711b98f4f7d5053642068a3fff704c3fe26ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd292fdf886ee3e64b90f47ce22661c7a21f7bc10df0248079b7be17284eb54e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d7b3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade003000000", 0x2d5}], 0x1}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x23ab548a, 0x40) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) 09:05:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0x10}, 0x10) memfd_create(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4) 09:05:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000030400000000000000000000c7b1afda391794ff4eb2d75fd911a588a5aa893bda3ad15582adb938494c93e33b054194a5b555a12aca95071e9db15e28483f4170e2abdd2ad14a562a0a52c09d2a7df5070bed44"], 0x10) 09:05:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)) dup3(r0, r1, 0x0) 09:05:33 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xa19e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:33 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xa19e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x3, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) r4 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x5, 0x3ff, 0x3, 0xb0a, 0x0, 0x8, 0xa8, 0x0, 0x1000, 0x2, 0x80000000, 0x7, 0x80000001, 0x5, 0x1, 0x8, 0xd5, 0x73, 0x1, 0x3, 0xcfbd, 0x5, 0xceed, 0x5, 0xde2, 0x8001, 0x80000000, 0x6, 0x96, 0x9, 0x4, 0x9899, 0x4, 0x3, 0x55f, 0x3, 0x0, 0x80, 0x5, @perf_config_ext={0x1, 0xffff}, 0x23020, 0x7, 0x0, 0x7, 0x578c, 0x7fff, 0x1}, r4, 0x10, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0xdcb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @local}}, 0x20, 0xffffffffffff8001, 0xffffffffffff7ea0, 0x5a31, 0xfffffffffffffff7}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000340)={r5, 0x7c7, 0x6, 0x9, 0x20, 0x7f3}, 0x14) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000000000000000000000000001283d01b2e0927117dd72195b82c819dc2ee1b00555386b41d058e2c089c174269cdb26"], 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) 09:05:33 executing program 5: eventfd(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) r6 = fcntl$getown(r0, 0x9) write$P9_RGETLOCK(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="2a0000003701f4ca5f52a12dda0091603bbc006d000305000000000000000400000000000000", @ANYRES32=r6, @ANYBLOB='\f\x00#keyringbdev'], 0x2a) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r8, r7) write$FUSE_DIRENTPLUS(r8, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:33 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0x90200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)) dup3(r0, r1, 0x0) 09:05:33 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80000001, 0x0) flistxattr(r0, &(0x7f0000000200)=""/155, 0x9b) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xb, @raw_data="2d0e5021996845a80ed6091a49dba379e43d415e1295b0eb00fd31782b56a10714b9c4839b4e62d440718b270ae1668dba5a7bdab822f4368f26412f1f7b7804cc0e800ea58467364b6e95bad415024fc6062fbb17310329b93a855a4cd64f1dcb8ea36a097911f2e3cf839a864bff1612a8426ccd24d247ade9996ce9c387b91a7ecc5f633b7158e7ef9bf63b145dfa9cf90f7206cd08d73c03f7494ebd66fd6ab343bc85c74e322f92fe115d3926f684e55115941c3bc5c2db30387b761dbbce8bbb2f90b21d6d"}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x8, 0x42474752, 0x280, 0x1e0}) 09:05:33 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa19e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000000000000000000000000049"], 0x10) 09:05:33 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000002, 0x11) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000240)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) 09:05:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1}) dup3(0xffffffffffffffff, r0, 0x0) 09:05:33 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) fcntl$addseals(r0, 0x409, 0x9) 09:05:34 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa19e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x60000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0x10}, 0x10) 09:05:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/media#\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='rpc\x92p\x9f\xb3\xa7\xd9\xb7\xba', 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) write$P9_ROPEN(r4, &(0x7f00000003c0)={0x18, 0x71, 0x2, {{0x18, 0x2, 0x4}, 0x81}}, 0x18) r5 = accept$unix(r1, &(0x7f0000000200), &(0x7f00000000c0)=0x6e) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfffffffffffff07c, 0x400000) kcmp(r2, r2, 0x1, r5, r0) write$P9_RMKDIR(r6, &(0x7f0000000340)={0x14, 0x49, 0x2, {0x0, 0x0, 0x8}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000280)={0x56, 0x9, 0x8, {0x7, 0x3}, {0x1, 0x5}, @period={0x5f, 0x8001, 0x8, 0x6, 0x41, {0x8, 0x2, 0x7fff, 0x6}, 0x7, &(0x7f0000000140)=[0x6, 0x9, 0xcfc, 0x800, 0x7, 0x5, 0x0]}}) 09:05:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/38) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:34 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa19e, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:34 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000300)}, 0x10) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/140) 09:05:34 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000380)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x8) 09:05:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x80, 0x0, 0xab}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0x6c, 0x7}) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:34 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1}) dup3(0xffffffffffffffff, r0, 0x0) 09:05:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x140202, 0x0) fanotify_init(0x40, 0xc0800) dup2(0xffffffffffffffff, r1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) 09:05:34 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x105000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x200, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca97}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38260}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x417}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x20, @local, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4048000}, 0x48000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0x10}, 0x10) 09:05:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10002, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xa513}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x20, 0x200, 0x100000000, 0x8, r1}, &(0x7f0000000200)=0x10) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f00000000c0)=""/35, 0x43) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x5}) 09:05:34 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x20202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x3, 0x8, "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", 0x17, 0x1, 0x401, 0x0, 0x3ff, 0x200, 0x7fff}, r2}}, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x3e62fb6d2e9a48da, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup3(r3, r3, 0x53dd8812375bb047) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000040)}, 0x10) 09:05:34 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000340)) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0xffffffffffffff03, @ipv4={[], [], @rand_addr=0x7}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2}, &(0x7f0000000300)=0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) sendmsg$rds(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/204, 0xcc}], 0x1, 0x0, 0x0, 0x40090}, 0x10) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x7fffffff) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000000400000000000000a7ddc1ccc498ce2dfe774255659bb11297c768b47c149e8c46c86123a31684c8d1d38f42e331d9aac0011b6bd77ae086e18875a6ee64276af6076d5d74482eabf272fa4f0695e89226ed7500a6822dd87316b0b619e57baf96cbfd5b5a9e0436691bc8fb1be70021b62b6ea0433259792a43e99862fe9982e32cc6a2d87312068c03da31a6af06b8051080e2e321a5fbfa0be47c2eddeb39b69fa6963307f491e6ce1963d4d7be7b7d6fc04155cfb5d4a33be56a338948ff"], 0x10) 09:05:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) fcntl$setpipe(r0, 0x407, 0x5) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x2, 0x0, 0x3017, 0x0, 0x7, 0x1ff, 0x22b}) dup2(r1, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="100000ac28cc91ca65519e0000000000"], 0x10) 09:05:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c3908530e4f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2def6721639176fad9512ee9b4c5de1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093faee04114663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c466"}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000380)="0f0766b818008ed80f20e035000040000f22e00faea66647000066ba2000b801000000efc4c13565d4b805000000b9f4ce05c80f01d9670f01750c66b8e3000f00d8c4c2e99626", 0x47}], 0x1, 0x40000, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:05:35 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0xd, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) r2 = shmget$private(0x0, 0x1000, 0x54000052, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/58) 09:05:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c0, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb87}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb49d}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000000000}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc00000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1}) dup3(0xffffffffffffffff, r0, 0x0) 09:05:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1c0d, 0x401) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0x8, 0x200}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r2 = dup2(0xffffffffffffff9c, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x60000000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x4, 0x1, 0x94a1, 0x3b0d1e75, 0x1b, 0x4, 0x0, 0xfffffffffffff000, 0x0, 0x1, 0x7ff, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r4, r3) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000300000000000000000000090000"], 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0xa30000, 0x101, 0x2, [], &(0x7f0000000140)={0xb90bff, 0xffffffffffff0000, [], @p_u8=&(0x7f0000000100)=0x16}}) 09:05:35 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x1000000000800, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001280)={{0x3000, 0x3000, 0x0, 0x6, 0x3, 0x9, 0x5, 0x1df, 0xff, 0x3ff, 0x310b, 0x5}, {0x0, 0x0, 0x3, 0x8, 0x80, 0x0, 0x3fc, 0x0, 0x7ff, 0x4, 0x1, 0xbd56}, {0x1, 0x6000, 0x1c, 0x3, 0x100000000, 0x2, 0x81, 0x9, 0x0, 0xffffffff, 0x8, 0x200}, {0x0, 0x4000, 0x0, 0x0, 0x2, 0x85, 0x2, 0x9, 0x3f, 0x5, 0x401, 0x10000}, {0x5000, 0xf001, 0xc, 0x1, 0x800, 0x1ff, 0xfffffffffffffff8, 0x81, 0x8, 0x4, 0x100}, {0x2, 0x1f001, 0x1f, 0x3f, 0x8, 0x0, 0xfffffffffffff79b, 0x3, 0x8, 0x1, 0x2, 0x1}, {0x10d000, 0xd000, 0x8, 0x3c2, 0x9, 0x400, 0x8, 0x0, 0x5, 0x9, 0x92, 0x2}, {0x3004, 0x7001, 0x19, 0x100, 0x4, 0x6, 0x7fffffff, 0x4, 0x3, 0x1ff, 0x6, 0xce0}, {0x1, 0x100000}, {0x0, 0x13000}, 0x50011, 0x0, 0x6000, 0x400000, 0xf, 0x9400, 0x10000, [0xfffffffffffffff9, 0x3760, 0x0, 0x8]}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0), 0x0) 09:05:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) 09:05:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0xfffffffffffffe5a) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffffa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000]}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x80, 0x2000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000140)=ANY=[], 0x0) r3 = creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f00000001c0)={0x90, 0x1, 0x5, 0x532, 0x70, 0xffffffffffffbab9}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r2, 0xa, 0x19) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)={&(0x7f00000001c0)='./file0\x00'}, 0x10) fanotify_mark(r3, 0x84, 0x8000000, r1, &(0x7f0000000100)='./file0\x00') ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x6, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337) 09:05:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000000000400000000000000cd7cc05c8c2e1ed2ce78b3aa7abb353b6ccb3fff70ea442e2b2cd40c07c116f76d25708d6ecd8c9a46da67129907e8faf389f1710000"], 0x10) 09:05:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x3, 0x0, [], {0x0, @bt={0x9, 0x2a, 0x0, 0x3, 0x38, 0x0, 0x4, 0x7, 0x1, 0x8, 0x4, 0x7, 0xfffffffffffffff8, 0x6, 0x1, 0x1}}}) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) [ 340.043433][T18836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:05:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x50) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000040)) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{}, {}, {}, {}]}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) fchown(r0, r2, r3) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000540)) ioctl$FICLONE(r0, 0x40049409, r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x140170, r0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000580)='trusted.overlay.upper\x00', &(0x7f00000005c0)={0x0, 0xfb, 0x1015, 0x1, 0x4, "9495d1fbfff429be2b298fbe28f232f6", "dc333f1358ff8b1f6e63644456d0b0fea5730ac0a30a35b929b6c254b5650e0cae06e00c577a4a75b921443abfe73faed6c956cee15a2b24a5a2eba5107f4b6dd24b1e8269efbef5d3493575d304ab27facfc51ccf6082f8f89ec286a0e89c2624c935296d3b6ad7e962235ae41cc19f7f796c2c2f8195abeb0fcc19d6d11d05f94b80733229e529b4cc26ea1bcb148908efc3f48c0626bb80d4ec238c1fba66b0cfefee18185b284607325132ae3b1538127b28c45368c5e06c0cbe7ba6113a2d4f4939212da7e0d8b33b3c7b4a911a39b8ab898d67f3222ad1805640d69fd5a6b9536e05d52e0ad4047a4d048ec3bd55b0f1164a8f73a9cb945df2b96f984c8b8151a1502f9dc1758c449c14a201b1ef1cac24eaffd1a1752a0800a4a13e2bd8db4e695c354247284401bb3ef0b6d0f9c3be1bcd181a14d1467a2ae1edac5116e9fe2848906ffe60c165ec3d875e729533ce92a61d3beaa87bdc51c5753fa3365950f1280b0ae5fd7777d16fba915dd13d67e5e78a5f7c843a5944f2de2412a89dfbe4b4a90987f231d064c30293fa43743ceac95184d4bd501bab6cc12190b3cda1e823233d006c389774385355818fc8356e32d05fd90954ce3d3aa49931725560c6b6f011a9645a232620b1ad9c2e28f8d681f7de68bdf8bc2680779c7ae36bff8cfb7c13b0519cd74fc21c52a1cc6b84b616a6e52e0504c8481bdd9d72b1296cbd6486f8a91ca6045bef8d83520bd5c3e1db4e65a196b3d7f8d7d54a2524e0712275a0d503d5bbea891b5813128ba9b772958ab215309bc96bf12fb41fccee59605e25c2f27bd17e36db76837d4c16de27e773bafebd89b498e2d9663ba5d4472691323daa4e0dc032217673e416401af3fb5dc4349bbfcb2d367ec73f64b24abe603100189dc875182c328dfadbfe6cdd3fdfceaf29ddd6e1e30e70664562f6a5d98847571ef3c6eeb017e91b6078ea7149a61c359f2fbf385cd479794ac5f2a3a99ca8493b2caeb25afb4318abdf8190484b9cfcb93173faf83db6a7e8ae9c2bff66209335e4e2d8f29400a569a75f8c92223894853dbf636e7c830371bc599dce71cf2c353756fbf757f2d5842d513011cd4cd9152964800100c7b1a2550fe40e832e3e54d2f0534369ef84ddd06afe8a68c300d455122b60ba2dbacbde18bc48c395871aaae9cefab4ec0acfbd04a4efd2cf8d86d8c337a674c20fff9eb72e5685352f8b0125c93ae48b565752f8312563d3b2d4560d64d460a14cc064aa77293ea5ed789c7a0a1ded4ec00222cd18d67a46d15f18f35706d883a3e3da27b46dafde2e718eca14684181059913f49cc21572f0d3fa448c64efbb1f75b069127c548b1aac17002ef2ee324bb7b1abd92e09182c849570a1917e0decb6a6c4353a51d28e2d899536fd8c37fa1b2499657d843bdee4508f4f991425b4720a8f83b0d023a5cc1cb1f7b7c3fd13cba72a8c6e2e4ad881037591a09089652ae5f407212277b033394f8431af9cf6d99a2b91dbedebec3610f970cadfe3d2efdc5c657b9d19149caba5d447b35cfa2650942e632ef29a8ce2f305ab97269e333b7a692ae87bec338b34b3c429c6cee5c27f937cbc26cce262fafd9e8409af36c8746dd2fb66a86ebfe029bde8722df677d73f01dc53d58841086c3ad20c1aaf5c832c3e996cc1a2dd4ececd8a55d0bac1020e2728ae9bb82526adedce7c27d9e03986ceffbfc1fd932d6602d8d3d1608fa46570418827d9784537acba2e96fd02700b0b2e21b6f5f9ad9dd31e78e9eb228404150801fc6c046b78456df27d5c11ca72edc4db59d1aa3f40678230852d5c7cd92acc06c2d48b540ecc303d48d8be4ad429167786052fb6cf8ce3a93445ac753c52bd1e30e1a73347c1e75684a575c62bf8fc8021d019e8eb05cb844c7a4f69ef87b3329e515c0f1351cbb6cdb67fee629f325b28d2e2deea5d9e6dabcc846c8c3777c19015970b36b48cdb6824f5a68d16abfb7a9ed2b63d668e08e67fa0c7fed695fb3afe80ea41e3eaa33e0b0e331f0396636d807210022027dddbd8b40072fe0e26f39a6615f542909a546e72ef59945d57399dddee61917925d479d1125feaa2b293180bf802c6a42493360a06cea4152e01c454836324fb7b31b9cb1a468551ff81cee851b47556c25cc412d6f1b4f336728b3718d3bac6728b9051ae8d8860b4ae541537a42f22a2a536966ff82db6e7b3dad5ba47fcfe7bf4fa839779de4243fc1b76d1474d9ad05fdb0ae2af8e254b4cba77dd30d4f9e172a93eda43af33da6571606882ff2a80f7570ad319bfaa59febb0353c6d74ede8274e10c5d90ea0bdc2c47737e7be6049790c08c8daeae28f4c9651c3ce55182b4035086827a0298318b9743811d4a61f8c3dc06439cefa997e6a45532f540e4c98fa03c974ef631ef507378bc9a47c61017521e2b5a79fa5a7ece1ada1f095f7f17ed056c15ba293a9c98da8de69b285b9ded3fe45a504b2053f834b5ea39d21a0b0e4a08aaf8ebb743cdc0bd3531162b8d3cf758dff212a25e1db61e3ecb277c1ec621fe1a628eee97b2e506a237ed4c6ccad87d8d4721b241817c3a7c03f40235dbfcdf3ab6ddc02b1f0c67022a9479f66a8ea2a7fff838f6c913a466c684bb815f0ef7b79022b85025ef239ec6763e8474b0c8088b8dac10b1a1cf0430b0ad53d3e3fde6c56d2d8a101120f61496b740bfb535740871100ce2160062241a4a4405fdde4acddf099bfdaddd243cd62829ca7c7e7ffb23694b7383484ca196db482dcb8ef7ce8efbf3f5b7a6fdab0d9b497e02dcc9a91e03d22f5dd55a07f2929584df55a21c0a10f28904ce66fa728374be7b1b171135c80d52d5411bef82a8fc65eb1579568b4aa13d3a18a08e77dd293e2e4e9f0d656b2a53d0e1e4120ceedf8eaff56706e5ac097312f9aed82095ee0d1fb55b719c2ccc8614777fc70b661d7e2ac21f3fdb39be3a8342dfa1972a0d3ca9a1f569b7a215af8231627e5b4e4411b114f3a781c721477d88fb282248cd5850c2eaee02adef69f9aaea1052069032013928bd3ae1c24756d1f1a7d5e744c2cb11b3cd78470244580e1e7208913ad7389378b7048c86dd29649a3284f55426b48c04961a9981792e81d605ae8066040e2cb15a6095c9b4f58373cd99ede61b468b3850cd49fe47bb8ef5dc2d827c55db93c7d5854a4a45add9bb5f9f825321128d04ca10d3760ec6ea20e9ae75d3fb41f61daf43c05f50d3f38b7ce7458403a8870522ed71eef76f2f588557077e66d67c44d0fdb6dea20f6a28ab232441feba0a6f6260647b234e32020d583782f47a357084ab38c4a713fa12a823a9545d6385126b602e32f2ef6e7bb1bca23858445499e020fb6fd66cb86278a9e98a3b6a9106064adfe5d865bb5322a5400fee566a2579dd9a60d46f9ce2d75cbed168b08f8049707c623e81d2d4e5a90bc240a206c8918ea4670fac5a39b3ecfffbc97ae09370f0fa5599818f2a1eed0654631e6c1c274f6bbf719ccc484c4433f417cd16b73f0670466b83fab3237aecc0c9192d50a67e57591067b2a28c936e41328b4f9c38e5922c61460ffdd6a9e38851005d5be3d4acd124ebea26f611d8404f79c0f140188e34e3992095225830735091a056931de166a69e6ddb6620a0858043a02562d3cfe53c776a711b3db8a820545d26797252ed80f2b42c7491ccf5fe0f9246a54db98b9ae82fe99450200e3f73dcdb9eb5026c6c0b8ffdf38fe5e167a6e462ff4b4b4e3fb751cb6f6689783931d197ecb35353f8d1149473b8944e2ea4b2dcc1a5a920744bef64ee3e7a3cfb2bcfcf5b832eb6e68061746c10b7476ce2986f8033a353ea410ed894013010acdd6e8814381141d3227db84c66bb5ea526095a1ed43ed4b91b86dd9a53d565f650f5d4f120c8b89c3c75a1890bbeaf8cdbccfbc9ee809cb11f8625ab1dce4679c50307a1c46c6f56c5e04281ccfe0a3ddd05f3757d5625ffa6c2f0d57677dd4e7b2b1a52d6e2422a660ced2e0f3e4cbadbcaf023dd1c282234934a09e89cf660140a75abac1e15931533c9109e91dabbad5828374de960b36a129edaea64c737f42d418966ac095e8d74acd1dad523b7c778ffc80fa4f9dc9c631454fa0d4bb7e3ebb45fb529ed5ea9e0fcee93a7873244a033f8502e77a12ad322ecab3b88c864143788f96950346e5e97889792d79f803e3b2f89b520a555fc12300e490f8cc17b78907ba379c0a3a386827e8c6b7a3de474d2f41deaa78f75a05d8c75aab4104b8237b935134455fe5e3958243e1685d03f446d82063a6f115b4b94cdff5293a45d896d5590480c583a11aa1898c0595974f89c1a06f0e6efff2f87206128a9fa2c42e03cc7c2ccee0e34086a8faa65336a20c31c4ec6241a30671ad00865e72c706e7b362d90d4d720de7729ce81b0b1425b3ed97f5ba2120973f326e2da18093bfde31e0d4c9d9109b0b32ab441f7e56e5a189a90a27f229604014d26b4571d0c1daa764a974977ca35f57f8e8e57094e882f9b6665c81bfb3aa73cc7db906a1aa64b3eae6a565648b3b9a139975aabba84418403396358f2e8a9a5d24a7c5cdcf132f6222b3552efa115efb0b670237ac4dbcae231126e13ed0bf6c69d4cd5d127264715bbbb23e958f2dba44e67ed0c28e1daa95f33baec9db4952069e5542cc3722469879be37d6b02db3ae1ea0224912dc140d157e5ed3b41bbc5762fe16eac09ddee286e9f3c66ebe6c6873104190181b5f5e349a988610a6e61dfa03a258ae97bb98a3cc6a33b26ca5de432e2f55eef18e84c17f9823dacbda39484b75207c8ad30443be494d571fe63c0df0c7eb853091eb40e8d677f289179306c1238443d5bc4f7af6d50a5434e07017f4741ea39d2987f2b9380b2d2ebe0a299cdb5fba6442e7b98922b9acb82f87533b8a1678facf2197df531321880d82dc59c3520314be391ad0f2acdbdcc5d9ac37b24eb952bd2be8f4aa6eaae61a693a1248330edc9288c110e5da69593290a3e7fcd22569ee93f8fdd0f94937aa309639e750691310e18bdcb4383308c35a0a72184b67893c9be83ae148bb51267fb5c6293a034a781e375de676cc8ad35025ba4b462caf4857d9e0efdc8dc959bd7d2b43cd23695f94be1a7e2e1864884e6b0e07e930defb6299c97123809251cf0888f6c63b48061f4a5510a2d56457efdeef8afee22ce9e16343b141cf6d2270dba0c4f5ff51acceaa21dc270eab73cde64d733fc608b21e911dfd46b764bb3ef2eefb6bd2067636c574b72f7dca16c9053db28f3d4259fd18ea1051fc0ae5c107e6fb585869df890aa86a5e45dcdc2d01333f74dbbc1ed63b343142b1ae381b4b8d098ce61e0c31b3559809b6a3cf0fe9defacb2cb542ef1a80d4905e35d6eba755825186004083f96d791c836cc12feb51d22b68b956b7270b0b4ec2902d6b1fd8412b6ac9abfff10734f2a7b65c8d71ed6276f6b17d8935288cb72638e4a81d72cccdaaae0af40a08766efa480e302c4dfdc1dacdff52d06cd459777a6b26a3bdca3f1b77676510d19031514430607f3ad219a25f551b8d9928c4be81bbbaedf5ca5b9cc10f60cb570a1ff02bc5a5912d40dd015ebfd15932b7fcddf4c96dd1889611c771a165db0b51bfa35d42fe5d2244ea6d509b37a65d9891fb57f35f148a6e3f0a0046adbb62377761d246f3c1cfd28088fa551071e1206cd76d6fe2ee24b7734a880b89dd003e9577922e500fbf9bad2a1fa60eeafb50c52874adf89cb52ea52f6facfc683d3a71587db"}, 0x1015, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000001600)='/dev/input/event#\x00', 0x7f, 