @nested={0xad, 0x39, 0x0, 0x1, [@generic="81f5567c79c03f359e1e07fcc9ec905f5f5de316cbe0614290db84ac7612a4b3544594c57ab4ebb1e658fa7fc91c95187c80643cbfcec4a7c19123f31d0e7f44c7c59d252a194c59765457a1991c46207bbcd57191fc340183f9f00aecfbd67b9a2d57ff079fad49bb2ede99a80276f13c688fdfefc9596f5cb125f2c4b34bdf03b9ababa134406fe79e903c032020ca4f322c4c8b87de53570e526593602bb8db3d7e034870ab72e1"]}, @typed={0x4, 0x8c}]}, 0x23c}, {&(0x7f00000005c0)={0x36c0, 0x22, 0x2, 0x70bd28, 0x25dfdbfd, "", [@nested={0x1213, 0x1e, 0x0, 0x1, [@generic="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", @generic="e6566cfa50c0cee02a472663e7b9c0fbdf75c873f0742986520a8a756c18728943de436afbe2d4f0c0ecc954e45e4a560a291908f410ef563c277d5e9d46afa4afd28332352d7641179595d1819726225ca1c1809df773604fb057ac1650e0daa3b7650a37e20bc5b9f26ce210936ba168725f97740328dad7befb57516250e3d9582bc6c0f49d37cda834763679d0a0155e56826ebe16c916761acf4f05e67d2f4e4dedc3d4da213fe2337e1326a86da43ebecaebaa4dd255", @generic="48d447c282a582ab50ba9f26d8adf90432bdc55ff18a8a0cdbe969b3f796371e9be7a35c43b4cb8751480f542dc67f76f702b5478901d576afb212808256e51fbeabc8dec0f65c6dd83bb19bd5ca8132dec727d32db02e4c88b2dc7a63c8185b0f08243ae6313c59184bc0146c70527fcead8c0257b0d9ab6880c6dda577602fb8019bf9e9c502e0851a5fd9dcfebaf7482e5f8489601fc7f65bc7914306963d10", @typed={0x4, 0x69}, @generic="98eb295b9e48041b3ee5eb29e0f265a440b5cade40beaedb6b37e437ccfe6ca73ce38d27a6bfb2a1322253d1a36b6a2a6ff37969469a8bcf707a55cce1dc12b7dbe3864d5236df1c2b1f8b2895fb8c7995c625f4f84fc4cb8d0edac78584758331d9788034721e3490cfa359ad2a1ed31e78ac7e49965d23b09c2c9e31a5a54848755873fa32e1d956f89bc34f24748e5f2737350da3d5a6b56ef066f06a8fdbabfde122359d1a79f4e4f60a089902e20a"]}, @nested={0x326, 0x4, 0x0, 0x1, [@generic="3593add589c022f75283fbb41bf0750eb4de10b5c6a70f818d0b1cc57f852f1f1fcfae637206b21e20ba397fe1d192e845dbf65b7088c43cf1d9696a7df6d1ec9b01aff0a6fd67c04a0389d486ce8a3bdcc96cc59a2bd80bffd2b47ec550affa4bdee3e634cf9e32a75e619669451c4becb61159dcec28e249b7e8a22403914ccb953aeae392ff30c02bac79", @generic="927f9beb588919ebe2e411f70ba68ff71afe38848b6c52eda564ccd51fd6e7c5670a31a347f567bb6c5e78d8d0e4a3ef7334d70200b85574ecc712466e80ab8cc678c4a661be07bbfb96dacf42634a1cfc0365f600f94e22790b272908393ed69e2da364cd8558b9a0cc91ef0e3a56c842fc4803589a55d6fb699ef4d5a8b853dcd0ea5f3526d1d07724180272ac1ea5bd97b5b3866578ba9003e3f13b832a4d0ddf152b1c3baeb74ef3ea3c6c5ea9f86516f60942e322653ea0baf1c47a861b0cd2cc3e0809f1bd7b2cba5509a3345a8d928da2182e1af2b6b07632e436c7eca9e311e1c46c4f2e770ea51858de98a4a0d54d", @generic="38b4ba25504e26b315bf1d33474bc4281c8af82f1f456291a9c5debcda3a345ca457d0cd0df2e9704bcface4dc79433a48bd248a9c99d48b7d23a9f531d762f99699ddbf2f1b433b0e12e3ed9d1d9d8c", @generic="4294f323803887704cc616dd40db32db86be70cacedce0e221f75e45c5c4db3053d2acae7ebd70af16aed7d6ecbae88943263f192d0d7440ee7a919ab6bd06722707cf9a7af100c93544e591160028c812e86727e63a7dcdf5cdc3575b0c2e28816ad35cca5fd64bef014bc836b5a29c44fef2d56e41b3b6de62b574af2b946dfb57c7c274fb1351a080a2c7c82ce80fff286f71f919420e6ca24368bf3e9b7fc2cc3cb26966e60b78927453ca1f6d4f314825fa2a7081ea7bcba846621474a6948fbbcc1c84025a1ee238f1c190ddd5fcb9f4cc311ce4a1a728a0d46035b057a2828cb83a20451b8bc8c2ae12d87a", @typed={0x64, 0x63, 0x0, 0x0, @binary="068bb34f2279e295a8d13f46cc5bde782888012f8bb8861aee0deb4f73cb060b381e9ff62bbd16ed7ec91759c6f7de1ba683ca97b36a40fc29f1829544247be1baf5cc3da82746011bf623bd1d81a818f17b4aef2baacd856e754f4507b8788d"}]}, @generic="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", @nested={0x174, 0x68, 0x0, 0x1, [@generic="aa560ef1c35c7a428adcb591362e9a4be7467bcd3fae05943b001233a18999e798fe6ba45a07479d0a2f7d3ee1bef2d9113aaa0b5ec79c0f1e01b961de03adb7bded7670b48270ee4104011c0eccd0e28cab9c2152fbfa847fddbef7435c87ff5cf4521701b08554472c52af02232489a78ce0832fb7c5dfbb04ff8b1b5432cc454c568b65f8bbbd9fc593ac95805c078f0ae0efb33e503a716ec7483463bd062ada8e21277cbfabcca33819b38fd945922b4149d84c25689a8845d848e944e6dfa860f0bcf0b5e16ddb08b71a2bf675", @generic="9c975d82a5f627000aa2e8844342d4df92e44cd141ebecf768029ceb383a52455229aba6955f9f5c74062568fcb17fc1a5301bd540ac751d1be5331af552155c94f398d9367940fffd023add2479615215fb202ffebc926522486c7ae44f6ef1827aa02c73780be6a5dd07986a6b58c88aa6bdd8569517fd6d25fc2d2a395ae3ac2bd0e8ec4f37d2b34305a7ef34cd014f907c3765711a16", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@empty}]}, @generic="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"]}, 