0x100) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001640), &(0x7f0000001680)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001980)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001700)=@deltfilter={0x22c, 0x2d, 0x105, 0x70bd26, 0x25dfdbfb, {0x0, r1, {0xffff, 0xe}, {0x2, 0xfffb}, {0xfffb, 0x6}}, [@filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x1cc, 0x2, [@TCA_ROUTE4_ACT={0x10c, 0x6, @m_ipt={0x108, 0xe, {{0x8, 0x1, 'ipt\x00'}, {0x34, 0x2, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8}]}, {0xc4, 0x6, "760c0515643246be971c6f0c2e44b2f5c2ed242052c4b8753e87032636fd58cb7007df64347c24eaf89406bf3e1b9e16cb3f6d49453229496c5d1d225b8ff424e182f184b2b462061648d8bfca69c97da56e60a32d1113f0b2b6db390566b73a22ade8f3f3db3365f446bf7896cc5e6888f368c4e4ec5112289c4652bde3c90cdaac67760bdf0d0a9238fa14efd2da5c96c698553a3a556ac6f0d189a59a8ea8ca53c73a7c20975aa854d26967844cf8ecb512be74470ee126bdb02781"}}}}, @TCA_ROUTE4_ACT={0x7c, 0x6, @m_mirred={0x78, 0x12, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9f, 0x20000000, 0x1, 0x3}, 0x7, r1}}}, {0x40, 0x6, "2b4e62b361e344a0f5441e6e69505d922e1c81a2ddfe789f580dea6b53225b3c3dac020d83abc8cf6e226288d3e6837f51ccf8d701682659b865"}}}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa5985f77a43688de}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb7}, @TCA_ROUTE4_IIF={0x14, 0x4, 'veth1_to_team\x00'}, @TCA_ROUTE4_POLICE={0xc, 0x5, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffffffffffd}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xf}}]}}, @TCA_RATE={0x8, 0x5, {0x2, 0x7fffffff}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fffffff}]}}, @TCA_RATE={0x8, 0x5, {0x100, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x22c}}, 0x4040851) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000019c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000001a00)={0xff, 0x1, 'client0\x00', 0x2, "05ece945fb4bcd38", "a0013cee9017b925a0db82034507087d2159c261c154e129a316f1e22ad3b003", 0x6, 0x5a7a}) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000001ac0)) syz_mount_image$btrfs(&(0x7f0000001b00)='btrfs\x00', &(0x7f0000001b40)='./file0\x00', 0x1, 0x3, &(0x7f0000001d80)=[{&(0x7f0000001b80)="9340e7fd719db0df397b0c2588bf4092f358bb0e1a0e3587fd773030f3225b2db57e0e541c7d7f7271b1ff7da689c43fb3ec1a53d13e8517eaadb50e193734ef400060b1a54a6684483560dfbed1ac93a499a38140fe2d992ca8c4c670614d6408d73eed36871ddc6cbdbff6f98c8822bf437ec2e1464b3c99a3a597e44dcf1d6d4fa425e080884ec14c4956bf5d6a75ad5853877a98e9e25d042b", 0x9b, 0xfffffffffffffffc}, {&(0x7f0000001c40)="abe4960a474ca6926dcc4f2ce90600d29732a1ce6cf19d10ceed4d6be0300573e19a9796911308c521dbe229e1c2e72e40e60e13e22989d0ce40ce5e73629d2ae0b4042f47c97975293c6bff525720d0fd579d3c965193885364afb4f954130f96d15efdc99090812e358aaec858436868d127b460588b42886bc8240282665c753c8371e3bd", 0x86, 0xc071}, {&(0x7f0000001d00)="d562ebcfbe93d0efd203c255366c59348efc8de7cb4b90f9ae0f7b525daa51be43d367e7262533d97f17df96fef8bcfebd7eaa30a7b0548c95de84afeddcbec16d885416b46e25e650b1f11efb6c3cf6b0b831", 0x53, 0x3}], 0x10000, &(0x7f0000001e00)={[{@thread_pool={'thread_pool', 0x3d, 0x6}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x551b}}, {@check_int_data='check_int_data'}, {@nobarrier='nobarrier'}, {@rescan_uuid_tree='rescan_uuid_tree'}, {@degraded='degraded'}, {@compress_force='compress-force'}, {@commit={'commit', 0x3d, 0x3ccc}}], [{@euid_eq={'euid', 0x3d, r2}}]}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000001ec0)={0x4, 0xd8, 0x100000000, 0x1}) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000001f00)=0xfff) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000001f40)) sendmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000001f80)=@generic={0x13, "9fe048c4d97e9ecbcd7f1245efaf4ea4db46ad6fdaa5d6b91bec03dc4df2c81873488648ec865202ab7a06bf1a9e4f41fcb045e7a060b71d95d6e849220303fc65b96b3a6bd80baa853a0cc64faa0e9344a8c25cf4b3a063324bbc99bfa9d2eeba07d70cf305a8a7d7e048aef00c392efb30da3fedfbc6c7b3eccc6f15f1"}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002000)="3435d01b50ae96b8fcad300f5f", 0xd}, {&(0x7f0000002040)="a4d736d8757ae235bfa096", 0xb}, {&(0x7f0000002080)="a1a2722537e5365486b3a8b124cb80494f84e3f1db8260a7e7d3f208d346afc054c606623bcc3552ebeb87822f9403693daad6db6cd9c2da7a5555ad59dfbc65754d6cefca472bb520ba1c4adac93bc0effc8e789f", 0x55}, {&(0x7f0000002100)="7800ff915cc024bd811e5c610dd38fc3fa93f0c430c9ff68817adf5a6b91a791ee5bf46ed17135d31c2dbc83bdcf6089e92dd13bc054664354fd8b783350cc77d5b771be6df56f11f907e32436b24aa5e93a97fe1c57160bfc8ac93735689b2cb3709674180352fbad79e910540b2ca5bbb685bec22c394b2f435a7ed7c32098026f80afeab02c634e063d2bbcb95997a3becf326b2712644b4e0ac11d9c67e1a745c778008eb9b0efc4df0bbf5cfea953624c9e3795f817535f211d55de968ae11b922c6111a73e", 0xc8}, {&(0x7f0000002200)="380790f0868e3885e427cfb3", 0xc}], 0x5, &(0x7f00000022c0)=[{0xf8, 0x100, 0xff, "fe6369c3ae5c661b86dd38c86f59b16e0cff1ed96deb257c5b076efc847adff3e52b881cc2fba41b871ff72ef8b186fd9e52087d991d8ff3bb2895fcaea51878f6e0c9bed597f8d0fcb53d8a313f26d2e35f08a62115a6aa471b28cef32ffa1cfb987e3bc2546dee695a0028392a2ce258e05bcc8ca9c516e9dff048428a31f911f7f654c16447d500351b3ef86046c3bcdf98a91c538fe70d2619a898037786db9f81d27830e1d1d96e9b9ec18a1efe2cacdda836a79de2d94f2f80ede0d335678ccbcf85b9e2ccc821a2ee6e95728693d261734bb892ab228f4966ec22f67126"}, {0x1010, 0x13f, 0x101, "d8194baa07fece44dd52fe4e768931e572f9eb3b4f5356e1eb8c15125c65412fe3746886923f9100bf6e8810efb0c861a0c04c92220ab2b08e22a4369eaa732f7a0c00b3d7267b2f07cb200184cdac5fa7ce84fb585c290e13808431d4ac7c601d7395b004d292d63092e0de99058f49d4551210dfeed6fc3ce2ea3d09c457bb877bc93af49c0a32d20127ca87ed0615617a28edb798a5adda833907bbfaf87a7971341ccfd87d912476336731b7f98ffbc5659f105e479710467ad4c4cced1ef47e5df164319d514352107ff7146d3da6e58b5ade502d7f386a18ebfd2b4c72895698bcee4b68f4d41385e3ad75d88f80db5c5c0c9dd7c74a00ebaae422aa717f4349de2aeae696b9e6533ff74f92f25bde567667c05766e79b2230b99d9b9630c003ad58ebbb388931538d12ea1ff21fa7537346ee3e3a5422bb274785a9e0b5ffe169e801a03d91a9b4d197af52b23a381838bb671701bd4050042854809716ac4dbc018cb1fd2678acda12d310e524cccffccc8aafcb9fa0eb914ca504ad224240378c3bf544f9c15cca30efefe0d749766e557bbc0160cbb2aec826400f93fa97b8e172c03ba98828517fb2dbc1394e092ceccc8eba1b56b65a39151701351cdb0b4957796f65037574f1bf646b59b7d3cbdfce8c9e797d7c3d624ff4c90a328e5070c72f1dc87bf549e50e2242c74abbdf92ef818433cd73cba6695471389c2feb441ac4f070e2046331bfc22c43f8732baf045881357b71723e23fb709b9285f359411087e7d47cf566202a6765b57ae67a200d5d26f7c6c514a6bd81656a5fe51f687d87a04144b2996dd5a8cf1553082fe6b8171021b5523627bd2acb86e31f368aabf554bb8ec68e5a39f39001e89c10586d9d893b8a09405402f35a8c53613c5d8a6f3a28b0db421507a56e6ed562423eeb83669df7fa74a31e6aecd8fd4d95d1aac4cc81cc377b7485e7de18f6f0140a80d4bc2eb9fdfefb12f935ceff0dfe7fa2bf4cfb34505fc85eec56482dbaf91f54b65250407f38497bebe723f2c768e9005f9fa148042a69655644331f45e9167409a10282b044dd889cb4fb668ab80f81a6fb6634a483a0f94f379d3c3f4a8bb2d437eab7c92f1edeb7aaa1e9d85c4d559cd345fa6986ac61a15527ec634486c148f1ffc07920b293b3bdfd726932e215e170acda733bed353d5dc1c76c83f730c8888beb28d444df55eb19f37df2167c72fe6361ada2c91a190921fc4be08ef1929076ec48642af06ab494af4088cb91f7ceddc99df36046229bad0099507a97df91f550f860ebf5bca550d8bd64e27c7d2d1a6e8faac75659a20510b9b5add368051d86f48cfc0b9b942cd4f77cc608a74c6908ccd00fe137c504cbcb97ae4a425f378d81f66476812e9680baf5ef644d77ae1a706e282953355e91474324ea602a5250102a6a79f951dceb00b8aa521e91ca5301621f9fc1ebbd27525646c99dfcb2c06eb99aa12f6c12a98697c3fb18d7ac5fa888948a376e7e6cc8a6e8ebcf1a50835db87b756bd4e3785c2b73a489c3e649a58743f55afd78dd0558b36748afe47781dd905e6dda8cad0b8747e8a0ab8cee1de89770224e5f44a3814b97b1ed6fd69fd09d3ab5ab8f15568cf015d8660c6b52688e9155202e7b29619529b7ee94a3dd43b0e2ab8dfb931f02ce023720d6a7e9663693c5d1f85908a31dfa8c9fe36da5b767f221df8525464360a2272393e3144fc5ef9c9d7cc9e450ea6392e3d7724920d3023bc318650728221d846a0f13cf96fd0ae4f003f9c2f9e173cbeb6fa98f148c92152b33ab2619eee9b7e2f78acb85af52571147cc000b397e0e4c4bc752fd7518d490eaca26d1f9061699300220371886f8779acda3a6eb7a4e68182c97f10480715b6046d4b2a6488a706354adc61ed1b99ef3296172a07d458c45978d8310e0aa5564039515d95962aee488fa21d6df950b16cbf7973a1b1f8b62551e3bc64e1bc33737a0f0d7e86bf7e8d85c4b313f8fdd97f359dc4e3907d827868c05fb424f539398ad0b76779a64c908deca78ee3f6c5468161732968ac30cfe7c2d458c7fdec5754c1e208ff8f000900f6fd180fc42dcd105d434f3329d0fdb483e3f30a3304cbd51b0e1e1326fac7466a966f59ee9c3b2b682bf01af7abb0874ba8cb9af35c8c15ea5755ea1e659ff53576ae5351a3bec60d4ec56eed468eb16c8904be783e63f49c613e0ca7855179761dfacddd85bb562d51c3c654e26b2f885ae99b48ff854c3920a39f1fc83899ac01b57b5cfeda889f99d0772ddc0747e183f1822958af4e10cc4bf0f0fe047faac22d1cb677db65adcdf7755146f534294c3054ca8b59c63bb9352f3cbea0adeb2c6febd993000de89dba603bb7a4591d7c19c137256f31fcd80d8fded21cc0ecffb563fc73198f06073be277edb4be56f28e6c8cb1a60ef5effd34117b229e7139e68dadf2268f798b6d17c68c6a060ada9872b8b57325df6ea0c5a3f096244d7d09550d2ab751fe6d999d0c71389b7168b1182997de3b48484f7228521a46eaa4e528ba88ed1657ba001fe8453ffb6bb498cc5bb3f8230c176137a82b87c3adcb72de8644cca90342aa5c3a2eb9e386a641b70f63e63dd84f2a1a77561f549f68f9289b889bb4da406d52460a6139e27523082e97b14c178e254e969678cf92e6b972a6a628aff1a8ad30c5ad7324570c4f662b532a48854e3f51086178f8b5a1bbb7de67558424f35e1bb0cf882fce23237591ddf04b285d166176710280bb0a97b3b079cb866bf4bc6644385ae4f1eafa5aca3cbc7aecabad56d0b07d66cbb4ebef2df9712f72a791e5ea36dd065ad61ba2c1217c358ce8021c8644123ec92ed3864c27fb10fac30f1e481c6956840191fe9e46a5981955e73fd9acff2543005cb7ed60194fae61a0eba2e849ed2b436cd30501ddaef850b99f2fe15636e873c45cfa18c455764b4a8b18a5e01bb7a0c5b5e35229e7b71155d15701651489e60020533a8f4e59d86a21b627dd5b0d6af3fc7527ae761c203a7bb7e60f96a090d884bbed6dce8aecfd12951557d558a7a531a10aaac5112fb554c61726e94251ca2cfbe6a9479a590484336380f1539f4cf4b753b38eb4d8827de3e959242173ae80746c669fe508c4443d8db8f414bc8cc11c5fb7dc42b7f5ad6448b7f5b71f07a0d295a25a48d410feadc5f496b30c19b66a77cface8a7c6dea49ae4b832bab1e545c12f54d347484dd43a9d3fbae2e00abbab69e7f90842ddf064dd465639659e71a7c5bb9f45485f1d9e5b4617d16cd969937f1f2f9ba5c266c586bb1711c11ad53b91572a5578702b89f7611180e67d126d4ea3c41710ee8bbeda2d88b0f5d2e09ab4185540ae62429facd68d4afe29b82175d796a94a8273d07ec80fe283be75623df6301c4012c0f7d16b5b395d2438b40069d5ec24953e1ce90590cb762b767db3ae07cb8bff73700aad9f9408d990e2148196c4638bea52b8105a4cc7d88d43089ddf123ad88845234b99548bcd2825a87e1e1a576adab65d4bdace2f237744ffa984eff8bb5ad77d1f01f6852303fcde37987835196016ceaa486ec3e82dcffbe49036c3779e2ccaa2eb662043c3461c57a1f9a8cebee6bb584a4296a0847721d5eca56e87164b49df2140942fdb2e22a2673cac191f8af5270b03c08ac2dab2e1b6c181900933dbd19132b4823c41711e3f3c720ec43db8b08fe50732a50d8e4966c32568fae5055e2f2abf84199622dd7e3c80880f41b4efd6d9f2eb99d16114394784ed7acdbd9a0b7cc598c053012656e9ab6004173ec9df1f96474cfd1976b520773d4b1e2890a66681598d90656acf6d9cd2f0d88494939fb46c0420207e5a00e619a3b7bdb57b5e394d002bb914ce099df2ce87ebc3dc61d947aa85e4235b1b2cec80328ba5f37fffd03e120a10d94a44bec281b0bf60cc237109bd447890ad0c788ce118123985637b3be14eb0cd22a4a760f750fc2689f694b029d5f160764de64c77dac004c713b2f03c53648dd252c2cfce40f0fe28f176c58d786b86883b59df0421a82314ca2b0282779b997d90262afdfc0e8c4327fa436ba65465878a5639517d63a37fffc2ee1ee58741a9a115cdd83b5b9794b9213bef51c212b69bae166a97ccb143a35c7f08e080afef09fbb2f188c4abcc879ad451aa3b8bdf69c6f9fb88404ac59ca8b49b90ed9dc60f02ec153bb151ac3961f441b8babb7dcfef629dbf01df81c97c8d89f7c717949359ea127fbda7ff1cbeaf3e21f9310e2c5eeaafe3370d399611fbbaffca1f7fa06b0969382c6169ab765de1c001dc5539b83edd3f504379a5c4532e3eeb3cf428e6cb4501725f016de0be447f1dd2f80b3cfc8442ea40a2571eca68a7f41bb7d128ac99c3b59e33fa8af7efe5e854768dadaa3cdd42f7835c0563a3c510e3bba1ab709dae7a16f6fce7eb0e7717d25cf53e52f5a0d774bc96fb306fb3485e1e46493ce4b9b7b63a10744a1fe4c22cb020b76117b75cac2bc4944f5e91b90ececfab390b8192d071de763721faa742317f132f9ed31a07605ec3ec456fe9680dde2e04a2bc0825520841b642d4f7b0c32f09e7f1636adc01305308271f26f73bf5df21277d85ebc27d635dfe9e310eac820e27a7bc7b3a6d97dd01a06478e2dc7e20762969c2569380e30f1531a4ea86bceb7921f9ee82f2b33916b34c8f6f79383a90b361c2f007d5b9e483ac98ec131ddc9e790a7cd0984e6e0c77693d2770eac9b4d8581f5c29ea01a4be8bf30f4894515b283fb7359e04289cf200bf229935403f5afc4e1f2af465b2b81c55cde0242e8c98afe7ff7a6238c939bf443a87046635a3e1c7616b515715166113ce9c0492b117b4ce8ec9ed00b09d8472a47f82f085a218a585ad929a21c7ca18314a28aebf5ab3b4a79aacd108becd8424e257aa011bad5f6d2f5aa22f82a9d570e254078f82165f881514e650abca16a161e8fce2235d0b0f95226c3259e931dd82da0c39b8f43ed99f2eec6c3e8f4e101898450fa06c6847b2086c2ebbebf0584ca3682bfe69b487e34c357eaff2cf7af989a900b4e35b8acc64b77acf7df7fd3f589ac84fc53154b9846333ec5ac43d8f7d07ff1e36a27bed56edac2e709a4b43dfd569981f5558f23be5bc9478ab72bfa39dca8354a110d104620a5cf3dd146c51641d6ebb3fc7b4ff5783e1a34959f6c6ff638e0b0ee96d5b208d4847923c35b3f0ea789e3269c88a1bbfbd0a7ccbafb4a13c84cd42f27944d4f09685d8f9222d2d2d62e51028e1a3063de6d8add3d2e5994c6dd4caaba48297df8fc69fd11a20ba9fa1f3121bf41a9b01e2daf7e3b72b80fc4939dc9998995ef6457de6d6c2294a0499800926c43971cac402f7f0ad3e0317cb5bc4b0a815561e66e5d17f9f2bc7d3d2ba73c8a675e4b19e9543fe267ab81ae8069f169025028843a7b3929a0371aa642fbf5ccb1f6cde89e66533e30e89c245d5a103c22cd251c22d5960cf8d94afbb99611003ca589e00a75376b964460ed36a65f8d9d54b0afe4963222fab2ccfb461d7a3d41a1b1556dc53464c96e2277f21ab47ad6ee3eb308a8f6c77c365786e0aeba737db67a7e6757f03270f68c94297fa5c53ca2eda4bb019c560010fd96c3bf2e106a1e1c6f155b8722e725c8829a0f43b2d4755ce5a4c968e08017221fc45c4351ded5bc18ec40126e570565e8169548d6d4b3fa163069993e859ec98a107b8a686a949fc7ab8126659c2aeec1d3f15a6c95e5b3984ec4442294bed6dcb80035f5d791e0"}], 0x1108}, 0x5}, {{&(0x7f0000003400)=@can={0x1d, r1}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003480)="23dfa3a31478eb42b7685ae426a49157b86f594f76f2f448f2741c6c7bbb3f80dff4842b684af4022ae9900d1003d6209149d351c13e123286fe91479f0ff901a2190446897f259451f53fb0dbdb46cbbd8abe1a31ffca4088b84da935ed992aee75f31f", 0x64}, {&(0x7f0000003500)="4cc0092c035f4b80ed98fc273af1086d8fe1577861880c0b2d30c6900e897e0ec983976c342e722c968fdcb932e1d5cd3e568ac4ecade6a14c3928fbb336978a92a84db4761a3a69d44f765003cfb3f31904e7a9419110046dad66acefcb3d31d0788fafcbbe", 0x66}, {&(0x7f0000003580)="889866165f40a31fb6ba9e07253a1349376e001d12d67f749df9c420222c02727b2884b32962ba7e1f548addb7bcc14d481d8cec6934e1bbdce4a88425357cd61d32a33640dd1274d8a7ccb2c39311b3ec59b8f14f095f38df0f215c9bfbc6136110703ae7b35575588ccffe6b28fcc9dc0e86fff8fec87a91d2187a9cdef260ad23c784b07ae828e4797a7a2b1505e702d73101", 0x94}], 0x3, &(0x7f0000003680)=[{0xb0, 0x115, 0x529, "507adb438819e6254ed9f65779c6e3f7e1d10208a9356b3883d6bf77a27190b4c6b5e90bac1e344651cb619526495bd800505c130ee008e032b2e24b6abb5ba0eeceea116180e700bc1f1002e50ba6fd31b18a2670cf7e6611988243746439fad56e70026e7365346acc5a5324a5852f2ad58d500d3dd229b462ad5dfa6e00f19b2d568854eafade68ea8b0c828a9e4749106db49953dc6d761e"}], 0xb0}, 0x242}], 0x2, 0x4000004) sendmmsg(r5, &(0x7f0000004ac0)=[{{&(0x7f00000037c0)=@caif=@rfm={0x25, 0xffffffff, "da1b8ce2aa76f51d92a87021e01d5ad1"}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003840)="a92c0639da8daf1665705baa4799217231fc04e847cfbbff43154050c6", 0x1d}, {&(0x7f0000003880)="bc9f903f5ea01fbc6cbe565c26a8f30a6ebef053c21da750090abd98b5029b6ede6e71aaf43652b016e8c39a34b91fe3358fa8c6b3d893d0c11abb76d73d45da7d5da15de4222c122c52b1087609001a9c9cc72db1151f4b0c39e0ae7a6cf53437d16aadeb6008a0fd9ae233e1ee391e1a08c748e0ee1da4af743bf44884537d3a8606df9a62ddf9f0e3015fb811ffa3cca79802bfd79b04fa9623", 0x9b}, {&(0x7f0000003940)="32b7e931a19e70f8a353605cf9dba117fd0386b980fd1eff872237d780ff9dd0dfb48284461ea2", 0x27}, {&(0x7f0000003980)="53fc9adbfd1df356eafc36a87f95b2473331", 0x12}], 0x4, &(0x7f0000003a00)=[{0x38, 0x0, 0x20, "53998356eb168bf59bc8819117924a7064ae8de797b0ce022e0ee1ac6c6c0438d66048"}, {0x68, 0x1ff, 0x6, "170e4e76b153424ece11b05e196d636a1b2ed29db6f0e337fb40a95f5e4f79f3f749992db8e75dc661c0414fb685306e3d82fb88b72d0362d61cd70f3832f92f29e2098b30cb95d4f26919c29e4a1520c37bfff44839bd50"}, {0x1010, 0x112, 0x7, "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"}], 0x10b0}, 0x3}], 0x1, 0x58d12a9bce5731ae) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000004b00)={0x0, 0x8}, &(0x7f0000004b40)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000004b80)={r6, 0x400, 0x2, 0x9, 0x6, 0x400}, &(0x7f0000004bc0)=0x14) sendmmsg(r5, &(0x7f0000007840)=[{{&(0x7f0000004c00)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c80)="d68cf10664b91b564a80373c280698e5aade04986a2a0338127251f17c1827255c5be3b870930103e4002007d77db72f64061927aa6d471b61b3862c9eb24941214a80e66b0e0cc94564fde64598d45e367b9b9c2e7d94392f47b05c42d99f43b95e9a7938e8e7286f65cbd8d7763f02d828c444685909c4ca533f0fdc7e2841f2b7cc74db7cc24d5e25d2263e750c625e0970", 0x93}], 0x1, &(0x7f0000004d80)=[{0x98, 0xff, 0x2, "c833740fc99c224fa2b99dac138c262d0fbf70cdd5d9c6d560175871a64548cf24e21bd7180d326095dec61a37bd8a8192b43ea035ae6215b23b99afdb60422aacdf862e48cc016cc9d0e4875aed439f76160e37aadf9bc8659bcc528c6bd04e09e6906e2fc575c65019efa24f7f7082a637283c542191bafd96892d07e431645f28"}], 0x98}, 0x2}, {{&(0x7f0000004e40)=@generic={0x10, "b4f8fc15303f67c9fc037dce69e0efdce3e8f3f590a1d72b85d0bd5089cc5dbf533ef636fafdb6d04f9991214a3dbf5c67515ac08388ec7faa29104a804208288e8dcf4e5037adbeabe0ac28a1c73fd81374cd7a320f65ed912ae601a65eb2fb78c6a01e5f838237f0ab85534f60772cf7b7a1f6ee1b62b24b0cc84ea633"}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004ec0)="dbd019a5cfc81c1070b6fd2fb4daf143e32f1fced2f1e2b9f02a4865cbe9d5f49a74dd8723278a2d6c671f2b4e90a306d69cab2813265cb8f8d5b46262dea9b35bf0cc403d900c8c5b64c64bb8580c14e52f2717f7adc3ddd7702042afd171a669ef183089ae23fee098e10b1c0ba48f21ec2e5b91fd416cbb76bc16966d091bc3d45f94853d844123d27315dc259f21c6ecc72f2534166693fbbb574fc88378b032d2", 0xa3}], 0x1}, 0x7ff}, {{&(0x7f0000004fc0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x80, &(0x7f0000007500)=[{&(0x7f0000005040)="269a19c95d7244574112305f59edb3f0b8bd9b623cfd5a2f4debe8b207c0caafc290e0cc2f7945f707787be7a1dc7dac08f3dd6c2e4511fc3c99112004ca918f003610823a95f84b8b2d333c921d98f6ec7b5479abe80d7bf588043d5409018cf83782db498e736eb7b31a08289779d797bb36f80006c78d0cdc8dc00e505a497185b0ff93a59537b0efac763f9bb03155f66ee6044612e42a111ec2248dee90e04aa9396ef0ec78c7177de2ba08eeec57c41c4f7db66911d4b48d7e82fc4b901e8ce91917556b8caebfe230569b91714438", 0xd2}, {&(0x7f0000005140)="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", 0x1000}, {&(0x7f0000006140)="6b58e8ee3a3c596f00ae15d89121d357c44101d6fbe7d89098ddac4c581ecbaea5b98debcfd412c7ddf61c2be8fb191e4f84539de6b9ca56934ae3271eb4074d33391a2a020fd1401591be7d7d4253d080a8b4ea5f221117eea01ca84f48a009602d5dd9044287c1f0ba348436077d2a19fb30627935b7f845a6146a89ae3379f3b1bc21fa5af23e290bac2cc553c7f94527edae50842e55", 0x98}, {&(0x7f0000006200)="ad88656915fbd69c941371db8e94c59119c65ee65d509fc76f3b8369bdde4f55f520bd66c825795522d6bea635886f4a1c15d73c9cbb983558db3c8b7c94", 0x3e}, {&(0x7f0000006240)="91dea28b47823ef1f863b46cb9cde1811714f5abde184b6968a0c6ac41efc0cc3cc1ec83d4befb33d5021a076307cf80ddb22c4f356cbee2eac1f00c8be357d4d4a2256e3b0606d68e73eceb0df6c285f3eeef2ee656d41be7b9583211636ae79d7e90a03a62d9661f5d4d204f979f99bc51baa12534025855e973383af5", 0x7e}, {&(0x7f00000062c0)="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", 0x1000}, {&(0x7f00000072c0)="2b667d800fee85844ac8dde2a51e449266cfc461f99cdc029b0fff26efa8c118353b16083e5194d4e14a5919fddd7a8ea867dd2a5159b59b2c4d7d4d218b426c0a5e881b215e0d6a5fb45853113796432252a4090a630734ed314357749c75a57c41cf0012b568e549080eb92241b2916d1374bad8211cc2b97b1fe393ae411636f010d15dfa166b7c121ec7793f4db03f88ecb64307225948578b67e5a68a4e5f1b7b679020a10787b403f5b95492890e01c55a7bad1ea27ca89f3bcd90b8f1ec344091fa27187bc1", 0xc9}, {&(0x7f00000073c0)="a566b02d1058a423ad072f0a45a49dbdc53890592b5df4d4e89e4e8480bd3d7272447887f47d3597311f7094c897dccd9cfbb8cfd3b4d14ce99526b734c51e4f79b32af46b36581f9e061e049357b53a0a4a43f229cdf35191017270aed3b1a7f83e739cbd690a6c858c94b802a471fbac299b254064502e81a965e5f841f94284c08b0e286b5f94d7607901ef62deeefccc99a2d23417103cbb89a2f25fb4e9db6744be8087a03356945edc0703ac4902a1ab11f010e94b41e592458d5a95c3", 0xc0}, {&(0x7f0000007480)="b2848e3d7f6a95ebcab6d1680574de1a0a52ffe620fb8e5e843d341656d91040a9ab57333d2521a00481af2d800e675973a4d425bc60c506db42d9fb05e00f1bc7ce6ec93c8fd8f64fac7d76c9fd4f40a126e36dfd20731743", 0x59}], 0x9}, 0x258}, {{&(0x7f00000075c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000007800)=[{&(0x7f0000007640)="5d009519ab5cbd7a9c1b3de0a61db7919940124c85403f678699a0eb9a502f4c954ca5f1441b54254478e57c155501ccb8f911594d56a9530f89b675a6ec6f825de4c3cacc44840d415e0072969511ad18be24b1f186a3929c8079f99790de85ea684026601ca9267d2f5479ce3b3aa5f681be920aa8b74e607d64100ca95ede78004a7f0e24793d0a223c5cf709f18403c24cb5808c8bf24fb5bdea7b5846f3", 0xa0}, {&(0x7f0000007700)="0c90684fc1c0f9c786188ffddd7c88bf5661bd8eb4212552b7de3f2637a5447261cb44ef094bff802a139ab10543cd609ba3d2118457c3e6f3d303c37d3d4cc09ae06dddba81dcaace191f2fe29dcc63108c3e908e0076b49b6ee55f9d34c0b9a2dcad5f61b7e58b032acfb62ed0684639b66821f50bf5479ad57b0656e01dc0cf89f8b283e00e8e1e2132814ebd2a143cce11b74fde144b9a4e623e97f26f2ed6779dcf5d7d03f5edcec58a76a162781b80074fce503387cd65e7271320886cf862997ee205393de20404156a19a26be4985bc9d3c1a270b9c9fdbce40bdc79ff8c4c2d77d96fa6d0", 0xe9}], 0x2}, 0x3}], 0x4, 0x48005) 09:05:36 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x17, 0x5, 0xa, 0x5}, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x224000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = dup2(r1, r0) write$capi20_data(r2, &(0x7f0000000240)={{0x10, 0x4, 0x3, 0x80, 0x8000, 0x5}, 0x97, "95a1195ae8e57fbf9a16adfdf4ec2dc5f3df0653f50c001608ec9b20be76861f5b0253a80a5cb87cccb28d8e48ac807bdfc2f61ab7e4b88cdfeadd932b8be76b935774ed905fee906c066abef8f65f2deb847bc41f523a3713e2ed05417429f0af8f4b16b1b77a36c219ec83843b2cab7d7140a8c7aedbf502aef15e550d8a81d645392eeead70b590f7842a04eb20d8d3f9564649e791"}, 0xa9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000422}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x48}}, 0x4000000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, 0xffffffffffffffff, 0x0) 09:05:36 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0x36c9, 0x94f, 0x100000000, 0x800000000, {0x4, 0x100000000, 0x3dea8000, 0x9, 0x80000001, 0x6, 0x7ff, 0x3, 0xac43, 0x3, 0x55, 0x0, 0x0, 0xfffffffffffffffe, 0x3}}, {0x5, 0xa15a, 0x8, 0xffffffff, 'syz_tun\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x158) 09:05:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8001, 0x4000204) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="100000000000003e3c9fb9753e959905"], 0x10) 09:05:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0x81) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:36 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40}, 0x2c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x280000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x4e23, @remote}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040)}, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000002c0)={0x2, {{0x2, 0x4e24, @rand_addr=0x3f}}, {{0x2, 0x4e20, @local}}}, 0x108) 09:05:36 executing program 4: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$tipc(0x1e, 0x6, 0x0) r0 = socket(0x14, 0x807, 0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x80004001, 0xfffffffffffffffe) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x4000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000247000/0x2000)=nil, 0x2000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) ioctl$int_in(r1, 0x0, 0x0) r6 = semget(0x1, 0x0, 0x20) semctl$SETVAL(r6, 0x1, 0x10, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x5, 0x0) ioctl$RTC_RD_TIME(r7, 0x7002, 0x0) 09:05:36 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:36 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x14842) rt_sigtimedwait(&(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000000040)=0x10}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000340)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xf}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x210000) dup2(r4, r2) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="100000000081df31d40155feff0000"], 0x10) 09:05:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x4000, 0x0) accept4$inet6(r1, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80800) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:36 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:36 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40000000405) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x2c95, 0x4}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x28) r2 = dup2(r1, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="680300000000000000000000000000000300000000000000030000000000000007000000000000000004000000000000ff010000ff010000000000000000000001000100000000008100000000000000cf5b6b07000000000200000000000000ff010000000000000700000000000080feffff7f0000000009000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0800000099000000000000000000000000000000ff7f0000000000000b000000010000802f6465762f617564696f0000000000000000000000000000030000000000000007000000000000003a510000000000000100000093e000000600000000000000eb00000000000000310c000000000000870900000000000000000000000000000100000000000000000000000400000001800000ff03000008000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="010000000500000000000000020000000000000008000000000000000900000003000000707070302462646576000000000000000600000000000000030000000000000000000080000000008100000000000000070000000300000005000000000000000100000000000000070000000000000027e16f0700000000020000000000000009000000000000000200000007000000ff000000010000005a9d0000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="faffffff0300000000000000020000000000000009000000000000000b000000800000002f6465762f617564696f00000000000004000000000000000200000000000000040000000000000008000000000000000200000091000000040000000000000007000000000000004dd5055a000000000900000000000000b84d9a0f00000000050000000000000009000000090000007f0000000900000000000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="2000000001090000000000000600000000000000040c00000000040000000000000000002f6465762f736e642f70636d432344237000000000000000000000000000000000000000000000000000000000000000000000000000805d030000007f000000000000000000000008df5299dcfb1acfb41f6cec0000000000000006000000000000320934860000000000990800000000000000010000a9410000010000000200000000000100", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="e9ec0000070000000000000004000000000000000100000000000000130000007f0000002f6465762f736e642f636f6e74726f6c4323000000000000"], 0x368) setresgid(r5, r4, r4) 09:05:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, 0xffffffffffffffff, 0x0) 09:05:37 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:37 executing program 4: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$tipc(0x1e, 0x6, 0x0) r0 = socket(0x14, 0x807, 0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x80004001, 0xfffffffffffffffe) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x4000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000247000/0x2000)=nil, 0x2000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) ioctl$int_in(r1, 0x0, 0x0) r6 = semget(0x1, 0x0, 0x20) semctl$SETVAL(r6, 0x1, 0x10, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x5, 0x0) ioctl$RTC_RD_TIME(r7, 0x7002, 0x0) 09:05:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x180) dup2(r2, r1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)={0x6a, 0x0, 0x0, [{{0x2, 0x1, 0xfee, 0x400, 0x7, 0x2, {0x3, 0x8, 0x1, 0x4, 0xcb8, 0x10000, 0x81, 0x4, 0x615, 0x80000000, 0x0, r3, r5, 0x2, 0x6}}, {0x3, 0x9, 0x0, 0xbdc, '/dev/snd/controlC#\x00'}}, {{0x3, 0x3, 0x9, 0xfff, 0x8ab3, 0x1, {0x2, 0x4acd5b6a, 0x2000000, 0x80000000, 0x2, 0xffffffff, 0x54, 0x2, 0x7, 0xd3c1, 0x80000001, r3, r5, 0x1000, 0x4}}, {0x4, 0x3, 0x0, 0x100000001, '*md5sumself[cgroupppp1trusted'}}, {{0x6, 0x1, 0x101, 0x754, 0x46, 0x94e1, {0x5, 0x1, 0x9, 0x7, 0x8d, 0x10001, 0x8, 0x3915, 0x4, 0x3f, 0x2, r3, r4, 0x1, 0x80000001}}, {0x0, 0x3f, 0x0, 0x1, '/dev/snd/controlC#\x00'}}, {{0x1, 0x1, 0x3, 0x3, 0xffff, 0x73c8, {0x6, 0x2d3, 0x80, 0x263, 0x5, 0xd910, 0x32, 0x7b, 0xe5, 0x3, 0x8000, r3, r4, 0x2, 0xffffffff00000000}}, {0x3, 0x10001, 0x0, 0x3ff, '/dev/snd/pcmC#D#p\x00'}}, {{0x6, 0x2, 0x9, 0x1, 0x80000001, 0x7fffffff, {0x4, 0x80000001, 0x4, 0x8, 0x8, 0x3f, 0x4dca50c, 0x337c, 0xb1, 0x7ff, 0x7, r3, r4, 0x0, 0x6}}, {0x3, 0x4, 0x0, 0x1, '/dev/snd/pcmC#D#p\x00'}}]}, 0x10) 09:05:37 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:37 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:37 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) setitimer(0x2, &(0x7f0000000000), &(0x7f0000000040)) ioctl$RTC_AIE_OFF(r1, 0x7002) 09:05:37 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2, 0x7, 0x0, 0x0, 0x2a, r0, 0x6a9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x8, 0x7, 0x2}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r1}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0xf000, 0x1000}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) 09:05:37 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1000000000000000040000000000f800"], 0x10) 09:05:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0xc}, 0x0) 09:05:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) fadvise64(r0, 0x0, 0x8000000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x4}, 0x2) dup2(0xffffffffffffffff, r1) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x9, 0x101001) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="420750b4de09908e04000000000000002d3acbeaffb70ae2e95801f897a09e5f4140d84fba68b6a5c0d14fb371f437e531a3b80b9fd1262ccda781002fa533b719d51e5f52bf7d5d7ba1c385bb2e0e25f6fee94d6fc713b403be8fc35487ceecee87dd903634e7a6556302ce9b4d98b8b79dd189464f33bb04691ddb2e3969a6be91ffe8909e614302db53004ac9c33e1998d5d9bc6bf4035c54007545dd3bcb65b604bb7df9ad1876854832903aa448d0113057eab339db40d2bd42fa34a00185003a76e1f5e81fb04ab49af5c858748f48ef5584bd287233341f6be95ee9a79a2d3c74811456d4a9f8692435f09bdb8929f27f05fd09c33df0b3a9d6e54045870f596ad0e1794b3f074277c779bee35bd6b080b3f0f26dbe9ebceaf608f85cd230890349ff5de367ac503fad1053df97439242ba5c2cb8896d8cb4b7372a9a29d3fa3a5134b9b9490ff09796d1af050000000000000006833cd6074a2c404056957cf85f9720957f1e7137ea56bec3cb05ff37cf8caad147a329d5e7fc989084becbc71ad573ce30804ab7b57399cc79412c481c91e3b0f70e125b4cc7d669cb58db153bc96a87d4acb96e31f47ed396e1d297486f0600000073725d72ea2f38693eccbabf82d16492fdb8c3558644dad90c3240b26bcb98f200268c7b2076d1ebaf57600f7c412f3b1c6cac4d0b99981cd7dc16f3511167dd94e17c5562b4e3ebf517876dad560362c875e29a8cfd406551b5dd236653ebe3"], 0x10) 09:05:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, 0xffffffffffffffff, 0x0) 09:05:38 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:38 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48100, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000000000000400000008000000"], 0x10) 09:05:38 executing program 4: syz_mount_image$erofs(&(0x7f0000000900)='erofs\x00', &(0x7f0000000940)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = fanotify_init(0x0, 0x101000) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) kcmp(r0, r1, 0x0, r2, r3) 09:05:38 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x13, 0x5, 0x7, 0x5}, 0x2c) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x8000) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000001c0)={r0, 0x6, 0x3, 0x3, 0x0, 0x6, 0x3}) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000001280)={0x1000, &(0x7f0000000280)="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"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r1}, 0x2c) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000240)=0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000040)}, 0x10) 09:05:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:38 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) [ 342.608464][T19567] erofs: read_super, device -> /dev/loop4 [ 342.631738][T19567] erofs: options -> [ 342.644511][T19567] erofs: cannot read erofs superblock 09:05:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x140203, 0x0) ioctl(r0, 0x4, &(0x7f0000000080)="362a4ae3d071d1df4cc6a1afcce9653a7ed5e7180b6100e65755f1319e3df6f7f161a638ce75eacdbe42dd14d5c44e5edddd9a6b0b9d2883571227963b821a650a3bff21518e81edda595f7338e7cf1a2483cfc8e0867408a83b780f84a9ac9b0849d54f02336487abc9f05ecba1745a0d9a2d6f1b803caa4cfdecca7ec47131d56d7eb4285a2f386a61c05ef4ec6934906c3115130e494e5ed0600d6a5fbfcc7e") r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000000000000400000000080000"], 0x10) 09:05:38 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 342.729890][T19567] erofs: read_super, device -> /dev/loop4 [ 342.741031][T19567] erofs: options -> [ 342.762907][T19567] erofs: cannot read erofs superblock 09:05:38 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20200, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x10000000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="c000000000000000040000000000000002000000000000000300000000000000faffffffffffffffff7f000000000000ffffffff080000000600000000000000050000000000000005000000000000008500000000000000030000000000000000000080000000000500000009000000070000000400000003000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="00000004df56cada97ac35a72c758eb788f200ff0f00000000000003000000000000002b000000000000002f6465762f736e642f636f6e74726f6c4323000000000000"], 0xc0) 09:05:38 executing program 2: timer_create(0x7, &(0x7f0000001280)={0x0, 0x17, 0x1, @thr={&(0x7f0000000240)="5e2324c92cd657dc8a65e590920badbdf2f3ef86a6f83f31577b9b93727f85145d378d01faa1a0c1fc87b469ed47846eb86fe91bee289ced0a3793995a559ef3850f4bd2ac5322463d5c5c7fbcf0e6eb18e69556bafcf3b845d371a42120603fa06561a7b50aa4906d863e94fe308f0fdfbbd2eb73283b4679a87e1657086e647fe87b03e32952e5f898c3411e6be745d4f5b58623a23c738dcffaa26462706e472e2ae9b61a376d28ce366c64cbceb979be697b13f0458caffd820b78d232e3bb80ab48067034d4fb490d864a928793ac03f3a4b16141da5a28f91b16cf8aea079685e0cacc90cf119405b580dbe4e88c1c4fd1888c2052a0f17cb7d5f27f9a1c0cc66b98946943cdb89f0f7ff390473ce5e07d2b32d46e4078211a928cae3c92932449eef1315c6a56d110612da2287042e05a5321c440147fdb759a520524da807556ec8aeb781280645b3ad792604bdafb77a734b18b9478bb1043603ffb0ab3a636f3176727f8270c885389f10363e2371bdebf848bca1fbcd9e5f7df2937f7d66bb861fadec244b7121503356ac34365e7a11e6b0442e4dc58e43da0229915bde655c697ac8c2be46e1839a24c2ab9a036c29c85249e740fa759eded0f21eba47923620def11c82fe46062a99041d2ff7d240e496c47d69fc63b742d4a33f0b03da28bb798d89de38809da24cb26d68d818e5190cc1881871c2a169ecc8fe6a2bef4fd6f4737ab988cf77c12e1ad65bc53d239af4fc78df9dffcbe41124b80fe4fbd88e458e3d1469ba90473d09a85c380a3aa04988625df1e52801a0013cfd00cb9690a41fca0a49802eb10910379ded2b895b6912e2a2a9508a7d1f0846fa4284efe113bf07a084d1bf01d32eff9394d2f3349bfa393ba7e07d99e4e3bf0e332bc7f8180127f88a9216a6698982013c594554e041555de1267b3f7ba790e15123bc464a8609e649848cb28b9082e6b78e3487edc80fed0068f787942b18c605641672df3aadc090ed7e9fdcccaf3d718a15ea8869790de87eccec62878bdd5e3a677f341050a17bd3123ba023fe977d3e0dffe4567d33f47eb7a496cf950c0449bc5bfb99a4eedece7f8d0178bf961b5af39891e45b9b6115e295fcd6159aec3c4070daa98d41443718351ee153e25b0b1fe623f81dced5c6b34ef7a6720658d4d347a152c8cda5ff93768a61d63a15898dabcaa3279587a8a81862d9dcae4766621d88449ce3aa98998ee0dd565eccf5b236d51b411949bdac92dafc51343283f618fb31574a41cabaa020f901b4b375380c095ffeef423fb268f41190e77ff4f7fcd608479b118e9f91442957586bc46ec50f8201caea7f888c7336caf655f904a7077048c87248f817cdd25e9a73f15c5f2f71366b6ef05b71234c4a15f8f799c3c6acb4fa2f48a22388a6bdea57701117c3626e163fbfad2455317fdcfcc9a778b8b714b4157818dc774259a8782e121ea5d2eaaf646d9d407f1032f728417bc299ae6759e167307baa19f61d6d2d20d735481389a4fb89fcd85dfc57bc83b69963bdc6465f6378f001551f5a1f4dfde009296b3a805769703f78cbf2296550821f456ca054ff69d6333925a1db7b01671a01242ad3668cbaa398ed4b4a957407b5023faad3e9f4d9ac7358894e7d343f915d9f492f69dc5ab16de612704a05dc1bc36a486f60e0bb893baf7e02f950611fb8baf0fb9bfbbea98b1399dd4bb58284072296aca9816bab62da6fd9592d909130abf0a8ffd2ecfb7cd081b64be964505779c10d7596c50ab55d867f3e4c7a152c0a9610aa782ddb29981f0e03c66badcd48a7aabc6238b4e828375b31518530b8a4152d1d0fbd0780085f0c8ea0e15953a38b8cd2fd6a1d2e5da4714e3c043c02bc5fc8be53a30325e75457c4ac64e795f98f5cc7272a10d6e57995ba739aefe0e1cac517181fbfa6611393db99f979be183a08ffe46af8ff0ee74d1d0df2767ae0cdc6379566bc48c411de2bebdc00a7426861fbababac078b48566a8ba80fc2d115719728ec801e79b16e11b4e5925a1b4548c2d056cc87980bac0de5c08f4358e1e11789438565d9f6e47516d8b5acac6599952aec9c0fd9e08f8f728aadc5207c44494c5c680ca71ce3cf6218c1f88aedbb639003d60d219406fe57f2c45f36bbf0bfde8ad69baccd8b673b22826cc71c14a04bbc572271f3d37cd8c5fdaf9833272348e57f7fde7e205fe868f58981266e1524dd8f662a8c4068ddc0628fbf027be85420b6673456ac1b11f2a0e0fcdb987ad1ec49b1104ed478ec6fc745bc394f09eb7c6b90a3e2433d332c51f4a50732ddf38f52094ed941a5fa4fdc645d7ca79640638b3bf62728c8ef97a0edc4c234f6b33f70b266213f0ef311241420f763ebe87409986f47cc0cf3ff55d6092088ea973a41af6898ff6c01ce0f0d94ab9cb2431fdf8889c1610c800505ebf3bde15afdcc7cbb07b571f5dc30d9e9d78fdc265fde85794b24760397379ced7004563922e8dfb095f58a280ef3765131ba5787ce4161cc2fa1de0cca63b62ea7a62cd17b67b68619afc6dbd85adb4d6dc2b8106ee5476abc4f4f990f6cdd204634dcb89ef45849efa7c74df079a9a17a2a1630f2204a6ff7e0c839dd3e27dc40bc8802ad5ee603eda384f885272ebb771d761098ad05d1c01e529ad48a3d0ffd56f5a142905483c80f2394c273e4f619c214429afb1f6a684b57f28743938fefda4fa5005d81d8d0777554cd2b9a5d3d8d7098a9b6656806bdf5eb63eab72da38dbe8b15f95aef01f5023fa7d3d04790de37910a56d0a2c30c6489658b7c17379d9b812d4c0ede7fd6ee6eff067ff6b9b9f586c1aa1540cce5d15dd1ece82c52397b77c1fbd600c1918ef1bb96fa6df2e19b8f25b2f75961f4173f0d914d81968a8d27ee8ad909c7cbafc3dd59b71f1098bdb624f0cd908d0e24edb49e0787a30767d30cfae5214b4bdec223ad320d9c8a7e1914f6f10f56d3773966b262349f359db644d82d7bf3fedf102c919d5e88317c569d83fa82c1691ac01b1793f5d79bcdc1dcefcf87d5a39b2b60c239c533248a3e96b21032f1f86f0c0dc7fd661c77e749101a6139e6a8b435c2f9c342825bc2a3c5c6b4c62f8c8287577e0c9728d5f84274e37785b6eb36d24b2b206356e287aa07718a0ed14532356bf9d8755ed3bc2b106c601f7c14a26ed931efc993ef33ebe4a8780505989fde069fe444b8feb0a8c6325c7b620be4c47f06010913b62553ebcb8435588dae82e1016d039e7bdc32b977526fe26160190d1c9ee23d333cc047be1352cb38c83fd8e335baccf1f3ab72a1bbd545fef3f12e8e77df077f2db7a182743045c15f75f9b08aa201f2c3a0f1e4b786f4e0fb762cdd13a3eef6cd5c07a6945d2dc20ba983e2c03504b512e7be541a14329844f31af654f1b89fbc2ca7145a7bd7153c9a983de2700a1fdd1922eefbffeac9465f85a779679032b8e9696a7a592aaee28163eac6140f0a6e6ff2bbcaa279b47517ae863983a4aee680ef8ac547a409860b6c883b2dba4c93ca4a6c05520df4ea04a950ffe237731647263fc6c86ad40739a26cb1cfa3e38444397671587c7afd6cf9a0ed11c229875a6f2baa633957e758af2623a486d2314b4d36ba962a5acd4656b158fdd1d61cd6898a1a156c56fac5947933d67fc8c45a0c569c8339a9a7c73658d9ff74b278b55597e278bb175cc5ee06baca1872f6ffa3879335d1d4c30b0cf42e8d93ad81f953f93e298b0c2ff9177a6eba3e6c2eabe6e0b06c28cd95d8f33b01d0ddc26b47e88be497125785f981227e07f91072b9179c35a5c7a5e76037ca3b8efa8828e20023ee52d351f2ad11f7dc189d2df8fdb196d66e47f9cf1f2301495e557b60fbf3fd4e9c0b9484902f427c111f6260b370bf029afb3f34e6dd964d7e42348b2a7c6a9ef74a7d00e7dc96b71c6a1ebc26519779bd711f09ca2375bf442b66875a0afe4ca0d4ff0254daf63805f7ba7bfc4dd6b1514e703a3283df898a971e8c48bcd7359beb6c8039403f36a7d18e013d42e9a9962a1eb5c3f77442c7c5b3a4a902845b922bc977ae571a9d92ee256b4ee7a2035484afebcbdbef1fde704dd6d2bb37bcebc37057a41c7a07bcf97fd03b60a659208aeb252d15b65c9bfd6b3c665a0a437b94e10d6ecc38f5ded2c16dedf994512a961658a48808f1858726c8244b8bcc8b67172be110c27c4d81ce291ad6b7bad333ced82f7a359bcb0f5a89f0a445e3f43043934301e3364e0378632f400e0171345097af86844424a0db8f17d7cb3ad9b037c9cd14c016578e1f5dbe09786a89c080dc869f55fe575f12f81580cbe0945c63a07db4f989be5e89d68a05c590c6655a06b0db0479ecb4de4b6b77032e556ac47b96babf0d43d72ad8c6a4c2294390c571298a40116e1ae7c5376d09b2146a31485820b943e6ab49f7ee2f83ecc81d2926715f343c5fcc658fca7a92154cbc7bf89ae1ff9396b0b189141975cde74680c6be656577e983065659c58acbb57775a0b996499cdc64b1c548bce69d7d254cb843b7a6286a914b76c375ec1d0c41e2dc36ab32d31a087e167babeeb19e502a1228e54f401feb03b77d1404d135ef53c7efa9e8ffca272df670d154a20cc1c62c968e13b414007eb04bab24a513d8ba4a28c2049c3d451394a6a40d70f28f97980197505f10dfa7015dd1e7db3ddbc33dfe7e7b6e9b854800b9bc673a289e1b72c37efe47df39bf85da775461ac5af9ea35f34715995f2591bc1a899e19849fab593d083d4f786245552143b973c091bd4dc0415c7b8cd70e26ced6b7332363fb7bcddffd7f5d2293f2ec6c24b1c71f7e0167974a241a3861cda12bf353bce6ae7c7a7b8a2ab53cfa45fb5f01a953c6ba06edac1d4967943399437f10f5c42d39a83dd9015280196ac7cd1888b946acfb0f6e4539069ffc8a6e75893091bc2dbea825bb015357df50d1b358da751eb7de2e92ecfc498fbb4f28236d256c210470dda60674ed355394507b14c046fddf34f8cf73e286d57e5cb9dffc5f4b2a315ec221c39a13641d37d0226098d819ab88b8d4039dd0df08c1d8158ccb0efcb3e2a8241a467de60f38b4ff905b6a7c316e84b6b54c4b47aceed5d878c595fcf29960ba377bc664ee3d698755535e415e5cc029435fbb6ed6105ecd8bcd8a04ad185c93be98ab9e84fc9ef2af7b1396d3e1a065579e4bf933aca9c87d229a0bddc04915d1740f0255a3e8c0cf715e28387d693b77bf61458e03af0824a2a27ec4f044470f0a38213ccba0a305837b271c855a5181cfac9c87f78a4ba9d0a5d27d1e4a439aa4f57c1fc704f08ad5fd0db4c8a0a7b951b204e0f36a4781401105d57643941ac68f5fe61504a2ef22acd1d1ce171732d2d9af0a9c41470891f583a612fc9ee7ee73d24c31d295fd08913e066809f4f4dd92817a98e3cee40ef9023bd46df8141388d49675d5ecf6c2ba62c4939c8123e46d9bec701a09a1ad2d30a8c7ec986ac94cba07e889fa8d9cae40471b5b754674b0e9f984e176f847d2f5d96fe42078643f626023e24698c9a94d329b96d8025a1de3af3ea8f62cd8093f19a760aead36c80b8f0e13fe3a298d83f603c3903b7ad324a411ce626ee905edd391ba6168c737c39ae324e2c19873343c02b085a38a970f3f638a775a38b6ef2298532a4ef11cdf308ae3e6706ba7c5507e85d18dcebf3ddddd6820f3ee82d3bc31332c31d406ff0f36eec9593a93e7cfdc53efa1543e13837f6873b3d4f6da0b7a0bf0288562f309c26959cfc1d", &(0x7f0000001240)}}, &(0x7f00000012c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vcs\x00', 0x200, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000001300)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) 09:05:39 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r0) 09:05:39 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="100000b9c500000000497d7e81025b0f0b02baf605565f29ac00000000000000"], 0x10) 09:05:39 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0xd00001d) 09:05:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x20000000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) fanotify_mark(r1, 0x400000012, 0x10, r1, &(0x7f0000000200)='./file0\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="7fa721e53093975771102e4a377e4d2b9f9328f997f3201c00563ca765463b595de05ef76c0777a177b72c5d1e1703a349656bff21c9f225257eaf6850025eebfbbe9a015dec025c44bce7a305a36ea76d86948c21f41cc151daee78e7d6760c9ccc98a2e60f36db579e48adb7b4dabcfc50f51a3a6250f2c33ef644a8daf5341ad1efd67ea82020951df72b5cf22e897e0a350058354ba1f36b8c52a0c2bc231795ff9fc3d75089065048862949d048ce99a0f203ddbaeebb07b61f7a26e04d4b7750dd3d7e7b5e369a3f817d9deeac150cb7ac81f9f58b526c52f4fe") dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:39 executing program 3 