0x36c0}], 0x2, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0xfffffffffffffda3, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) 15:12:55 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x242002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x1, 0x6, 0x1}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) 15:12:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xffffff7f}, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = syz_open_dev$audion(0x0, 0xfffffffffffffff7, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000040), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x11, 0x800000003, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r9, 0x0) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8001) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xff04) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, 0x0, r10, r7}, 0xb8fb, 0x0, 0x0, 0x8000}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, r5, r7}, 0xc) lchown(&(0x7f0000000000)='./file0\x00', r3, r7) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xffffff9e}, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x100000, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xffffffef}, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r1, 0x80c, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101043, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x38, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d6300000f630c400000000000000000000000001063084000000000000000000f63000000000000003e1c000b6300000c630000"], 0xb2, 0x0, &(0x7f0000000100)="0510edd9801deb986bb3391a389dbb1c43f123238afd422621b22e6fc7626f9d419671a46bf714c4cd14a560f589ff65de8ada8ede23190d63d2c43861d7ce5b18488284578b7a1d06e0c18ad19589c47da1769c9f2e99adf5f78a823eac82952c0353c2b01d787349c80725922b04610d0dcac0b30216a944648542b643e075ebd8a1056aba077f0d2a9c3b699748f6677ccc3e917852e99402042729d97a969f0b9f47017ee2bd3e7327d8d63135e8960c"}) 15:12:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000004fc000000000000000000"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xfffffff0}, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="00082bbd7000fcdbdf25450000000e00010061657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000800010070636900110002003008008e0002000000"], 0x88}, 0x1, 0x0, 0x0, 0x40020}, 0x1044) [ 769.243270][ T7642] __nla_validate_parse: 1 callbacks suppressed [ 769.243278][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:12:55 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x3) 15:12:55 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xd000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x3000000000000}, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0xffff, 0x0, 0x3012, 0x200, 0x9, 0x8, 0x8, 0x1}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 15:12:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x100000000000000}, 0x0) 15:12:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="288a5dcb610c0d919ca88a8c25053ccfe9e04bb62f2a094ad955fb867609e17e885b389111af4c57a5417ef01400fe0ff50dbbb4", @ANYRES16, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="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"/381], 0x1c}}, 0x0) 15:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) 15:12:56 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = dup3(r7, r0, 0x80000) write$capi20_data(r8, &(0x7f0000000180)={{0x10}, 0xd0, "2232601a4fc002f3947cdc1dd6122666d1192f782faf1171ceb92dc68e9f2099b1d589124948ea8964f76c51fe7296d3cc6582a766cfbd19d1ca9656b6daeb10bf358bc732ef0c23b024351af91ab7ad977f1e7aa8c602b65860f715310d2a42ad20ddf344aa31452d111a3a6b60fc3071aefb78dbffc16e82ba3123094401dfeef950d7c009311d1bbd9bc0dca01a5e94a56b85449559059ce7d53d51ce1f4becd6b587c4243fa5d7d5abae887ec86b75276cae6972e5bbccf70fbabb1eef56fe20fcd7242273ac6cec0e5b3dec045b"}, 0xe2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000000c0)=0x6) 15:12:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x40, 0x1, 0x1f, 0x2f, &(0x7f0000000040)=""/47, 0xfb, &(0x7f0000000240)=""/251, 0x107, &(0x7f0000000340)=""/263}) 15:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) 15:12:56 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x48], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x614, 0x84}}]}, @common=@SET={0x60, 'SET\x00', 0x4, {{0x0, [0xa]}, {0x0, [0x0, 0x3]}}}}, {{@ip={@remote, @loopback, 0xff000000, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [], 0x0, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) r1 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000100)={0x8, @sliced={0xe52, [0x1000, 0x1, 0x0, 0x9d0, 0x79a1, 0x8, 0xff, 0x7, 0xd918, 0x6, 0xffff, 0x6, 0xf1f3, 0xfffb, 0x9, 0x2789, 0x8001, 0x9, 0x3ff, 0xffff, 0x22b, 0xd9d, 0x0, 0x0, 0x7ff, 0xfff8, 0xff, 0x81, 0x1, 0x1ff, 0xfffd, 0x100, 0x4, 0xde7b, 0xc1ab, 0x5, 0x7, 0x6, 0xffff, 0x0, 0x5, 0x531, 0xffff, 0x4, 0x5, 0x200, 0x7, 0x2], 0x20}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:56 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xe000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) 15:12:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0xc2f, 0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="374f35de241f92d57531646ab705c1af4000000000000033d900000000000800f000", @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 15:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x500000000000000}, 0x0) 15:12:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x800000000000000}, 0x0) 15:12:56 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000240)='./bus\x00', 0x141142, 0x40) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tkill(r4, 0x13) migrate_pages(r4, 0x3, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x990000, 0x200, 0x5e, r5, 0x0, &(0x7f0000000040)={0x9b0944, 0x5882, [], @string=&(0x7f0000000200)}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') pipe2(&(0x7f0000000000), 0x800) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r6, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000100)=0x1) 15:12:56 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x900000000000000}, 0x0) 15:12:57 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r2, 0x7, 0x3, 0x3f}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x5000, 0x0) 15:12:57 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0xf000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x6000000000000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x8000000000000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xd708000000000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xefffffff00000000}, 0x0) 15:12:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 15:12:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="300000006ed850b757a7ca97ac7a7a0000000000020000000000000000000000e74fabb1"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x10000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 15:12:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:58 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0xffffffff00000000}, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 15:12:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r3, 0x309, 0x0, 0x0, {0x3d}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xec, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd202}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 15:12:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x5}, 0x0) 15:12:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)={{0x10}}, 0x12) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x8}, 0x0) 15:12:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x11000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r3, 0x309, 0x70bd2c, 0x25dfdbfe, {0x3d}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x20000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="0100e0ef69aa779932392f74bd52c40001a69fa57cc1b1f73b78b721ba22a3c775221eb4cd1571c72167bd23befe43f69575ae0000000000000000000000000000000000001700000000", @ANYRES16=r6, @ANYBLOB="90002cbd2abc07391d7000fbdbdf250400000005000100010000001400020000000000000000000000952e251bd830ae0000400000010800050000000000080006018000000000000000050001000000004607005700000000000000000000000000000000f3ff00000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000054) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x110, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x28}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x24}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:etc_t:s0\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x48800}, 