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') write$cgroup_pid(r2, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='/\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='cgroup.procs\x00'], &(0x7f0000000540)=[&(0x7f00000002c0)='eth0GPLcpuset\x00', &(0x7f0000000300)='bdevlo:$cpusetuserkeyring},]\x00', &(0x7f0000000340)='!user)em0$\x00', &(0x7f0000000380)='posix_acl_access\x00', &(0x7f00000003c0)='eth1+\x00', &(0x7f0000000440)='em1\x00', &(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='cgroup.procs\x00']) 09:05:39 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x618142) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0xe7, 0x60626b53, 0x10001}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140206, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x12, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r1, 0x10) bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x1000) [ 343.543673][T19888] FAULT_INJECTION: forcing a failure. [ 343.543673][T19888] name failslab, interval 1, probability 0, space 0, times 0 [ 343.559455][T19888] CPU: 0 PID: 19888 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 343.568522][T19888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.578635][T19888] Call Trace: [ 343.581960][T19888] dump_stack+0x172/0x1f0 [ 343.586322][T19888] should_fail.cold+0xa/0x15 09:05:39 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) sendto$llc(r1, &(0x7f0000000240)="f0f69d8ce21d9b7520fd0618e7e9233f7ce4943383448497f01a7c65d3feacfa11e70302d2c543e495197443a9d9e5e15eaf88e64fa54e69cc3c026701d56cdfb0bf1dfb1620da913c5bd2a644aa3bb0dc124260dd3e9b0b0a04b9d105c88a67f2e4f191bfbce5629f27ddf8ad0d2fdaac89afa507bea5361190a777585a98457558cd114e1c6ae27925216cb51156caadb932994f2ae3f037bfbb958d8042362f9d9757adf34127df73f0c136f65cb8dbfd521eafa941e133a75a445b0b8f91be6dd7a8e3761ab3231c39c79778d664716c", 0xd2, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000340)={0x0, 0x87, "5bf34b58cfac97c75efb0246d7183f3c0cf7c411f62307f4efec3eb0cf957a58eeaf6dd47a90e420ca1fb535705989b60f8e29d52dc8a581b472dd9be0a254031bc1a8af0cc7be3858c1c2cad365deff67ed7fcf28a26c8ef37b2865d745f643972106d9b78dc147fccdbd9464384a16ba8a303c43ed42361f0869631c620598a4998dfabe350a"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000001c0)) 09:05:39 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa19e}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 343.590936][T19888] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 343.596765][T19888] ? ___might_sleep+0x163/0x280 [ 343.601649][T19888] __should_failslab+0x121/0x190 [ 343.606613][T19888] should_failslab+0x9/0x14 [ 343.611133][T19888] kmem_cache_alloc+0x2b2/0x6f0 [ 343.611189][T19888] ? lock_downgrade+0x880/0x880 [ 343.611279][T19888] locks_alloc_lock+0x1d/0x1d0 [ 343.621061][T19888] fcntl_setlk+0x28/0xcd0 [ 343.621079][T19888] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.621158][T19888] do_fcntl+0xba2/0x1140 [ 343.621184][T19888] ? f_getown+0xc0/0xc0 [ 343.644977][T19888] ? fput+0x1b/0x20 [ 343.648884][T19888] ? ksys_write+0x166/0x1f0 [ 343.653440][T19888] ? tomoyo_file_fcntl+0x70/0xc0 [ 343.658394][T19888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.664704][T19888] ? security_file_fcntl+0x93/0xc0 [ 343.669844][T19888] __x64_sys_fcntl+0x16d/0x1e0 [ 343.674630][T19888] do_syscall_64+0x103/0x610 [ 343.679241][T19888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.685153][T19888] RIP: 0033:0x458209 [ 343.689055][T19888] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.708693][T19888] RSP: 002b:00007fef0850bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 343.717133][T19888] RAX: ffffffffffffffda RBX: 00007fef0850bc90 RCX: 0000000000458209 [ 343.725120][T19888] RDX: 00000000200001c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 343.734602][T19888] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 343.742593][T19888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef0850c6d4 [ 343.750755][T19888] R13: 00000000004be874 R14: 00000000004cf2a8 R15: 0000000000000005 09:05:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:39 executing program 3 (fault-call:3 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:39 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x9) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) pipe(&(0x7f0000000140)) 09:05:39 executing program 4: r0 = socket(0x400020000000010, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80000, 0x0) r3 = shmget(0x3, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) readlinkat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/52, 0x34) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000001c0)=""/219) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x2b, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x2e, 0x2, 0x5a}, 0x2c) r4 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_aout(r4, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x34d, 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x3, &(0x7f0000000000)={{0x0, 0x7530}, {0x77359400}}, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 09:05:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) ioctl$KDSETLED(r2, 0x4b32, 0x3) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000000)=""/238) 09:05:39 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) socket$rxrpc(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r0, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000900)={{0x5, 0x1, 0x8000, 0x5, 'syz0\x00', 0x7}, 0x0, [0x4c57, 0x80000000, 0x1000, 0x594, 0x7, 0x100000001, 0x7fffffff, 0x549, 0x0, 0x5, 0x6, 0xffffffff80000001, 0x2, 0xfffffffffffffff8, 0x0, 0x2, 0x6f, 0x2, 0xffffffff, 0x4, 0x8, 0x1, 0x6188000000000000, 0x10001, 0x8, 0x3, 0x2, 0x5, 0x3d, 0xffff, 0x101, 0x2, 0x100000000, 0xfff, 0x1, 0x1ff, 0x8001, 0x8000000000000000, 0x6, 0x1, 0x6, 0x0, 0x5, 0x1000, 0x33, 0x401, 0x6, 0x8, 0x7ff, 0x8, 0x4, 0x5, 0x7, 0x0, 0x8, 0x101, 0x1f, 0x9, 0x80000001, 0x7, 0x8, 0x200, 0x400, 0x7, 0x7, 0x6, 0x27d, 0xbeb5, 0x9, 0x1f, 0x5, 0x2, 0x200000000000, 0x35, 0x9, 0xffffffff7fffffff, 0x0, 0x40, 0x1, 0x3, 0x40, 0x3ff, 0x7104, 0x8, 0xb8, 0x0, 0x89af, 0x9, 0xfff, 0xffffffffffff7a4b, 0x4, 0x8001, 0x7, 0x8000, 0x9, 0x7, 0x1f, 0x8, 0x100000000, 0x5, 0x630, 0xe4a0, 0x9, 0x0, 0x3f, 0x80, 0x2, 0x200, 0x394c, 0x4, 0x0, 0x8, 0x81, 0x2, 0x7, 0xff, 0xc0eb, 0xcc9c, 0x80, 0xff, 0x0, 0xff, 0xfffffffffffffffc, 0x8000, 0x6, 0x4, 0x4, 0x51b], {0x77359400}}) [ 343.976629][T20060] FAULT_INJECTION: forcing a failure. [ 343.976629][T20060] name failslab, interval 1, probability 0, space 0, times 0 [ 344.046862][T20060] CPU: 0 PID: 20060 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 344.055968][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.066045][T20060] Call Trace: [ 344.069450][T20060] dump_stack+0x172/0x1f0 [ 344.073822][T20060] should_fail.cold+0xa/0x15 [ 344.078449][T20060] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.084291][T20060] ? ___might_sleep+0x163/0x280 [ 344.089176][T20060] __should_failslab+0x121/0x190 09:05:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000900)={{0xa, 0x5, 0x1, 0x7, 'syz1\x00', 0x180000000000}, 0x0, [0x0, 0xffff, 0x80000001, 0x80000001, 0x9, 0xffffffffffffff00, 0x9, 0x9, 0x0, 0x400, 0x3, 0x5, 0x7, 0x98, 0xf7f, 0x7, 0x9, 0x481, 0x200, 0x400, 0x1, 0x4, 0x65d, 0x4, 0x1ff, 0x7, 0x0, 0x3, 0x2, 0xfdd, 0x0, 0x1, 0xd, 0x4, 0x7, 0x7, 0x0, 0x10001, 0x7, 0x8001, 0x10001, 0xffffffffffffffc0, 0x20, 0x1, 0x1, 0x4, 0x0, 0x8, 0x1, 0x2, 0x4, 0x7, 0x53b, 0x776, 0x4, 0x7, 0xe000000000000000, 0x0, 0x4, 0xffffffffffffffc1, 0x3ff, 0x80000000, 0x3, 0x9, 0x9, 0x0, 0x9, 0x6, 0x8, 0x80, 0x100000001, 0x200, 0x101, 0x0, 0x7, 0xa3a, 0x101, 0xfff, 0x8000000000000000, 0x5, 0xfffffffffffffffa, 0x91, 0x8, 0x100000000, 0x3, 0x0, 0x2fa, 0x2, 0xffffffffffffffff, 0x7, 0x8, 0xfffffffffffffffd, 0x5, 0x6, 0x800000, 0x3f, 0x2, 0xff, 0x5, 0x59de80bb, 0x9, 0xffffffff, 0x7, 0xffffffffffffffbf, 0x8, 0x40, 0x4, 0x7, 0x0, 0xb53, 0x2, 0x3, 0xab2d, 0xfffffffffffffffd, 0x0, 0x0, 0xff, 0x4, 0xc0bb, 0xa535, 0x3, 0x1c, 0xffff, 0x6, 0x9, 0xa84, 0x0, 0x2]}) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1000110100ec3e0004f097bbaf265ee2"], 0x10) 09:05:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) read(r0, &(0x7f0000000000)=""/225, 0xe1) dup2(r1, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:39 executing program 0 (fault-call:10 fault-nth:0): socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 344.094136][T20060] should_failslab+0x9/0x14 [ 344.098655][T20060] kmem_cache_alloc+0x2b2/0x6f0 [ 344.103538][T20060] locks_alloc_lock+0x1d/0x1d0 [ 344.108408][T20060] posix_lock_inode+0x56a/0x1df0 [ 344.113615][T20060] ? aa_file_perm+0x432/0xeb0 [ 344.118357][T20060] ? locks_remove_flock+0x270/0x270 [ 344.123631][T20060] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 344.123649][T20060] ? should_fail+0x1de/0x852 [ 344.123669][T20060] vfs_lock_file+0xc7/0xf0 [ 344.123690][T20060] do_lock_file_wait.part.0+0xe0/0x210 [ 344.123707][T20060] ? locks_remove_posix+0x530/0x530 [ 344.123720][T20060] ? common_file_perm+0x238/0x720 [ 344.123732][T20060] ? lockdep_init_map+0x1be/0x6d0 [ 344.123748][T20060] ? apparmor_file_lock+0x48/0x50 [ 344.123763][T20060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.123780][T20060] fcntl_setlk+0x26e/0xcd0 [ 344.123812][T20060] do_fcntl+0xba2/0x1140 [ 344.123835][T20060] ? f_getown+0xc0/0xc0 [ 344.183455][T20060] ? fput+0x1b/0x20 [ 344.187280][T20060] ? ksys_write+0x166/0x1f0 [ 344.191803][T20060] ? tomoyo_file_fcntl+0x70/0xc0 [ 344.196756][T20060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.203012][T20060] ? security_file_fcntl+0x93/0xc0 [ 344.208139][T20060] __x64_sys_fcntl+0x16d/0x1e0 [ 344.212932][T20060] do_syscall_64+0x103/0x610 [ 344.217534][T20060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.223431][T20060] RIP: 0033:0x458209 [ 344.227327][T20060] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.246940][T20060] RSP: 002b:00007fef0850bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 344.255369][T20060] RAX: ffffffffffffffda RBX: 00007fef0850bc90 RCX: 0000000000458209 [ 344.263353][T20060] RDX: 00000000200001c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 344.271333][T20060] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.279343][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef0850c6d4 [ 344.287344][T20060] R13: 00000000004be874 R14: 00000000004cf2a8 R15: 0000000000000005 09:05:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140205, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:40 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:40 executing program 3 (fault-call:3 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x1, 0x5f0b, 0xff, 0x6, 0x800, 0x4, 0x4, 0x8000000008000, 0x2}, 0xb) r3 = dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) fcntl$notify(r3, 0x402, 0x80000000) 09:05:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) pwrite64(r3, &(0x7f0000000000)="c5e03d98a2990d4bf956d989151047b99a13b890b3b98d7c33857208e2446426de9ff0dadabd5ee2d2e52279e906403cf64a6b1aec4acc510b0083a801a970530ffa0a6fea36260b632c13e79c0ac3716d904aa7b4c305", 0x57, 0x0) [ 344.656087][T20197] FAULT_INJECTION: forcing a failure. [ 344.656087][T20197] name failslab, interval 1, probability 0, space 0, times 0 [ 344.681513][T20197] CPU: 1 PID: 20197 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 344.690596][T20197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.700682][T20197] Call Trace: [ 344.704002][T20197] dump_stack+0x172/0x1f0 [ 344.708365][T20197] should_fail.cold+0xa/0x15 [ 344.713007][T20197] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 344.718859][T20197] ? ___might_sleep+0x163/0x280 [ 344.723736][T20197] __should_failslab+0x121/0x190 [ 344.728699][T20197] should_failslab+0x9/0x14 [ 344.733224][T20197] kmem_cache_alloc+0x2b2/0x6f0 [ 344.738099][T20197] ? lockdep_init_map+0x1be/0x6d0 [ 344.743163][T20197] locks_alloc_lock+0x1d/0x1d0 [ 344.748058][T20197] posix_lock_inode+0x576/0x1df0 [ 344.753019][T20197] ? aa_file_perm+0x432/0xeb0 [ 344.757728][T20197] ? locks_remove_flock+0x270/0x270 [ 344.762932][T20197] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 344.772509][T20197] ? should_fail+0x1de/0x852 [ 344.777104][T20197] vfs_lock_file+0xc7/0xf0 [ 344.781590][T20197] do_lock_file_wait.part.0+0xe0/0x210 [ 344.787225][T20197] ? locks_remove_posix+0x530/0x530 [ 344.792427][T20197] ? common_file_perm+0x238/0x720 [ 344.798065][T20197] ? lockdep_init_map+0x1be/0x6d0 [ 344.803103][T20197] ? apparmor_file_lock+0x48/0x50 [ 344.808140][T20197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.814384][T20197] fcntl_setlk+0x26e/0xcd0 [ 344.818804][T20197] do_fcntl+0xba2/0x1140 [ 344.823036][T20197] ? f_getown+0xc0/0xc0 [ 344.827209][T20197] ? fput+0x1b/0x20 [ 344.831012][T20197] ? ksys_write+0x166/0x1f0 [ 344.835533][T20197] ? tomoyo_file_fcntl+0x70/0xc0 [ 344.840469][T20197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.846705][T20197] ? security_file_fcntl+0x93/0xc0 [ 344.851822][T20197] __x64_sys_fcntl+0x16d/0x1e0 [ 344.856596][T20197] do_syscall_64+0x103/0x610 [ 344.861185][T20197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.867069][T20197] RIP: 0033:0x458209 [ 344.871039][T20197] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.890757][T20197] RSP: 002b:00007fef0850bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 344.899299][T20197] RAX: ffffffffffffffda RBX: 00007fef0850bc90 RCX: 0000000000458209 [ 344.907751][T20197] RDX: 00000000200001c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 344.916015][T20197] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.924243][T20197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef0850c6d4 [ 344.932234][T20197] R13: 00000000004be874 R14: 00000000004cf2a8 R15: 0000000000000005 09:05:40 executing program 4: r0 = memfd_create(&(0x7f0000000300)='\vemI\xc1\x8dO\xc0\xa3\\\xe2\xcb\xa2\xba\xcb\xf4\x97\xac#*\xff\xc0\xd0\xe7\x99y\x05\f\xb9\x15R8\xce1\xb3\xd6\xcf\xbf\xaa\x88\xcb\xf0\x1cw61\x9f\xc2\x85+\x87 \\\xde\xde\x0f0xffffffffffffffff}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x57, 0x9, 0x5, {0x7, 0x8}, {0xb6, 0x1}, @rumble={0xf28, 0xfffffffffffffdb0}}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 09:05:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x102, 0x0) write$binfmt_elf64(r0, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r1], 0x14) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000340), 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x4, 0x4, 0x40, 0x0, r2}, 0x2c) clone(0x5000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x400000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x6, 0x101000) prctl$PR_SET_DUMPABLE(0x4, 0x100002) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) write$binfmt_misc(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xec) fcntl$getownex(r4, 0x10, &(0x7f0000000400)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x1, 0x3, '\x00', 0x100000001}, 0x6, 0x437, 0x80000001, r6, 0x3, 0x1000, 'syz0\x00', &(0x7f0000000440)=['eth1#\x00', '/dev/audio#\x00', '/dev/snd/timer\x00'], 0x21, [], [0xf512000000000, 0x81, 0x3, 0x9]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f0000000040)}, 0xfffffffffffffdef) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4c00, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x200c1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000cc0)='\x87eno\x00', 0xfffffffffffffea2) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000002c0)={0x0, r5}) 09:05:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x3fffc) dup2(r1, r1) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000400000400000000ab7ddccc58781de4a22112d9a5d9967e5dd08b01766e04b120ef8fa6a1ac2560f3ef7f17b857e9acea577b6360e4a19e9b1e63e542eda673409e5eeb0749dacc21c55c1d5bc61131f6e2105d82658243be730d3cb4e1fb6b9c21e2cc582bd6bd857e16b50ccdc87db00e2111cceafebe240b62cc06a70c74300b06bb79580f3fb25e5dd65bc9eca34fe02c5ed6ec6f277bfcc706663a4ec7f4c81a8208ea1dc34ff85510cc2f6d59b79109ffc0b59de6777f5f1bc3f7304930c6a533104e558833c5bc25e633f74af1cdd18b0bc9a809b821b8ca95b9"], 0x10) 09:05:40 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0x20000978, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x9, @rand_addr="11cde5d5be289497021b1fd12f9543d0", 0x3f}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x7f}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x100000001, @mcast2, 0x7}, @in6={0xa, 0x4e23, 0x0, @local, 0x4}], 0x80) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 09:05:40 executing program 3 (fault-call:3 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xea8, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="000000000400000000000000000000"], 0x10) 09:05:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0xffffffffffffffb0, 0x180000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6, 0xfff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, 0x8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x101000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x2, 0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r5, r3) 09:05:40 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0x20000978) [ 345.174483][T20286] FAULT_INJECTION: forcing a failure. [ 345.174483][T20286] name failslab, interval 1, probability 0, space 0, times 0 [ 345.196928][T20286] CPU: 1 PID: 20286 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 345.206016][T20286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.216092][T20286] Call Trace: [ 345.219422][T20286] dump_stack+0x172/0x1f0 [ 345.219445][T20286] should_fail.cold+0xa/0x15 [ 345.219464][T20286] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.219484][T20286] ? ___might_sleep+0x163/0x280 [ 345.219509][T20286] __should_failslab+0x121/0x190 [ 345.244929][T20286] should_failslab+0x9/0x14 [ 345.249461][T20286] kmem_cache_alloc+0x2b2/0x6f0 [ 345.254343][T20286] locks_alloc_lock+0x1d/0x1d0 [ 345.259135][T20286] posix_lock_inode+0x56a/0x1df0 [ 345.264106][T20286] ? kasan_check_write+0x14/0x20 [ 345.268635][T20332] IPVS: ftp: loaded support on port[0] = 21 09:05:41 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xfe) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x9, 0x101800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x2, 0x8, 0x3, r1}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r2}, 0x2c) clone(0x42108401, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000040)}, 0x10) [ 345.269062][T20286] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 345.269134][T20286] ? finish_wait+0x18c/0x260 [ 345.269156][T20286] ? locks_remove_flock+0x270/0x270 [ 345.269179][T20286] vfs_lock_file+0xc7/0xf0 [ 345.285476][T20286] do_lock_file_wait.part.0+0xe0/0x210 [ 345.285497][T20286] ? locks_remove_posix+0x530/0x530 [ 345.285512][T20286] ? common_file_perm+0x238/0x720 [ 345.285527][T20286] ? lockdep_init_map+0x1be/0x6d0 [ 345.285542][T20286] ? finish_wait+0x260/0x260 [ 345.285564][T20286] ? apparmor_file_lock+0x48/0x50 [ 345.285580][T20286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.285597][T20286] fcntl_setlk+0x26e/0xcd0 [ 345.285619][T20286] do_fcntl+0xba2/0x1140 [ 345.295425][T20286] ? f_getown+0xc0/0xc0 [ 345.295438][T20286] ? fput+0x1b/0x20 [ 345.295455][T20286] ? ksys_write+0x166/0x1f0 [ 345.295474][T20286] ? tomoyo_file_fcntl+0x70/0xc0 [ 345.295490][T20286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.295511][T20286] ? security_file_fcntl+0x93/0xc0 [ 345.306151][T20286] __x64_sys_fcntl+0x16d/0x1e0 09:05:41 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 345.306175][T20286] do_syscall_64+0x103/0x610 [ 345.306198][T20286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.306211][T20286] RIP: 0033:0x458209 [ 345.306226][T20286] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.306234][T20286] RSP: 002b:00007fef0850bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 345.316279][T20286] RAX: ffffffffffffffda RBX: 00007fef0850bc90 RCX: 0000000000458209 09:05:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000000000080000000000000000"], 0x10) [ 345.316289][T20286] RDX: 00000000200001c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 345.316297][T20286] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 345.316306][T20286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef0850c6d4 [ 345.316314][T20286] R13: 00000000004be874 R14: 00000000004cf2a8 R15: 0000000000000005 09:05:41 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000700000000000019078ac7014bbac14141103049078005e8ef3f38ca4d310000200450000000000000000320000ac1414aaac141400084000000000000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000"], 0x0) 09:05:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000400)=0x0) r4 = getuid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) fstat(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000007c0)=[0xee00, 0xee00]) sendmsg$unix(r2, &(0x7f0000000880)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="a1bc824a03862cfc516ed11f71f15b3f7880f9cbb36f54fdc017859b7ce2146dcc87322b4d0670bf4a0bb6e1cf74d63b2cd54e6e9639515d79540a1c27d131e764257fad356c686217241f99b469f7dada7464d0641196c83b9b2d3847", 0x5d}, {&(0x7f0000000100)="24c1eff461fc1e9677dc57bf3982e5f1a13dc23438063d7a22f885a9e15ae5f0590ce45f7ba917d2f94643ab54", 0x2d}, {&(0x7f0000000300)="ae9f019aa42bb59168d8c84f6e731907b19215e012ce000da806be3d622d330b96de20fcc82bb6b51e5b5847c309e38f57369b51d33e2c9b7b145dcddcef1d7d02bb116e466e53c1609c24d94fe50fdaecf6cf6da84b7518e575a54ec8dd3c05b856579f912fd470dd779de71ead5036b8f4f7a75ccdde7bf4de68c1510add464fb21f2c06ae0309c9a9e7ee0413136d191d59904a113fe0ff3786894d9dd1a3136e33588c41f6efd703629f8eb9cb519e8dbaf00c3257b442bc42b09068708fd36c6f5a795632c58073ea30caaa4b0737", 0xd1}, {&(0x7f00000004c0)="142385a305f07c28a3e4c461f97decc5b1e67b344b84a9203dea9107036e28c0f35c129f4629a0921e1166ebacd364f49f2d0874a8540f304fa3d7c929ffcc6071919bdd0c659fcfb6a9c1e0fc7aac97e9fcebc35ca05bcf09929b8dc227e720bd7dc89d2c9ebb730aba3a2dbf1ddbce622193b5ce41d182b310e6676fd08c9d790f165c798254ef6f0996ee76bec0a67675730cdfc606e51b15f22e3bab865d4cfe1273c03186b03639c7c006fe9ef994e186a3e0d3a38273dd2626c4eb2c05b6d27a37de1582c0eabf27fe8c173aec372d956a3ab2a53b9ea32ca341c9c02d03a07096d38759", 0xe7}, {&(0x7f00000005c0)="0b76f096c1b48afcf2203f3573334824c6124c55b672e0a653833451935b2226eac38831288d56682045bb8a8cf90bb85191e92ca839cb21a6c540016579941325bedd51dcbefa44ba8bf45045c7644ff9cb112c809a6008901f99c7eec399467eb13d8ed03071085ad6783a9de77235d6e6a1eb6e0d94089363a0b35f9551ef833dcb855c2026faf7eb96b1479dceefab9439a47d567879f48dfb12ec2579a5e19506716a31c82ea17f3542d2c362881147808c9fd27476821b139e0369134f21880d5ca84e8902b331cf18794aba19c81ff6a2507237c07d02b83ea07f71905b29e1d65973", 0xe6}, {&(0x7f0000000200)="dbd403eed2a5fa9913f55c85e237ac467be0e0016e19daa9e5fa9968515cd8114d0d716e78f0211dc46ae83d1d816978e6ffa8f6c53d266a15c46c82bd21e3af1c2d1b40976f359304e1e1c1729f96481f7d4113d996dd5c64001d84347bc1117dc9a2a1f3335f65c44c9741e8f051f8fc473600d630d4decc378086faf192ce109383f8b96ee54eb60e1775e453f6ab5fc7f462", 0x94}, {&(0x7f0000000900)="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", 0x1000}], 0x7, &(0x7f0000001900)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b65e8fd425c7efd6741db7263729ebe8ed922b8c2c4ac31b935c105ac3b814b26ef148b3ca23a30cb18329"], 0x78, 0x40800}, 0x20000000) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000140)="3addf95363a989f160ed3b314c45a5388c10744e374d2615ef697e60ca6e9a491342747108270885bd2207a4485c67675582c375e3de8661d2f25560646e7a", &(0x7f0000000280)=""/232}, 0x18) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x801, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000008c0)={0xb8, 0x4, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000200)={0xb, 0x7, 0x200, 0x800, r3}) 09:05:41 executing program 3 (fault-call:3 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x3}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000000)=r4) 09:05:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) fchmod(r0, 0x180) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="100400000300000000000000000000000300000000000000030000000000000002000000000000000100000000000000070000000200000000000000000000000700000000000000b2030000000000000300000000000000050000000000000000000000000000000104000000000000fc000000ff000000ae540000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="810000000800000000000000010000000000000004000000000000000b000000310a00002f6465762f617564696f00000000000002000000000000000100000000000000d0000000000000000f470000000000000000008003000000030000000000000080000000000000000800000000000000070000000000000000000000000000000100000001000000070000000900000001034b0c00080000ff070000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="01010000bb6b000000000000010000000000000003000000000000000b000000810000002f6465762f617564696f000000000000030000000000000000000000000000000500000000000000feffffffffffffff080000000400000001000000000000000300000000000000080000000000000000028990a7989fb9c1cad7f05a1700000000000087090000000000000800000000000000a40f000004000000030000000900000000000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="3d8f00000000000000000000060000000000000009000000000000000b000000000000002f6465762f617564696f0000000000000300000000000000030000000000000003000000000000000104000000000000f116000001000000040000000000000000020000000000000001000000000000090000000000000007000000000000000200000000000000ff07000003000000050000000080000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0700000000000000000000000400000000000000050000000000000009000000200000002e2826262562646576000000000000000000000000000000000000000000000006000000000000000400000000000000000000000300000004000000000000000800000000000000ff0f00000000000009000000000000000104000000000000ffffffff00000000070000000000000804000000bc00000000040000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000001040000000000000600000000000000910a0000000000001d000000010000002f29637075736574747275737465645e75736572637075736574292700000000040000000000000001000000000000000080000000000000018000000000000000000000020000000100000000000000a60000000000000009000000000000001f0000000000000001000000000000000700000000000000ffffffff07000000000200000600000057000000", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0900000043000000000000000600000000000000ff0700000000000010000000010400006574683070707031747275737465645d"], 0x410) 09:05:41 executing program 4: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) clock_gettime(0x0, &(0x7f0000004380)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000041c0)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x2, &(0x7f0000000380)=""/96, 0x60}, 0x7ff}, {{&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/19, 0x13}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/131, 0x83}], 0x4}, 0x4}, {{&(0x7f0000000680)=@x25, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/71, 0x47}], 0x3, &(0x7f0000000940)=""/204, 0xcc}, 0x6}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a40)=""/212, 0xd4}, {&(0x7f0000000b40)=""/240, 0xf0}, {&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000d40)=""/80, 0x50}, {&(0x7f0000000dc0)=""/57, 0x39}, {&(0x7f0000000e00)=""/117, 0x75}, {&(0x7f0000000e80)=""/134, 0x86}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/20, 0x14}, {&(0x7f0000001040)=""/166, 0xa6}], 0xa, &(0x7f00000011c0)=""/100, 0x64}, 0x3}, {{&(0x7f0000001240)=@ax25={{0x3, @bcast}, [@remote, @netrom, @remote, @bcast, @netrom, @rose, @null, @bcast]}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000012c0)=""/129, 0x81}, {&(0x7f0000001380)=""/205, 0xcd}, {&(0x7f0000001480)=""/25, 0x19}, {&(0x7f00000014c0)=""/130, 0x82}, {&(0x7f0000001580)=""/118, 0x76}, {&(0x7f0000001600)=""/147, 0x93}], 0x6, &(0x7f0000001740)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002740)=@isdn, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000027c0)=""/254, 0xfe}, {&(0x7f00000028c0)=""/60, 0x3c}, {&(0x7f0000002900)=""/37, 0x25}, {&(0x7f0000002940)=""/169, 0xa9}, {&(0x7f0000002a00)=""/110, 0x6e}, {&(0x7f0000002a80)=""/69, 0x45}, {&(0x7f0000002b00)=""/139, 0x8b}], 0x7, &(0x7f0000002c40)=""/230, 0xe6}, 0x1ff}, {{&(0x7f0000002d40)=@can, 0x80, &(0x7f0000004080)=[{&(0x7f0000002dc0)=""/17, 0x11}, {&(0x7f0000002e00)=""/82, 0x52}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/85, 0x55}, {&(0x7f0000003f00)=""/170, 0xaa}, {&(0x7f0000003fc0)=""/28, 0x1c}, {&(0x7f0000004000)=""/93, 0x5d}], 0x7, &(0x7f0000004100)=""/160, 0xa0}, 0xdb21}], 0x7, 0x10000, &(0x7f00000043c0)={r1, r2+10000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='nodev&:%\x00', 0x9, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) 09:05:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) dup(r0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xffffffff, 0x4, 0x3, 0x3c}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/137) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 345.734491][T20464] FAULT_INJECTION: forcing a failure. [ 345.734491][T20464] name failslab, interval 1, probability 0, space 0, times 0 [ 345.767566][T20464] CPU: 0 PID: 20464 Comm: syz-executor.3 Not tainted 5.1.0-rc1-next-20190322 #9 [ 345.776636][T20464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.792867][T20464] Call Trace: [ 345.796266][T20464] dump_stack+0x172/0x1f0 [ 345.800707][T20464] should_fail.cold+0xa/0x15 [ 345.805313][T20464] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 345.811143][T20464] ? ___might_sleep+0x163/0x280 [ 345.816022][T20464] __should_failslab+0x121/0x190 [ 345.820970][T20464] should_failslab+0x9/0x14 [ 345.825488][T20464] kmem_cache_alloc+0x2b2/0x6f0 [ 345.830350][T20464] ? lockdep_init_map+0x1be/0x6d0 [ 345.835398][T20464] locks_alloc_lock+0x1d/0x1d0 [ 345.840258][T20464] posix_lock_inode+0x576/0x1df0 [ 345.845201][T20464] ? kasan_check_write+0x14/0x20 [ 345.850151][T20464] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 345.855971][T20464] ? finish_wait+0x18c/0x260 [ 345.860571][T20464] ? locks_remove_flock+0x270/0x270 [ 345.865776][T20464] vfs_lock_file+0xc7/0xf0 [ 345.870208][T20464] do_lock_file_wait.part.0+0xe0/0x210 [ 345.875756][T20464] ? locks_remove_posix+0x530/0x530 [ 345.880955][T20464] ? common_file_perm+0x238/0x720 [ 345.885980][T20464] ? lockdep_init_map+0x1be/0x6d0 [ 345.891008][T20464] ? finish_wait+0x260/0x260 [ 345.895600][T20464] ? apparmor_file_lock+0x48/0x50 [ 345.900736][T20464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.906980][T20464] fcntl_setlk+0x26e/0xcd0 [ 345.911400][T20464] do_fcntl+0xba2/0x1140 [ 345.915642][T20464] ? f_getown+0xc0/0xc0 [ 345.919807][T20464] ? fput+0x1b/0x20 [ 345.923624][T20464] ? ksys_write+0x166/0x1f0 [ 345.928150][T20464] ? tomoyo_file_fcntl+0x70/0xc0 [ 345.933096][T20464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.939469][T20464] ? security_file_fcntl+0x93/0xc0 [ 345.944607][T20464] __x64_sys_fcntl+0x16d/0x1e0 [ 345.949387][T20464] do_syscall_64+0x103/0x610 [ 345.953994][T20464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.959978][T20464] RIP: 0033:0x458209 [ 345.963892][T20464] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:41 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x5, 0x12000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xfffffffffffffff3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r1}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x21}}, 0x8) [ 345.983593][T20464] RSP: 002b:00007fef0850bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 345.992020][T20464] RAX: ffffffffffffffda RBX: 00007fef0850bc90 RCX: 0000000000458209 [ 346.000001][T20464] RDX: 00000000200001c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 346.007984][T20464] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 346.015971][T20464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef0850c6d4 [ 346.023958][T20464] R13: 00000000004be874 R14: 00000000004cf2a8 R15: 0000000000000005 09:05:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), 0x4) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1000400000000000040000000000584c3d899e70554d17a938897c580000"], 0x10) 09:05:41 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xa0003, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x2, 0x1, 0x4000}}, 0x20) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x13f, 0x1}}, 0x20) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r5, r4) write$FUSE_DIRENTPLUS(r5, &(0x7f00000008c0)={0x10}, 0x10) 09:05:42 executing program 3 (fault-call:3 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:42 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4e22, @remote}}}, 0x88) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:42 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000280)=0x5c) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x900020, &(0x7f0000000300)={'trans=unix,', {[{@uname={'uname'}}, {@cache_loose='cache=loose'}, {@noextend='noextend'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$-'}}, {@subj_type={'subj_type', 0x3d, ':'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise='appraise'}, {@euid_eq={'euid', 0x3d, r4}}]}}) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:42 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000000), 0xfe, 0x0, 0x1}, 0x20) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000340)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r1}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) 09:05:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40400, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x1a}) 09:05:42 executing program 1: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$cont(0x3f, r0, 0x3, 0x8001) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0xf, 0x8, 0xf, 0xd, 0x6, 0x2, 0x6, 0xd4, 0x1}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x8) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x8504, 0x3, 0x3, 0x76]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r4, r3) sendto$inet(r4, &(0x7f0000000100)="0befe95ad482", 0x6, 0x8011, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0x10}, 0x10) 09:05:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:42 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x4000000000000, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x100000000002, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x0, 0x1f, 0x9, 0xffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 09:05:42 executing program 4: symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='./file1\x00') lgetxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0) 09:05:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4b62a3cbb4ead125, 0x0) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:42 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) accept4$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:42 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xc0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x1}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @rand_addr="857e5951d64da10c6c030c6d8dfb9dc2"}, r2}}, 0xfffffe7e) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e24, 0xfffffffffffffffa, @mcast1, 0x35b599cb}, r2}}, 0x38) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x60, 0x2) 09:05:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x6, 0x1f}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x800, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000240)={0x0, @dev={[], 0x1c}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000180)) write$FUSE_DIRENTPLUS(r3, &(0x7f00000004c0)={0x1e8, 0x0, 0x4, [{{0x3, 0x0, 0x101, 0x7, 0x0, 0x100, {0x1, 0x6, 0x8, 0x3, 0x4, 0x52, 0x0, 0x1, 0x0, 0x400, 0x0, r5, r7, 0xfffffffffffffffb, 0x7}}, {0x4, 0x3, 0xb, 0x6, '/dev/audio\x00'}}, {{0x6, 0x1, 0xfffffffffffffffb, 0x8001, 0x99, 0x7fffffff, {0x2, 0xb0ea, 0x0, 0x80, 0x5, 0x4, 0x8000, 0x4, 0x8, 0x7, 0x401, r6, r7, 0x7ff, 0xffffffffffffffef}}, {0x4, 0x1, 0x0, 0x4}}, {{0x2, 0x3, 0x2, 0xfff, 0x7, 0x8, {0x2, 0x9, 0x1ff, 0xfffffffffffffffd, 0x8, 0xbd56, 0x4, 0x8001, 0x2, 0x3, 0x4, r4, r7, 0xfff, 0xb1}}, {0x0, 0x10001}}]}, 0x1e8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x3d, "cc381e8256ff01fcc26c827723d9d86beacda8fcac2ae5fed2800bd4412b9c076e55cdfa5a55e5c52fc92169a509c5220d69c5ca88787cf80cde1e9406"}, &(0x7f0000000280)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000740)={r8, 0x7c, "9e22c65bfde531775a4b68b3b2ecbf9a3f2d24b049cf09e4c9047d07eaea0a7d69f37cc2b7c427aeeb28759d4cfe1dd531344bb9b4f569bd75a5af4406d7d8e557758b074d4e26ade4d5f929410a6183f9615180f2bf7723fed3b6815b7eaf94b1058f4ff32f3f2839907f9f030c88946abcda60af670cd2acb8ee0d"}, &(0x7f0000000440)=0x84) r9 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{0x0, 0x5, 0x10000000200, 0x7, 'syz0\x00', 0x1000}, 0x2, 0x8, 0x100000001, r9, 0x0, 0x20, 'syz1\x00', &(0x7f0000000280), 0x0, [], [0xfff, 0x6, 0x0, 0x80000001]}) 09:05:42 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000100)={0x3, 0xffffffff}) pread64(r0, &(0x7f0000000000)=""/56, 0x38, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)}, 0x10) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x2, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) [ 346.704096][T20752] Unknown ioctl 1074021065 09:05:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000), 0x0, 0x3f) r2 = accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) 09:05:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) [ 346.771199][T20752] Unknown ioctl -1055894249 [ 346.801287][T20752] Unknown ioctl 1074021065 09:05:42 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x800, &(0x7f0000000000)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:42 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x8007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) [ 346.857074][T20866] Unknown ioctl -1055894249 09:05:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x3, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x220080, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0x10}, 0x10) 09:05:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x2083bc7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:42 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x1, [0xffffffff]}, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x0) ftruncate(r2, 0x1000000) sendfile(r1, r2, &(0x7f00000000c0)=0xf10001, 0xeffffdef) 09:05:42 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x401, 0x3da2, 0xbc, 0x8bb8, 0x80}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000087f60c00397f1236a8fa16ba0123d80000faffffff0000000000000000f10b000000000000002f"], 0xb8) 09:05:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) fcntl$setstatus(r0, 0x4, 0x0) dup2(r2, r2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="6590063f000000000000000009000000310baafa0ec6b0caeed53ab3f9678697621d3fbb1a25684c41b00ad53f1d0cf4aeff711f94aefbd019b541c8e980f4a0bda037f95e8fe9801a13a25c63fcaf84eca2362b8cffe9a18518733e660a7b4bdb26740f37659a2edaaf67fc447e27ef78dbd5ea60"], 0x10) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1003, 0x80) 09:05:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000c71f600ca085d2e64619116617beaa2b993a9559888074bd820419ae23fddc0e51e6d2b5876df19a6c5bc465a0f1e9729e1b19028548ebfc9ae7532507668b3bb79315c2166ab9fc1e10322ea1a8"], 0x10) 09:05:42 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0xc8003) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000001c0)={0xffff, 0x4, 0x10001, 0x404}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 09:05:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x4, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000000140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'ip6tnl0\x00', 0x8}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10, 0x0, 0x4}, 0x10) 09:05:43 executing program 1: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x140202, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x6, 0x401) r4 = dup2(r3, r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="32f100000000007124591a8900000000"], 0x10) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000100)=0x4) 09:05:43 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="27000000000000000400000000000000ee98eaccf26644a6f191afa87a4afe388fb52cd72202221d2863b787a1854e9cd0ac4eec3c24e46750a5fa1a5b1444f462f4c746ef38e0d2b6b6abbc79709c053b7a3e3dd08ec51a7567ef76a31b58d2f95c2847ec88212f498159a6030facaaa9a13bf13beff9fb5bacfb4b6f44ca72451cba75ef3e8f4b8b3ae3cd1453dde72018000000000000000000000000"], 0x10) 09:05:43 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000040)) io_setup(0x7b01, &(0x7f0000000080)) io_setup(0x3, &(0x7f00000000c0)) io_setup(0x8001, &(0x7f0000000100)) io_setup(0x2, &(0x7f0000000140)) io_setup(0x8, &(0x7f0000000180)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 09:05:43 executing program 4: r0 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x5, 0x101000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xa4, "fa1b4d55185606f3b1b7d359729505b2e9526f2e537137a9d946b101c16b54f4824462b09339be629eadc64c836bacb5df3ed55f0a522c80c96500c540f245eb8f95dcfef9898fd98c7ddf9672eb5c3dc660c114d3b82fa4a01c5ab2c9c9e87390edb0cbccd77e0a8bdc7fbe739a25971d9f7570e6e2b7b5f1b74df7e2a9d3ddd9d9418c4666c4b871ce1cc42ff1e574d33100bfc30fd472a41dfb83923220b8014a29b7"}, &(0x7f0000000340)=0xac) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x70, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xb3e, @remote, 0x8}, @in6={0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, [], 0x11}, 0x3cf}, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast2}, 0x1f}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={r2, 0x3, 0x0, 0x326a, 0x1f, 0xfd, 0x3e9fdb90, 0x92, {r3, @in={{0x2, 0x4e24, @empty}}, 0x9, 0xd46, 0xfff, 0x6df, 0x5}}, &(0x7f0000000580)=0xb0) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getpeername$netrom(r4, &(0x7f0000000180)={{0x3, @rose}, [@null, @default, @null, @bcast, @null, @default, @rose, @rose]}, &(0x7f0000000100)=0x48) pipe(&(0x7f0000000480)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}}, 0x0) semget$private(0x0, 0x4, 0x10) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) r5 = semget$private(0x0, 0x0, 0x120) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0xa0]) 09:05:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x1, {{0x2, 0x4e21, @remote}}}, 0x88) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0xfffffffffffffcbe, 0x6}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x6, 0x5, 0x6, 0x40}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x264a, 0x101, 0x200, 0x814, 0x20fb0000000, 0x1e7, 0x5, {r3, @in6={{0xa, 0x4e24, 0x10000, @remote, 0x6}}, 0x1, 0x7, 0x9, 0x5, 0x97}}, &(0x7f0000000280)=0xb0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x6, @remote}, 0x18, {0x2, 0x4e20, @multicast1}, 'bpq0\x00'}) dup2(r5, r4) write$FUSE_DIRENTPLUS(r5, &(0x7f00000008c0)={0x10}, 0x10) 09:05:43 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 09:05:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r2) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000fcffffff04000000be89fe50aae8435385d4a5721d9b2a0ff32bda3eb04c21a3bfc37191a24d0ec782c007b7a5a23f673f073a0c50456ed657b164d023c8bca81be9d8b6c71f202d5d3a95e4ac09a36715eb921a"], 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x3f8, 0xf0, 0x2c0, 0x2c0, 0x2c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f0000000100), {[{{@ip={@remote, @multicast2, 0xffffffff, 0xff, 'veth1_to_bond\x00', 