0x4000840) 15:12:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0xf}, 0x0) 15:12:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x7ffff000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000227bd7000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="7b4851b29fad2a6871e10badd92164dd34e5c89e1fbcc78f4bdcdcef92ed2945a6e54e0406dfe410e95f73d098af224f62de1469acf2a0fd0bfbc3b69619fc20"], 0x1c}}, 0x40000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff838100000016000020", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe026}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10004) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x60}, 0x0) 15:12:59 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101082, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x100000012) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r0, r2, 0x0) write$capi20_data(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="63b8551d00000000000000e5000000000000"], 0x12) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3c, 0x30, 0x5, 0xc, 0x7, 0x7fffffff, 0x4, 0xf, 0x1}}) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)=0x5) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) 15:12:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4040000) socket$inet_icmp(0x2, 0x2, 0x1) 15:12:59 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x1200000db) ioctl$SNDCTL_DSP_SYNC(r0, 0x5000, 0x0) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 15:12:59 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x20000000, 0x18, 0xfa00, {0x0, 0x0}}, 0xffffffdb) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x5000, 0x0) 15:12:59 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20100, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000100)="c231217c757b083717bde0dfe01f3311f0c2a0ebb96a566827abe64381a12c21b7680cc6a06a0f897abb7a8ba9b0e8ba07d9fe761388ae9248327cc13e2344865a25b46e73d551a01c859c33177eb20a9dfb788883d39143f25ad5d4dfa0dc275aabb740b4d66a697c84b5007f6110ab831b3c21b0cc1c1ea83a83d8aeaac312c273ce993bf4af1ecebbe5449e6e9a7ba5405b110f0a9310ef3b32421e4633d631cd0d9aa186374423cdcef2") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 15:12:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x500}, 0x0) 15:13:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="12fa80f839050652b50ee38cda52501c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080003003aba31648601604d5121e05307b43e6affac132c861feba10d501c84faa61aa1296a70bdf3eaa5ab752e18b5c17caa81a00099f408486737bb33fa38da718f1904fa1bc108c3503cab58d9024ecde6aa8dc70d97431d83071f50dcf4ed7046c7a0886060fb69dfd1d25aec2a5252aae7094c70e74bc33d9bcd9208bbdb26c524771b18743bb785fe66e7203fb2d3ee0746eb75883e06b12d3e", @ANYRES32=0x0, @ANYBLOB="9bd97f801f1bb171577532b2c270789ca1785c2fef7377613281eb9ff6bcaec8820ce747c69dd7907412e67602460159f9fa05b872bca6c7298faaae1224e0ff2bceac2f3cfea792c31e852eacb47132796c4092eb7c6ee5007464d09868a4af66db89f18da3ac0738948f5ca4ee00000000000003ffc3e7e2068432ac54a279feb3e5d8b09a7cac8697d2b33b8f2d524de2df7cb271d1374c5bfed8bb47e3defa9e52d94d97b466c9313b3ddf"], 0x1c}}, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000000)={0x9, 0x14, [0x1, 0x13ed, 0x61, 0x6, 0x5]}) 15:13:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x8d7}, 0x0) 15:13:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x0, 0x900}, 0x0) 15:13:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x7ff}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac08, 0xfac0c, 0xfac0c, 0xfac03, 0xfac0c, 0xfac0f, 0xfac11, 0xfac01]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8084}, 0x4040) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffe01}, @NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7fffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="fcffffff", @ANYRES16=r8, @ANYBLOB="01000000000000000000090000003c00038008000100000000001400020076657468300000000000000000000000080003000000000014000600"/74], 