'bond0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x0, @multicast1, 0x4e24}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x803}}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x7fff}}}, {{@ip={@local, @local, 0xff000000, 0xff0000ff, 'nr0\x00', 'yam0\x00', {0xff}, {}, 0x37, 0x3, 0x50}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x7ff, 0x4, 0x2, 0x2}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x3, 0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xcaa, 0x1}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'ipddp0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x89, 0x3, 0x10}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x300, 0x0) 09:05:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x6, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 09:05:43 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r1, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) ftruncate(r1, 0xa00002) sendfile(r1, r1, &(0x7f0000000040), 0xff8) mq_unlink(&(0x7f0000000000)='\x88])+\x00') syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b80000000000000004000000000000000000000000000000000000080000000000000000000000000000000000008000000000000000000000000000220000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000e8fcc9727c71700a4df9690998b873f0df7b8a4bb033085877f62687d24e0d73676bccb465e88db679237844f9d4c53a7f8a59b96a49e6fc10f40003ae09e19adbf62c85ca42d40eb000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:33:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100140206, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x301000, 0x0) dup2(r1, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="100000ffffffff0000000000000000004591b1339179b2f695c82a8b92b972ce28aa7ab2618c925f90"], 0x10) 03:33:20 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=0x0) r3 = getuid() write$P9_RSTATu(r0, &(0x7f0000000300)={0x7d, 0x7d, 0x1, {{0x0, 0x55, 0x1, 0x1, {0x1, 0x1, 0x7}, 0x41200000, 0x1, 0xedf, 0x0, 0x0, '', 0x21, 'cpuset[r\xa7security[mime_typebdev-!', 0x0, '', 0x1, ']'}, 0x13, '/dev/snd/controlC#\x00', r1, r2, r3}}, 0x7d) r4 = syz_open_dev$media(0x0, 0x5, 0x800) io_setup(0x6, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=0x4) io_setup(0x5, &(0x7f00000003c0)) io_setup(0x8000, &(0x7f0000000400)=0x0) io_cancel(r5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$FUSE_GETXATTR(r7, &(0x7f0000000280)={0x18, 0xfffffffffffffffe, 0x6, {0x5}}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000028c71301636fdc53b88afd00000000000000000000000000000000000000000000000000000004000000000000000000000000000000090000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ae020000000000002f6465762f617564696f000000000000"], 0xb8) 03:33:20 executing program 4: syz_open_dev$usb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x800, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0xfdb5, &(0x7f0000000040)}}], 0xd3, 0x1ffffffe) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='net/ip_vs_stats\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) sendfile(r1, r3, 0x0, 0xffff) ioctl$UI_DEV_CREATE(r3, 0x5501) 03:33:20 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x90180) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, [0xffffffffffffffe1, 0xfffffffffffffffd, 0x0, 0x8]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 03:33:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0xffffffffffffffff) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) dup2(r2, r1) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@initdev, @dev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', r3}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0x10}, 0x10) 03:33:20 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x80800) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={r2, @local, @rand_addr=0x1}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x5084f74d, {}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0xfd00, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x80000000) geteuid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0x10) mprotect(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x2) fallocate(r3, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000000200), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r4 = socket$inet6(0xa, 0x1, 0x51b) ioctl(r4, 0x8912, &(0x7f0000000680)="0a5cc80700315f85715070") r5 = socket(0x40000000002, 0x3, 0x67) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000006c0)={'nat\x00'}, &(0x7f00000002c0)=0x78) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000580)={0x0, @speck128}) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000000800)}, 0x8804) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="1cf01a5ebaf2cb2d66dd1480b2e71cfe918eb617977075516d792314fa3975efc7932fa0107380e5d68f6d1071f314a0d2c422cbb831fbff703a51d1423b182f57cdcad3a23f82960de169ffd729ab12095b6d1703ab6f8cc256f4abb9a18e2160de9a6f826bcef10a6c7e543a3fc44d0df55ef09c5f78a339755f2c3f279b5532847ec155352216c6228af460ed67f436feb16cc96cad61b81ee3347762c53a62c6006fc0b509ef96ec2f4d7d30", 0xae}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe42, 0x10000) sendto$unix(r5, &(0x7f0000000500)="3364866312265acaf3477f0cd2dcc881e9fab80a9f03a300be66facca570512e91acf99ab73c1f1440ca990e808e71cba688dd02ae25c6f30cec8750516e61085df34a0b052b4144245f5819ac4930999ed307ff4c3ac96ee1741e342f4603187f1d96afd2f9fc9b2c13d12e6b1e2a804964382c3bcc49eee39fa980", 0x7c, 0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x8, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:20 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b000070a800000000002f646576346d7c0706ee04c35f085eb42bda2f617564696f000019236d00"], 0xb8) [ 348.321183][T21395] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 03:33:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup(r2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x1000, 0x3, 0x2, 0x6, 0x401, 0x9, 0x400, 0x100000000, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x6}, &(0x7f0000000140)=0xc) dup2(r2, r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="100902fb2800000004000000000000df079838b7ac667b39c721df6fea"], 0x10) 03:33:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000400)=[{&(0x7f0000000300)="56ff43660457dc96fa39a7f7fad67f8f1550dc45517ebceb5770b8537316cc0f062a598d100acc7cd6263ddb7b511c37b557e8b3ae896adb7ff6751d0fb3c2c3daa6984390acaf2d66e999a79aa9ef1bc25fa80e463929f8719db68d1f79fb59d7b2d32fa2d06c776e345c3a12dda0e7c2fc617a4a838f2a026cf5e8cc766f22ac1de8ce532a734c62288bd493280ac98811bd3d41ff8eaa7f90998d7580b4fd98caa6bfa2770a65dc461ba12bf1265982dc0e14138246ef1bd4b83fa734b5d04a7ffdacad4010ad5aa116a0b3f90bd09178316fc7d3ff20c36ceb20a5e6fe894a30e53b00b01789c738e38a5ae2dffbf640fd4627", 0xf5, 0x81}, {&(0x7f0000000140)="3f86670c911d118d854cf27b05690fcd01fcf6bf78992807f28ff7d825a49e385cbcc8fccf5956e86ec6ec7c63d53336e0e7d4924f0c5ddea79863eb9860df", 0x3f, 0xffff}, {&(0x7f0000000200)="5530d95b5ab39775582b79b047bb9ac67387001ccaa0c5f847abff9b97402c70dfacbdf5920639650bac8d692b86253799960301eecf083b871b9a2388f3d9db1f8ae93d791f8195959b00e4b77db0831b99ebdf129679eba5e2d54a4707253dd5b7060028210e95257c0753f1c1a4ebb780ffcd1cf1fe8cdf96123e1b0d1ebeafaf36b7b436f8fcdf9ebe657de561586acc5478579ca95a213798e88cd098270e763d80f87dee7750104d43c5cfcad8209d286561453058676ab856f4db6d", 0xbf, 0x6}], 0x2000000, &(0x7f0000000180)='\x00') dup2(r2, r1) setxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x1) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000000000000000000000c856139f295f3a771dbd8c91ced26912c3f994ea8fd770859f9d2861a5fd848bbd60b3de27a1d77974c87bd9bbd60cfd715f2fc3b79ba2a483b557389abb06316eb2518c208b165124382bf6214c98faf375b21c0373"], 0x10) 03:33:21 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 03:33:21 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x80800) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={r2, @local, @rand_addr=0x1}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x5084f74d, {}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0xfd00, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x80000000) geteuid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0x10) mprotect(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x2) fallocate(r3, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000000200), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r4 = socket$inet6(0xa, 0x1, 0x51b) ioctl(r4, 0x8912, &(0x7f0000000680)="0a5cc80700315f85715070") r5 = socket(0x40000000002, 0x3, 0x67) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000006c0)={'nat\x00'}, &(0x7f00000002c0)=0x78) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000580)={0x0, @speck128}) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000000800)}, 0x8804) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="1cf01a5ebaf2cb2d66dd1480b2e71cfe918eb617977075516d792314fa3975efc7932fa0107380e5d68f6d1071f314a0d2c422cbb831fbff703a51d1423b182f57cdcad3a23f82960de169ffd729ab12095b6d1703ab6f8cc256f4abb9a18e2160de9a6f826bcef10a6c7e543a3fc44d0df55ef09c5f78a339755f2c3f279b5532847ec155352216c6228af460ed67f436feb16cc96cad61b81ee3347762c53a62c6006fc0b509ef96ec2f4d7d30", 0xae}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe42, 0x10000) sendto$unix(r5, &(0x7f0000000500)="3364866312265acaf3477f0cd2dcc881e9fab80a9f03a300be66facca570512e91acf99ab73c1f1440ca990e808e71cba688dd02ae25c6f30cec8750516e61085df34a0b052b4144245f5819ac4930999ed307ff4c3ac96ee1741e342f4603187f1d96afd2f9fc9b2c13d12e6b1e2a804964382c3bcc49eee39fa980", 0x7c, 0xffffffffffffffff, 0x0, 0x0) 03:33:21 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:33:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x9, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x80800) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={r2, @local, @rand_addr=0x1}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x5084f74d, {}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0xfd00, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x80000001, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r3 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x80000000) geteuid() getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000480)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @rand_addr, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x0, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0x10) mprotect(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x2) fallocate(r3, 0x0, 0xffffffff, 0x7) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000000200), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) r4 = socket$inet6(0xa, 0x1, 0x51b) ioctl(r4, 0x8912, &(0x7f0000000680)="0a5cc80700315f85715070") r5 = socket(0x40000000002, 0x3, 0x67) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000006c0)={'nat\x00'}, &(0x7f00000002c0)=0x78) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000580)={0x0, @speck128}) sendmsg$unix(r5, &(0x7f0000000840)={&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680), 0x0, &(0x7f0000000800)}, 0x8804) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="1cf01a5ebaf2cb2d66dd1480b2e71cfe918eb617977075516d792314fa3975efc7932fa0107380e5d68f6d1071f314a0d2c422cbb831fbff703a51d1423b182f57cdcad3a23f82960de169ffd729ab12095b6d1703ab6f8cc256f4abb9a18e2160de9a6f826bcef10a6c7e543a3fc44d0df55ef09c5f78a339755f2c3f279b5532847ec155352216c6228af460ed67f436feb16cc96cad61b81ee3347762c53a62c6006fc0b509ef96ec2f4d7d30", 0xae}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe42, 0x10000) sendto$unix(r5, &(0x7f0000000500)="3364866312265acaf3477f0cd2dcc881e9fab80a9f03a300be66facca570512e91acf99ab73c1f1440ca990e808e71cba688dd02ae25c6f30cec8750516e61085df34a0b052b4144245f5819ac4930999ed307ff4c3ac96ee1741e342f4603187f1d96afd2f9fc9b2c13d12e6b1e2a804964382c3bcc49eee39fa980", 0x7c, 0xffffffffffffffff, 0x0, 0x0) 03:33:21 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x3, 0x3, 0x9, 0x2, 0x7fff}, 0x0, 0x400}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000e000000000000002f6465762f617564696f000000000000"], 0xb8) 03:33:21 executing program 4: syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xffffffffffffff47) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8008, &(0x7f00000000c0)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000), 0x4) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x110, 0x4) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="16cb994b6b01b6b89b443a44784eb3a34f583819bc6f06bb344bfa312fd20dff049848fefde2825457449ad5934d09c42adfbae44f82805b1763b391b8073ef170c1ff7278e6c408789245e9077064f34c7b438e11888156fa33cc72646c54db7b1e82f2242c7e96c8181e0000000000000000b67a4480988dd7497528b33e7642fbcd7b66f431e905730000"], 0x91) recvfrom(r4, 0x0, 0xffffffffffffff7a, 0x2020, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x2) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) times(&(0x7f0000000040)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2b) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xd0}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) 03:33:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0xa, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x400) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @multicast1}, &(0x7f0000000080)=0xc) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2, 0x4e22, 0x1f, 0x4e24, 0x1ec, 0x2, 0xa0, 0x80, 0x7f, r2, r3}, {0x7, 0x2, 0x5, 0x1, 0x9, 0x9b, 0x2, 0x20}, {0x6, 0x80000000000000, 0x7a}, 0x5, 0x6e6bb8, 0x0, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d4, 0x7f}, 0x2, @in=@broadcast, 0x3502, 0x1, 0x3, 0x7, 0x20400, 0x9, 0xd58}}, 0xe8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r5, r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="10fbd6002000000004ea00000000000000"], 0x10) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)) 03:33:21 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0x34) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) prctl$PR_SVE_SET_VL(0x32, 0x3b72a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 03:33:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x4000}) 03:33:21 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x80, {0x14, 0x0, 0x8}, 0x8, r2, r3, 0xa0c, 0x400, 0xa000000000000, 0x9, 0x800, 0xfa0, 0x101, 0x5, 0x80, 0x800, 0x494, 0xffffffffffffff81, 0xffffffff7fffffff, 0x4, 0xffffffff}}, 0xa0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:33:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x2) 03:33:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xb7) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105240, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000080)) close(r0) 03:33:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0xb, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:21 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:33:21 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 03:33:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x1, 0x2, [0x0, 0x1ff]}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x65b086ddac398b99, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000040000, 0x4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x6004, &(0x7f0000000180)='\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000600)=""/114, 0x72}], 0x1, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) [ 349.449165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 349.455117][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 349.689161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 349.695054][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 349.769088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 349.775003][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 350.169194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.175065][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 351.129116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 351.134959][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:33:24 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b80000000000000004000000000000000000000000001838b89bfddb5f000000000000000081a30b9b7d255b09000000000000000000000000000000001e95a2820000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:33:24 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0xadeb, 0x4, 0x9}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0xc94]}) 03:33:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0xf, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) 03:33:24 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x80000) mq_timedsend(r2, &(0x7f0000000240)="8379c7b29c0a5ccd0fb7fd908c7472f4a91d5930f7b53dc14c3befb96b64be0770184c58fbd84d40bfb97965ff97f39dc931ff4befe9aa08d8e4760715bfec0b27bc3a8c66fbf54fef576151cd1c5b33a76a5ccd53d48f210534a146c3f53045b10f82ead582bf29", 0x68, 0x9, &(0x7f00000001c0)={0x77359400}) 03:33:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") unshare(0x400) r1 = socket(0x15, 0x80005, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x58) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 03:33:24 executing program 5: r0 = memfd_create(&(0x7f0000000340)='keyringpp\x840vboxnet0B\x00\xcd\xc2\xdczm\xc4\x87\xebD@\xfc\x14\\\xb2\xa8\xa41l{\xc8\x9a\xae\xf5\xf9>\xd7\xcd>\xdd\xfd\xe28u\x18\xc8N\x85\x8a\xae\x9b\x12\xce\xa9\xac&\xf3}\xc20\xa5\xf2\xedP_\xa1\xf6l\x9d\x8c\xef\n\x1f\x9c\xf6\x15\x05\xf6\xcf\x15\x1eDD{B\xa4\xea\xf6&\xb9]\x8ee\a\xd8\x14XK\xf7\xed\xbd\x96\xff\xb0\xd14S]\x97w\x92\xb9\x8f\xdbx`\xb3\xfc\f\xeaR\xedC\xd90=\x85\xed\xc1\xe1\xcdq?\x95\xeeb\x8a\xea\xf5\x98d\x8c\xeb\r\x0f\x1f\xb0\xae\r\xb4%\x9d\n\xb5t\xe3w\xd4\xba\x7f\xae\xf4\xbe\xcd\xe2\x0fus\x97*\x86@\x91\xc3@0M\xdc\x14F\xd8\x86a2\xc7\xc1\x06\xff\xb7\xa3\xe6l\xfcq\x04M}{\xc5\xcb\x1d\"k\xf1g\xfc\x9b\x01\x0f>\xc9\x01\xa9^\xf5\xf6\xaf\xa0\xbe\xbf)\xbd\xed\xbb\x840xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x62, @time}) 03:33:24 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:24 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, {}, 0x0, 0xffffffffffffff81}, 0xe) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0xfff, 0x5, 0x6, 0x9f1]}, 0xc) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:33:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x10, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:24 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000040)}, 0x10) 03:33:24 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 03:33:24 executing program 5: syz_execute_func(&(0x7f0000000080)="ba42440fe4f564ff0941c342c4c27d794e0066420fe27fe3e30f11103e66410f3a0ff4038c4219") clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mknod(&(0x7f00000003c0)='./file0\x00', 0x1042, 0x0) pipe(0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x400003102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) poll(0x0, 0x0, 0x8) 03:33:24 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0x7fffffff, 0x10000}, @window={0x3, 0x4bc8, 0x1}, @mss={0x2, 0xa1c}], 0x4) r2 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8000000000, 0x12) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) signalfd4(r0, &(0x7f0000000100), 0x8, 0x800) r4 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x12, "c4a4e784960c769b26934eb1abe711343efe"}, &(0x7f0000000180)=0x1a) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1, 0xfffffffffffff801, 0x2, 0xd615, 0x8}, 0x14) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b000002000000002f6465762f617564696f000000000000"], 0xb8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) prctl$PR_SVE_GET_VL(0x33, 0x1a35e) 03:33:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:33:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x11, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:24 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x2, 0x6}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f0000001980)=0xe8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/mISDNtimer\x00', 0x189003, 0x0) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x7, &(0x7f00000005c0)=[{&(0x7f00000000c0)="aa68da792eb0712979cf33ff1c71f3e6d7422fe86608870eff39b7b344dd89f271a9647ca4b09633f431a4b0f40289a45184e275cbd02317a97fac8342267d080b31fcb683e7ea31cea8b6a877318435f3f542acda21ab703eade190e2a4d7c1933fbcd1f5999203554b964c4fa7cd6679350f4cfaf102db647a262bb7061fb1d3dc1c7ad126557d1fc06ed5ebc21d79b1f286b868bd6dc863a54b0cef2d7c18300bcddb2b0c18ba26e4aba406e47df30d6ca0d35a5a39ff1d", 0xb9, 0x401}, {&(0x7f0000000180)="9f06f71b2f86a83a880a1686ab2f251de8ef78052c16c3f74edd58d613485ef19d", 0x21, 0x101}, {&(0x7f0000000300)="9d8dc2e32ac0ad8ad6aa039c62e14608c7a962c60ac607ddadbc720460c7e9620f4b01ab6816a149283cdf5b956873038c3373c495d58e46bae82a023ca387fb063ead956f47e614159df3218f5f0b83e6d00c4e5b357fc40b7d180509b57d23f6998102462cc4b471ae5208b656f4bfc2064a94035f4248b8aa1c3f7cd4070bc29f25b4d9232a0fe39436446000063fd01fb9d14920945fc0a23c9ef394844734590dd7632d7a3bb045ea719d86fb9673d42b04c1a0b6e733a574fb0817f6435dd4a6d07e8756", 0xc7, 0x7}, {&(0x7f00000004c0)="73772d8c7c5a169f3013eede4f0fc6aa1ab1f452ac8e4275d1bac9536dc60e36f07c7087451668b1c67fbcdbb0896ea0091381405ba955d58dc3574a99597e0ef769c6361c3acc47ce357200075632688a05581fe498a956bf87a2867176e04737cbc67255102cabd76bc29d47a97f07612709e65b83dcd294de0fac44e7edcaf2c9d0fa54340ea7f474a5e521cde6ba37b6f175d79b1f022f5df735298fff0b270f9f02532c6b21a6f265e2d7ccd7e9561031b6ec22d73247a8513fb81b7933874be84c91975d3d", 0xc8, 0x1}, {&(0x7f0000000200)="fb4159c40b562b95602fe4b9e51d9f17c66db16218095fe4fd229b77b91a532e72c8f70a1efa044c9009df15b2a9e9a8d8e73595390f3b584c75d432313e6e15c31ffaf2f68f26ec2b04f0bab389edd6d1b81303806b5eefa3e01fd18c867c0cdb3e8e00f609ef6a2e3c2aa4142eb9adf940fd598cb422b0b8d06f04c03d29b2fe4d432a2aa76c1b288facff246ebb2fc93744f539ba485cb7a2d20d19b168514d5272a17a2e159b5070efb30aa1cee4", 0xb0, 0x7}, {&(0x7f0000000400)="9690c6bc4341aa1892905793dd7ef4bb32ca1fa98184ae2cc2fe60543ce16126e0dc1969398a56e96e365aa1adbb430c6bcf2f453d6c344bede344a57a81f7657902917b42f4bf002e8e8a96e201df4451b56cb29c5789818897cb4ea71f40d5f0a0de48e9c29a9bc20d60efb3a945cd1455ac75a32d0f0e12", 0x79, 0xba9}, {&(0x7f0000000980)="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", 0x1000, 0x8}], 0x8, &(0x7f0000001a80)={[{@nls={'nls', 0x3d, 'cp950'}}, {@force='force'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r5}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, '/dev/audio\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/controlC#\x00'}}, {@uid_eq={'uid', 0x3d, r6}}]}) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:33:24 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000005fc0), 0x28e, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1880000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x6000) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0x35a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r5}, 0x2c) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x8000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x9) sendmmsg(r7, &(0x7f00000002c0), 0x4cc, 0x20007ffc) preadv(r4, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/66, 0x42}, {&(0x7f00000004c0)=""/96, 0x60}, {&(0x7f0000000600)=""/176, 0xb0}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r6, &(0x7f0000000040)}, 0x10) 03:33:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") listen(r0, 0x5) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, 0x0}, 0x0) 03:33:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) r2 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) r7 = getuid() fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r4, 0x10, &(0x7f0000000200)={0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getgroups(0x8, &(0x7f0000000300)=[0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xffffffffffffffff]) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) r14 = getegid() sendmsg$netlink(r6, &(0x7f0000000440)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000006040)=ANY=[@ANYBLOB="c02400002100000128bd7000fedbdf2590000800cb28540adf67e6719c42461dc00bdadcbca9916d3dfd76b16f99b31e61a9418d583218f885bc86796e226185f23d4aa71451c1aa435a877388887fe755cbcbe83873ad435a69f0100143c53f724ad0897992e6f5e6d7be25db6c68480a8e2400170037d615a7b2cc0cb5c834a07a56b37963d85452b2e1742be034966ae98e00000008006c00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x24c0}, {&(0x7f0000002e40)={0x127c, 0x33, 0x100, 0x70bd25, 0x25dfdbff, "", [@generic="ad40f656a3c22f113963716c1eba722e5a6d313ba81116b9e2151747a11a50b6dd23dc3d287f7dc2b92d53e58c564330538e7b35321c160d9c87acda43658ecc687da14d45d995381e95f16f051790a7bfd234f0db4ebe8c2891183f564faafebcfe73705037c531628c5d76a58ded744c2455d0c619788d8d8417c06cee229fd931422f8dded7b05455c09d61a77fc733874774d68c183e60cbc7c9112bfa502c", @generic="17171f6c83a83eb1a61c0b13adec664464526dbea7f007e0d4df1fbf7b10fa229045b8674578b27d1befd0a404ebb01f83d6bb5690f8745573dfb0d01483b40c094aeff9956c2c87ef0787586a8206ba5cd5d4600e58cf9ebdc985009b7824eb03230fd93cc2897445f8c5c8ca0f14fac7cb6a1386defdfbbd5326e850", @nested={0x138, 0x72, [@typed={0x8, 0x94, @fd=r1}, @typed={0x8, 0x13, @uid=r8}, @generic="859dd994402a12025afd5697d7074758870e481641a13899452bef4218e0296e993f45f72ac48b1372af90db6b013e6cb996b23d1d0969e5f5c58a49af4986cf9782b63adfd415de45d67a52ee84b470502c344addd6ae20e45d998efe2011242fdf6fb86f0dff5580526cae59f99c9e43f29f93fe31a73bbb882251e9dae8f683ee85407543ab188e9ccfd102473263dcec006e46913db304b07e127f938b0654498e09d800fb4608d7351b0c5715ed8251c81e82d27623104fc3238463e7cdd1b7f457fc34fe0f78be5f66177a248ca8d5317db63392ea23745f5fafad1ce70c23a50e02294e8c926cd1f81ad251845c437b430617ba1f", @typed={0xc, 0x6e, @u64=0x1ee}, @typed={0xc, 0x70, @u64=0x5}, @generic="9361c804f6c2b987e27c7951e9b34e5227410789"]}, @nested={0x4, 0xd}, @generic="d52bdde3c1f75881", @generic="2d7350257ff2924d3624f2af159cffff588724aeaa16636b6bc2f39b451710fe693bb9246cad0deeb2ce546fbb22ebdde228c045c587e2dec925fe878a138f16f464c54a20c9490c3a1155c90a965d1fc870032182c8e3f1906f64eeb22b0f7347e31d1d56f1647c46db91be855681a85f87f0181ab28c8073cdb27420002f3d2e63e624e3e1b73fca045943068d4cc7ee7a8c7ab776bd3711e43369f531acc0e19c3a0a4d40b36dd3b4238cccb820a65a1a0b743e8627d8fe800adad8ddc6c681fe62ed8e7f5e1bdb45b81c42eafa2fa42a42f520ebc2cc3c20c01a32c46441f3cbb3af56559a715fc3c249e9a1d74fc663f08c3978024566880f81f7efd3b0759d32762b65a885d90edd04bbf132ad6651c012abf6a6d8c447a9eb34b276944082992708a86dfb4273094b23536026400a73536a989d4f0792f7c209fb68e308a6b4d3b87418be4acb636a4020c5cd34fdcdaa40e65393bb839825608d4c97fe9c85e166584236e01424d43fde605a501e913e02b38bf37b66edb6ee64c539186d8746996d1f3ad96c6a50b713a0c33c600b22e06c040929a5ec4fc7f5138d3d3125a40853468f3a58169645e1311b0773daee0efebfc5ed663f29e116472a7f5b15517c15bb43e45595f85d2aa5e548547486fdde4381a03e2d86eefade522bd829526edf4a29e4b6454dc307f6e2f8275d9dd2cbb4f9210cdfaa560c47e552efb27d1ea54afb6039da93dd3b6a17b68d5851c5ef714f802cccc763727171ed3861d298b5aa5253e6b4a5856691477f256fdb3b9b0935ff3935c3d305d0d9782abdc2a591daa4d9c18d71e7805e8a185bebbca9e452fc804223e4064c46f34185234d9dd3338ab7ad32adc25f8ca51f234a30f8cac3aef8d3b069ec50ddc9950a42feec0fa23dc1cfd6a9d8d942a862d8b34cce7c4be95fd7f3f4644729942701ab2beb2a783e1a7f6ef6e52415dbfd4152a86dec45d6fe9e47c9c2555479fe249130e0737b05a17e25c57f62bfa6b27073300408952f1097c9b6f98d67d4492f785868b51e0e85f98234133bc1cccdb752e0c92c165c0d17203a7e6fc7d87f3331aade863887ae4499ac6277b3a1005e63f004467e487b6a14b271a401ec15197ae6d1230b4c9539490fb25ea1159c2f2e82bd5b82e6721301e66aeaa8841233d4c630d60d69f9c1831e64aa55963d69b6f63ba8d7412de8438461bb30d3284bd1162251692b0a5d46dfd639faad440297cf4443abf8d26199666039f3cd27b84b53d966c60621021fd3bd4c761dd3095dad97895fa9cfb992dfa440bd4a4f17ab6bc1e63a96b4c341341529155e92f4aceb113fbd34c1b2a5ce8332bc14788322b900b02325ea227287a722afa598906393e46b66f66b8e341329459cd71339b60d9d24436e9c7ae781c99950a435545259c46cbe47b37148492927c9fffef25c5b340fbb51b524ae661cb08bce4c59213fa89e4b25eeee6e7ac3a9a233fc16afe005bf89639e116272dd178a4a418a9f77c414a5ab8bc2bf380991b0cdeec5819c610885669db760c4ee61cca0ac6fd0a791e4cf2e75d86bd92bac90a885efe6d59c85a3377b077c21c0ccd2e661809d970693a0ea58d725a95147aae7e6a6d53085ee95fede86071ecdf18073f2979487eee39bc54057c5f2d98d25ef4790cc033e712e386b5c2b7a5f02cbd6a53ad3554f13e3bad8d7a748815c1c56e4b54249be45ca75e1f460682e10d7db37c3b31b84c45e1bf99b8c5ed784eb44b0db8e4fa386a828c542370ded6bedffafc6868589e90da245906f4bc9f32d77a6e0803e833dabd8c721682e6e3e02c640519bc9487ae5baeffded70bb712989f3dd8a02b224a3eda414b3eddd824f54a37046b4e89bef9afa68c75bff45ebd379b9e2082ce2232aa40df6d373cb5d7d8541a64ac87864937dbef2de34b5394bd3dd1aaf2dca6c7e730e85ce51df4e9006e9dfea1b1bce1ea18fbaedc6c1b9e700db666ebb11e03524a2e6d707f35d46171428938c07d40812e06d7209757693a6c75ec45dfc4c9487c3762a9d2f236258fd8707ab16b25b21afe18d358fd6f3217651f6a6b93fee181eb67d817c0961597c84868d6a3d9cd67b5bc0a121deff9483168c814acb801d186e49aa4ea1bf4e0e8825d8023077e25821dc4daab63c165b32486cc480c26587c48475de52bf6c52cb927d40716d8b6cf0ec612a527b4a630a9c796ba0d0dd628495926a16c21a56706e6d191a0f7cd828dd337a5a638e5a7ee4d82c0a8b15e2ea91f44fe92127cb13a775eb2ad69bed5720fb3cca5c70e19ddb5a84c919b72b250e8ebf8485a5f51dc34d79f05a6ce2884977f3124aa6b5c9e5aaa47e6d3004019704500bfa71a0532b8360bc6bf8e3daef69b8c04b0c99b0899b126d72c073a45bd3d5162202776ff0a92d2bc16df39da1d62ed7a8523ed2248d4f4d2d629dd0a15907763773be0e578a47a398c53ec808c52b64ef072ead0a7423691c23de9a28b12294d196280a05701c100bd8e30b48d6d03de9501a11c796073b9cd40ed281de19805b77eab0815c4f7f589a0dcf46e092353675ae9c8ad748b65361ebd51efd38068a3efd7e8f60d887996b69c15c197eafc79da8a514f51642e051b4e615492079092a15df07cee6ce501b842eb38422c78f01a70996e420c4f2f8031bc55ffd030bad0caae555403eb916a59ce080b84977632ff7d0e7f167956e20cf66ccc748b6bbed6ab280993f78d6f75f01dcf02385b454a8800ea68a6178efb74dbac636458cb2e4790200a5eb30b251d9100d20ea001d279dba15ab9ecff3c1ee8024bfdd923129ee3f5b6eefbd1c8b976313ef7713da2dc9686a7dc73bab16d0fb22727b0430c13911492b7bfc9050a39e28b53b99f4ed6801bcb197ce4e0da878f93395e7d821bddd49625c4bb69b0711b50ca2d2c8e0573a9b3d9777518b51c2eaf38eb2fa342af515e58dcebcac7640db389a0e548affda2c58a5b2dab26caabb3dfdd525cd7e16258e2538739034c0ff5d90655c5d4ccb4ea834d7e008a392d6e234e2cd3987d6558d4f5fe9ef7cefb2794d6eb8a82351f6101b1b9b3a2f4b977a63cdd39e65ea0101e36e97fd02e0262ad71139d243de8a24545bc0885451c5114b50c7fb1d6b387d254ecf0fb28a8423a7272a8d3efdcb195d1756c1e0999593c5df1ee07417ab6f1880583c38e2936f66935b17d392bec99ef3bfb48fe76f0e61176605b12a25d575ab159a7f88bc6e7e14b4b95d4c7fbbebeea1eb2478b44bb8b209e496952c7d1f8a6bf0e4d64fa285d4b9fcaf0d2a77c4f91c57f50f88ec8060e11f6b9ede3403d53f59507c26d9fbbd5f04a94d5e31086b68e55d98d5adcfc31859fb1cea373088bd22893ce8a48e17e7ec648552c162330af56f4d415bd47a16ddb99b4aa74242a726e936c70d57e27f5711cf8da8ee3b3408ecb5f63db74bec4709fcd9907c84ddf754adfb5e170c73e8937b2ce1539754ad46235a3054ecf141a129adda40d889740d77185512f35a5de03d2f2a76296a956fb08d8fd0b3d110e37e3b853003b4364299e20cf6f5d7eec8667e40de3850bf09ff2b4a2b53fd0e976dd2379f9553c090800bf4c2b5bfe61358b4874e6463635446bf02fb30f82ebb5df16bec9e407afc31999e4bd5d9a69fab41cb4d124b5a7108952d35b7fea73c0b7b1935e184b3bb09feffff5a8eaa88d61ba56faeec0f5473efa2dd2b7f9916f279d92e98bc0b84864d1046c3b0815ab7ce82067f95659a836f7e8b6639a5c9aee7ae0d19cf12062459e32e9c5b6d1855d9e21e94cdf8e8d32a56bf5217a94d26b51a76abe7aa48c8ed904b0bd6ec2235547e42563749a20febf8343dd9f1feb809511ac627886d4680ea96b14a3d0defd2e2b220e12d06e3594d38df2ce13435cb7f895f19e7852129dafe885bf561d98f57a1cc3ee382d91446daca933cd9c96761ae7635539f2f2a025b652641ed22912692601ea711569157458ab1dd524cd5dad61e7416edd969662925be372b87764e834260211392c45f7e6ab64ebd4b1b594ca54f843c0478fbc090ced23afad4190df495149b2a175f1666603fd4aeac915185496b9811e16eb692e5dce596ae65c8cf84e08439d106c350a846178734ee0c716f7a3cea26f5534562e8b2f426aca82a70c5218e10da440fbcc60cf68adcb85ded1e750eac25141f56c1f7ab57bd85df9145431d76bc546464d1090c6d8506ff79c0868bb479101c293e76517a6c8524bb97d5afa25564ac8e03d8589715245946ca63cef1b12fb8373db1c1debabbbe67069c7b5ee125ead064f13a690bdb7ec492917e372c524db226b705abbbf902237c77f9607eef4ca6c76a9afdd2ff1cd52b1f2aaca44a9fe8921b82774c0341b3e3c77a693919fb35a1b5670ca7523779a2bbf69ebb5455597eb53c8bfa929d655884684ea34fbe9f653f0c3174af60b52694a71ed915d64d74978935faf5b4e99db15713dc9eafc0a139d6019b04084a81111ed71ddb9df648f25852820058cce182d2175bac51ed9ff32d0d5b8d2cde2cce1f8e1035d2b9449c289cfa8ba46c429264b18a5193b86db37085865641eb15cb912ebd8004e5bf88d78e73049c651444f60a3fe04ac1f3ed5eff88855436c2bb2f92d0f1c01aa759b23bb5a9f2522e9d8d25b1034762856466db5566a268b0cf8a0baaecfbd7f29a46b9ac6113c766a27d776c692c3eb1dfc157c581218b91c3f7e4f630398ab4b73d7caff2e049dc0f7877e58477811cc8e60101ab1d283905f15567c275f1977b44bead73901afc7ccf3d7886e79232481c9e3a70c7f00488ae6aaa0976ff8c88d133c4d5cd08c77c26fe6464c6b39fc16d630b1969cbd6771abd3c015de7ec28b02584de652a5e13d67d568792ecb4940eb29f2850dd09e5fbcdd8ec7a232899c8471b5023417956e57ea47695118ef248b9ed7fd410055373d2681d366f9e0362d54d56db216f4e9d97f10d294bfc46bdc59be57416a2fe6aeb5d85433374e7130aa7b2f61a5851cc09d6dfad86269de38ef3129611c73d4ab339d05a095930bc246135f7e8accd45475f0e51cce0fe07ccc0acdbd44ef256f78788936bb502592ddcea3db86040654d49a2be3d630c4e52a10938abadaa002aa79dbbb533dea6a0bcbf1323c5b464d27a5292d9e3d1e4509a2c3722ab7ab3fc90c5380e4937f3d7973d944467fee82d5af7af3e6a2685a332e0aaf927f129ca48044c59ce2138b9674ccd4d9251e154d73837fe9c53355778bb5807e555b292d2ace010a1f11f08443c8da96171349f1d968bdf6235cb3df67b0549d62175bf947bc40aa8182743aea26872c15c664f7117ded8a87504fdd956a05d338d26ba738f03723e54993fc6f4b155997416c597af72e227a1f56e98d49022e877dfdc3ea899f2234e3add1a987fd9a32ceed505cc89c7bccab5427ba3200db43dfc02c764f31155b88d7ad05c11ef1844fc95d7d24987581302e2b23120007390d2353e09bd6696154704fc935b67483bd0b12defff40199abafc075f28c3f250bf0ebe762a84732a8b90b2adf39ec428f12065bc04eaed0b8fb859b8c825085fe2de5d938163f5a7a33595132a8709a0690e4ebf856821b5233a648575065283a749164c29ce79e111e3cb08d65484b4922a18b93e1358bd8f5a790c2c91320fdcdfa89396176734689012c484cdc6fc1fd9235b2e63cb157b335d186d3fe9dc1aa351cfffca01589b89dc3e81ff700a0b7d42057bb8064c07386717d1ba3b9541eeb111", @typed={0x8, 0x48, @u32=0x2}, @generic]}, 0x127c}, {&(0x7f00000004c0)={0x394, 0x3e, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0x35}, @nested={0x144, 0x37, [@typed={0x8, 0x2, @fd=r5}, @generic="037aa43b1792a523a493ef098288f85971d5be1c31fe48d49138971f1c0f430b837bf64b3c8d8242911b1f79a8f928b9ed47386ca3977029656dac2c811cd0e47044fa453ecebed73109ca11ab0a74b947c756e0f978a83bbab655229ba8260c9f5e31ab0f032b82cf37b122f051c8884a4c9526980d5194901b3d36d657d1013eedd79b71bdbeabbfefc668dd6fb4fd8504cee3802a650091cb31f2db88ce9b1d36b0134534466654239cdd2923151ca926554c74f4c1322c70345f853cf135d0482ce08cc505eb2bed8d8aff17de62400cb0b6cac6606be19266716ed114e49dd01d", @generic="b3f91d830c477d1363ee44f151451d119a0d270448c6098dfc2d5f65dab77d25cb34f0301cd852afdeb3323d58bed4976c484f9368f4d60b50", @typed={0x14, 0x1e, @ipv6=@rand_addr="5f840f2098c310f5c6a84e7c9b868db1"}, @typed={0x8, 0x56, @u32=0x3ff}, @generic]}, @generic="67f9b749f6d89a35071201bbf800ab4b8d5301c45d40223b9b8b7ac41398c62d9a362aefe35903a2f0abc15716dff43cb593da05efdf603359f373fa9aca57bbc7a8e2226cae9b44c74c28fd152763d8d5b3a93f3368f631b8833814473f0456477d2f1a7b1b1b89ca1be74db49767366eda3881cf58a186f342084fdcf21b545969", @typed={0x8, 0x71, @u32}, @typed={0x10, 0x80, @str='/dev/audio\x00'}, @nested={0x1a0, 0x15, [@typed={0x4, 0x7c}, @generic="eeccd5a269f3f9d8dc29781d4976997393304302e7b46fac0cd7c3203a66b5ac7d1c985f4fea5c3011331bd4c42bb09085e1694ee67a4a5034ff78ab4239550b1b026b1eb5e7cc1152b0f0ebec98be94ea3de92353e1b9d8c52286e19d", @generic="7ebdda9a010b3e81f905bd63121df55c88f6ccd4229ae123dcd1b0152d752c71db45330bcb3b001007ae29fdcc46a8874f8a98c6a09f7bb79b3b2b0ca327613b6d7275d11639a8209c1d209d098939ac1131ec6ed85ab0f06511f6a6afdb297f479e5902cc093e065fef80ba705f19ddaa36160e803e2534c41d934641d449fc63bc51baafb3a52199", @generic="479fc0383439971579ee11410e09ba4cec4b9f2e00428d479f0629716214759091979fad1e21f845d6c97836c912f9c04a29025e787f5b319072b4878b6f18cfd0f1317c0de8fd2bc6c0582d44f5d0ecf13e86e9447effec5a2ef85eb423436afd885667a6292a6f667cf05a0d800f55c6a316e35f1e2d1a3f2b3468b77855c4395cc7f7f5c60d6d03f5e14ad1ae29e47b4cdd47698508590f811ef0447595c10bf31d7bee76cbc0bcc287f291887c"]}]}, 0x394}], 0x3, &(0x7f00000040c0)=[@rights={0x18, 0x1, 0x1, [r2, r6]}, @rights={0x30, 0x1, 0x1, [r2, r0, r3, r5, r2, r6, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r2, r3]}, @rights={0x38, 0x1, 0x1, [r5, r1, r3, r3, r0, r1, r5, r3, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0xe0, 0x4}, 0x80) 03:33:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:25 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f00000001c0)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 03:33:25 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440), &(0x7f00000004c0)=0x4) stat(0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000400)=0x1, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0xa) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x4, 0x1, 0xc8c4, 0x6, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000300)=""/211, &(0x7f0000000280)=0xd3) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000062f6b7030000000000000b0000764a20e43fbae780b11e69bd06e38600000000212f6465762f617564696f00000000000017599e64f20e03e42f74d015f5a21a6ca9e773c00fd084a61f55e519f7a4afb0212e1719de05a0aff127346403672cc1a25ddb961ddf7c47e882cfbe8f296fd5b287833762b0584a69815b6b162c11b9ed1cb08d6ae84fd9742b961521e028bf2e1dcdb8867733271d6051c8a563a8c9fbfd99e3e15ab2d83a0cc8c9acedd72397c2e78c1b1232831d2f9dad1745c6b8147d641562e1820d08d01c9e2cd859bf906020055444"], 0xb8) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x6, 0x14010) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000200)=0xffff, 0x4) [ 355.289099][ C1] net_ratelimit: 22 callbacks suppressed [ 355.289105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 355.300588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 355.369118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.374978][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.689110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.694954][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 355.929195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 355.935011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.010338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 356.016132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 360.569250][ C0] net_ratelimit: 24 callbacks suppressed [ 360.574968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 360.580929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.529194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.535020][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 361.609231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 361.615053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 361.929172][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 361.935011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 362.169163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 362.175106][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:33:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85512, &(0x7f00000001c0)={{0x9, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 03:33:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x402, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:35 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@ipv4}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5, 0x40000000}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000040)}, 0x10) 03:33:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000980)="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", 0x1000, 0xfffffffffffffffb) request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000001b40)={'syz', 0x1}, &(0x7f0000000100)='syz', 0xfffffffffffffffd) r1 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)=0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000000840)=0xe8) r7 = getpgrp(0x0) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, &(0x7f0000001b00)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000900)=0x0) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001cc0)=0x0) lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001fc0)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000004c0)="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", 0xff}], 0x1, &(0x7f0000001e80)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x30, 0x1, 0x1, [r1, r0, r1, r1, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r0, r1, r0]}], 0x118, 0x4000000}, 0x4000) io_cancel(0x0, 0x0, 0x0) r16 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r16, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r17, 0x9b, "bf7cad", "edab0803c5886395c711884b9b222357f5bb82d5292f22e5e4fa2e890353fa08bbb72756f20456752e2c74980a2e7592115e3d2479122e91f097f7d4c64e88bba7aaa860f9f5d96a457c28360cd7d7fab5c5f28850541be2b80ee8d2a327d5b27e202a7d7770170aa083fcf765b888e9bf3abfc5f6c1c94f5ef7c656695b3c0360f496027bfd82a53b4a455f79249667bfb8f3f84a6de4e7a977a2e220aa34f0abdf76f8204249dec2caccce281e9c98087a2d2a6851719f9c8d86ce4d883be76f6cf8d749c140d9048c8727ff81bcc1ef73d17c1bf6ac0659d046b925838b7ef2923c797959ae974418da4f8f7939c72d94cb843279ee8da9ef7606719c3d90"}}, 0x110) r18 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r18, &(0x7f0000002000)=ANY=[@ANYBLOB="b8000000000000000472d100635a9bc4a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000400000000000000450000000000000000e7ffffff0000000000000000000000000061536b8760ab4acf3c0c82ac650c03800df529df70950c7fc87a59a49923712b223f1d8cd28a951f8e3ea584abc3d6869610b0f660c85a89a032270308db3c8148b757107cd3c1f1d6ad49f1f726692c6c2d4c51c95f3f46d020c1e3f37382269d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:33:35 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect(r0, &(0x7f0000000000)=@tipc=@name={0x2}, 0x80) 03:33:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000007) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) io_setup(0x1000, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000080)) io_setup(0xddeb, &(0x7f00000000c0)) io_setup(0xad2d, &(0x7f0000000100)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00 \x00'], 0xb8) 03:33:35 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001900010200000000000000001d0100002c000200217b266c6f6c6f2e2c47504c27637075000000006f64657621285d76626f786e65743123bf5e5b00"], 0x1}}, 0x0) 03:33:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x406, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:35 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x3, 0x0, 0x7ff}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x1, 0xfffffffffffffff9}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f00000001c0)) gettid() syz_extract_tcp_res(&(0x7f0000000200), 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x2000000000000003, 0x0) [ 365.689131][ C1] net_ratelimit: 16 callbacks suppressed [ 365.689140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 365.700717][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 365.769139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 365.774963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.089373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.095230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.329140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 