0x50}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x52b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x26a0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x80000) [ 773.998992][ T7978] ================================================================== [ 774.007124][ T7978] BUG: KCSAN: data-race in snd_pcm_drain / snd_pcm_start [ 774.014157][ T7978] [ 774.016464][ T7978] write to 0xffff888121c24000 of 4 bytes by task 7976 on cpu 1: [ 774.024068][ T7978] snd_pcm_start+0x31f/0x4b0 [ 774.028628][ T7978] __snd_pcm_lib_xfer+0xf15/0x10e0 [ 774.033739][ T7978] snd_pcm_oss_write3+0x192/0x220 [ 774.038769][ T7978] snd_pcm_oss_write2+0x13a/0x250 [ 774.043803][ T7978] snd_pcm_oss_write+0x313/0x890 [ 774.048721][ T7978] vfs_write+0x1d6/0x690 [ 774.052934][ T7978] ksys_write+0xce/0x180 [ 774.057145][ T7978] __x64_sys_write+0x3e/0x50 [ 774.061905][ T7978] do_syscall_64+0x51/0xb0 [ 774.066300][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.072162][ T7978] [ 774.074461][ T7978] read to 0xffff888121c24000 of 4 bytes by task 7978 on cpu 0: [ 774.081985][ T7978] snd_pcm_drain+0x82/0xa20 [ 774.086457][ T7978] snd_pcm_kernel_ioctl+0x1ae/0xc20 [ 774.091624][ T7978] snd_pcm_oss_sync+0xb2/0x680 [ 774.096357][ T7978] snd_pcm_oss_ioctl+0x613/0x2970 [ 774.101363][ T7978] __se_sys_ioctl+0xc9/0x130 [ 774.105921][ T7978] __x64_sys_ioctl+0x3f/0x50 [ 774.110480][ T7978] do_syscall_64+0x51/0xb0 [ 774.114867][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.120981][ T7978] [ 774.123276][ T7978] Reported by Kernel Concurrency Sanitizer on: [ 774.129425][ T7978] CPU: 0 PID: 7978 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 774.137975][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.147997][ T7978] ================================================================== [ 774.156026][ T7978] Kernel panic - not syncing: panic_on_warn set ... [ 774.162589][ T7978] CPU: 0 PID: 7978 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 774.171153][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.181179][ T7978] Call Trace: [ 774.184450][ T7978] dump_stack+0x10f/0x19d [ 774.188762][ T7978] panic+0x207/0x64a [ 774.192634][ T7978] ? vprintk_emit+0x44a/0x4f0 [ 774.197280][ T7978] kcsan_report+0x684/0x690 [ 774.201755][ T7978] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 774.207276][ T7978] ? snd_pcm_drain+0x82/0xa20 [ 774.211940][ T7978] ? snd_pcm_kernel_ioctl+0x1ae/0xc20 [ 774.217281][ T7978] ? snd_pcm_oss_sync+0xb2/0x680 [ 774.222202][ T7978] ? snd_pcm_oss_ioctl+0x613/0x2970 [ 774.227368][ T7978] ? __se_sys_ioctl+0xc9/0x130 [ 774.232097][ T7978] ? __x64_sys_ioctl+0x3f/0x50 [ 774.236839][ T7978] ? do_syscall_64+0x51/0xb0 [ 774.241401][ T7978] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.247460][ T7978] ? debug_smp_processor_id+0x18/0x20 [ 774.252802][ T7978] ? __irq_exit_rcu+0x4c/0x120 [ 774.257542][ T7978] ? idtentry_exit_cond_rcu+0x2e/0x30 [ 774.262901][ T7978] kcsan_setup_watchpoint+0x453/0x4d0 [ 774.268244][ T7978] snd_pcm_drain+0x82/0xa20 [ 774.272748][ T7978] ? __mutex_lock+0x651/0x680 [ 774.277395][ T7978] snd_pcm_kernel_ioctl+0x1ae/0xc20 [ 774.282563][ T7978] ? snd_pcm_oss_make_ready+0x72/0x1f0 [ 774.287991][ T7978] snd_pcm_oss_sync+0xb2/0x680 [ 774.292745][ T7978] snd_pcm_oss_ioctl+0x613/0x2970 [ 774.297741][ T7978] ? tomoyo_file_ioctl+0x1c/0x20 [ 774.302657][ T7978] ? snd_pcm_oss_poll+0x520/0x520 [ 774.307650][ T7978] __se_sys_ioctl+0xc9/0x130 [ 774.312210][ T7978] __x64_sys_ioctl+0x3f/0x50 [ 774.316786][ T7978] do_syscall_64+0x51/0xb0 [ 774.321172][ T7978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 774.327031][ T7978] RIP: 0033:0x45cba9 [ 774.330889][ T7978] Code: Bad RIP value. [ 774.334922][ T7978] RSP: 002b:00007f2e5ac80c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.343299][ T7978] RAX: ffffffffffffffda RBX: 00000000004ee120 RCX: 000000000045cba9 [ 774.352020][ T7978] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 774.359960][ T7978] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 774.367900][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 774.375847][ T7978] R13: 0000000000000500 R14: 00000000004c80c2 R15: 00007f2e5ac816d4 [ 774.385197][ T7978] Kernel Offset: disabled [ 774.389534][ T7978] Rebooting in 86400 seconds..