366.334992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 366.409099][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 366.414948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 370.969230][ C0] net_ratelimit: 24 callbacks suppressed [ 370.974959][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 370.980796][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 371.929113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 371.934935][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 372.009182][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.015007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 372.329099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.334937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 372.569189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 372.575029][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:33:45 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x407, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:45 executing program 2: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) r3 = dup2(r1, r2) ioctl$TIOCSBRK(r3, 0x40044591) mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TCSETA(r2, 0x5406, 0x0) ptrace(0x11, r0) 03:33:45 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x20000000) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40800, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:33:45 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x5, 0x36, &(0x7f0000000080)="d9aa55a2bca1044bc4acfee01ec7903f121b2b8e3bf1d02571555e778abe674daa22c9e0a630c94079c6d36347b45ab9cbf3dfa3bf97"}) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/91) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 373.271167][T22571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:33:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x408, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:33:45 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:45 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) exit_group(0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/161) 03:33:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) [ 376.089079][ C1] net_ratelimit: 16 callbacks suppressed [ 376.094950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 376.100703][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 376.169113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.175114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.489106][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.494910][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.729094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 376.735001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 376.809107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 376.814892][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 381.369157][ C0] net_ratelimit: 24 callbacks suppressed [ 381.374956][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 381.380752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.329174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 382.335130][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 382.409183][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.415035][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.729494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.735287][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 382.969124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 382.974936][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:33:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:33:55 executing program 2: 03:33:55 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) listen(r2, 0x80000000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="96679920769df8d53083bc50900a7cc9", 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00io\x00\x00\x00\x00\x00\x00'], 0xb8) 03:33:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x409, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:33:55 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:33:55 executing program 2: 03:33:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:33:55 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000400000000000000000000000b000000200000b6296873d4c880df00006f00000000000061"], 0xb8) 03:33:55 executing program 2: 03:33:55 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:33:55 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000d78059f7cf3bc800000000000000000000000b000000000000002f6465762f09000000"], 0xb8) [ 386.489149][ C1] net_ratelimit: 16 callbacks suppressed [ 386.489155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 386.500672][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 386.569203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.575062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 386.889097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 386.895032][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.129154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 387.134980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 387.209067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 387.214864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 391.769132][ C0] net_ratelimit: 24 callbacks suppressed [ 391.774848][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 391.780661][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 392.729114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.734982][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 392.809223][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 392.815071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.129130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.135090][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.369116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.375113][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x40a, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:34:05 executing program 2: 03:34:05 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) set_tid_address(&(0x7f0000000080)) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x202000, 0x0) 03:34:05 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:05 executing program 2: 03:34:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x40b, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:34:05 executing program 2: 03:34:05 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={0x1f}, 0x8) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000080000000000000000000000000000000b000000000000002f6465762f617564696f000000000000d41857cdd61653f53f3fd249d9d6"], 0xb8) 03:34:06 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x28}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0xa20004, 0x2ff, 0x0, [], 0x0}) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000300)) getgroups(0xa, &(0x7f0000000340)=[0xee01, 0xee01, 0x0, 0x0, 0xee01, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="4dd4d8e00109cceaaa1c3ae60f07c97c6a10440c0b72b48fe8152d30e4ac2920a1cd39d641fa2e029287a832f67e1d3d1e6c5341ec57348e25a5c3da08eba038bcffe240416a632c506cab63e6e9ff090cb33a0705d1ba7190105f63bf7245fb63dcdcf0084e8f3b6d60c94ad7c6ecc99b195809bb8935123e5884c01eac8413c21df1c84dbf6d55eb95ee4c8be1bccd23f706c63e66230365d5bbed7ff2a3bf97903c7030e57939e4f326fd4b9a605948708c366817840ec019c2ff05d9961b2632", 0xc2}], 0x1, &(0x7f0000000380)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x20, 0x10}, 0x0) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x40e, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:34:06 executing program 2: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) dup2(r0, r1) execve(&(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 1: r0 = semget$private(0x0, 0x20000000105, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x7fff, 0x279ab7c9}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)=0x101) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0xfffffffffffffc00, 0x80, 0xd55, 0x1, 0x8}) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x2}) dup3(r0, r1, 0x0) 03:34:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0080000000000000000000000105000600200000000a00000000000000000500e5e801000000001f000000000000250000000000000200010000000000002000020000627c0500050000ff1700000000000000000000000001170000000000000000c295fdb97ce2d11f1643cc"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000000000000c60005001a0000000000000000000000ffffac1414aa0000000000000000000000000000000000000000"], 0x38}}, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0xa00000000000000) sendto(r1, &(0x7f0000000100)="2b76feaf9d4502e07ca9e411afbd58fc25b7d5b690c73fad31992abdef203c29c274aca550ecf0612f5eca914f2f9cc92e9b154ba034195e66f13c8db8628667eec8b9653461f94e70a93706b98cb885121050f6fba3c9b69d", 0x59, 0xd0, 0xfffffffffffffffd, 0x0) ftruncate(r0, 0x7) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:34:06 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x48000) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x2}) dup3(r0, r1, 0x0) 03:34:06 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ddff00000000000000000000000000000000000000000000000b000000000000002f6465762f617564696f000000000000"], 0xb8) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000039a594349c1fd83d000000000000000007f3ff0000000000000000000005000000380003"], 0x39) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:06 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x3f00}) dup3(r0, r1, 0x0) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:06 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x2316, &(0x7f0000000040)) io_setup(0x7, &(0x7f0000000080)) io_setup(0x72, &(0x7f00000000c0)) io_setup(0x2, &(0x7f0000000100)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) acct(&(0x7f0000000000)='./file0\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:06 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x1000000}) dup3(r0, r1, 0x0) 03:34:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:07 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000100)=r1) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b000000000000002f6465762f617564696f0000000000006694d210f6a4bfd5a2b789dab564964420fa95125f3674ae4a0e8aa4e1feac410abf0f22493c34b32db29994c7e8d8a4da871b05849a7dce77"], 0xb8) 03:34:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:07 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000200)=0x0) io_cancel(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000240)=0x6f60) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x400) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002a00000000000000000000000000000000000000000000000000000b000000000000002f6465762f617564696f00000000000e7063008a70069c9335a5805fd06dfe5ef2b528537cff1555327d00c5824c671ad819fd8a4dd174694a51c2074461a17abbbe18d420a791fd54282285b9ad8b2c66f9c2547d011181c26a78aef5ac1fb13c8b1515b82a3d7405637bb10671ec0aba8448d938d6284cb9d487968c42ccb764a2ead85fa961549eac930f7d43f4511634e8e29c20b1b95cdb27fa200290e814655b9db6e58ec07c927507dad024fb5707cb67d6dc366f8f14d42216"], 0xb8) 03:34:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x2000000}) dup3(r0, r1, 0x0) 03:34:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) [ 396.889083][ C1] net_ratelimit: 16 callbacks suppressed [ 396.889089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 396.900585][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 396.969161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.974966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.289123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.295060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.529192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.535043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 397.609484][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 397.615948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 402.169217][ C0] net_ratelimit: 24 callbacks suppressed [ 402.174922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.180735][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.129089][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.134916][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.209181][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.214979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.529146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.534973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.769181][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.774992][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:17 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:17 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x1f, &(0x7f0000000080)) io_setup(0x3f, &(0x7f0000000100)) io_setup(0x0, &(0x7f0000000140)=0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) io_cancel(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0xffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140203, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/121) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7de463600000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000100000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:34:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x3f000000}) dup3(r0, r1, 0x0) 03:34:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:17 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:17 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:17 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b800000076000000000000000000000400002649ab49665a6943000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000700000000000000000000000000000004000000000000000000000000000000000000000000000000000000000015012ed713779e8a434da858ef8cd7cf000000000000eb87553014e635f4c0a3110853aa7d53e6297942e425946218b7d5996d2352403944b8be6f22a949f12db88fce94ae65a9cce44762c371b4e008dd00efd61055dd83dee7efe7b92ede968273fa0fa9850b4dec263111132a9a7d701fe72aeb2f13953b0cd69ef485f655d82db3297ab33f592ddf255536c5c650ce9dbd0f6c38ea8bb3aba7d82af226ec48f0be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:34:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x100000000000000}) dup3(r0, r1, 0x0) 03:34:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) [ 407.289135][ C1] net_ratelimit: 16 callbacks suppressed [ 407.289141][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.300772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.369164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.374964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.689111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.694994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.939066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.944885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 408.009095][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 408.014962][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 412.569243][ C0] net_ratelimit: 24 callbacks suppressed [ 412.574982][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 412.580822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.529143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.534960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 413.609224][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.615371][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 413.929120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.935017][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 414.169137][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.175149][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:27 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000040)) io_setup(0x6, &(0x7f0000000080)) io_setup(0x101, &(0x7f00000000c0)) io_setup(0x8, &(0x7f0000000100)) io_setup(0x10000, &(0x7f0000000140)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00005263266b2b79106c047844a93f00000000000000100000000000000000000000000000000000000b00000000002f6465762f61755e696f000000a3f300"], 0xb8) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x800, 0x204400) 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x200000000000000}) dup3(r0, r1, 0x0) 03:34:27 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x3f00000000000000}) dup3(r0, r1, 0x0) 03:34:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) 03:34:27 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/84) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 417.689080][ C1] net_ratelimit: 16 callbacks suppressed [ 417.694766][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 417.700516][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 417.769185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 417.777885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.089130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.095093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.339097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.344963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.409134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 418.415036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 422.969219][ C0] net_ratelimit: 24 callbacks suppressed [ 422.974946][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 422.980797][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 423.929149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.935055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 424.009181][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.015175][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.329661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.335540][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.569228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.575136][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) 03:34:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) io_setup(0x1f, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000080)="911c31ea5bc3d2b715be2c527617c692180e609f5c84ba4548173aca6ac72acec15f67883ed395c586820622b1091654bf38e9bd1f8cd6290023cd", 0x3b, 0x2, 0x0, 0x3, r2}]) stat(0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x100) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="90215f9ced227c2db800000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009468ddd938e91dc1c229ad26d100000000040000000000000000000000000000000000000000000000000000000000000000000000000000fc501d0c50e63ff5e541ae32f78f670302acf3f6f2244d67170d1800362359631860816ab506c229e11bfce5b36c9c966848b3a2f678d1cf167d289ffdbedb76e400e81c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b832471aec30451800000000feca000000000000000000000b000000000000002f6465762f617564696f000000000000c3c213e154749182fe1d4ecedc3c8112a80fc1b6c663d4571b4e054747c250f2c7e74d9a505b883f30fb84b37dda91e05017ef5a72e33081eda54dda343afa2a149959b4003444ef48a114e765b2f147fa4c1214915d6a60bb0af61223e9a6f6ed97ce274c8bce5362233cc551bbdcc41b4912d7e0dbfbb9d09294dbed1beef00187f59ff7145dcf50706e394aa4dcb39bd4efd7a28a9b9006c9a9d9e1"], 0xb8) 03:34:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x7fffffffffffffff}) dup3(r0, r1, 0x0) 03:34:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:37 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) 03:34:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0xffffffffffffff7f}) dup3(r0, r1, 0x0) 03:34:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000)="d6fe1bf861e9cc4194326142d9eace613961c164eaff8162e3494fe9bdf0d0d448ffb0e9d7b15df653e7be3f0e3775ee41c9c68fb2dadf4c42cc58471126835825504d4776f6207014da128888d612b394691657b620728a17aebb", 0x5b, r0}, 0x68) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:38 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/157) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000001800000000000000000000000b000000000000002f6465762f61756400696f000000000000"], 0xb8) [ 428.089100][ C1] net_ratelimit: 16 callbacks suppressed [ 428.089106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.100850][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 428.169158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.175002][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.499074][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.505061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.739081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.745120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.809116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.815154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 433.369193][ C0] net_ratelimit: 24 callbacks suppressed [ 433.375132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.380963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.329116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.334939][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.409163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.415026][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.729097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.734890][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.969135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.975053][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:34:48 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r1) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x1000, 0x1) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7ff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 03:34:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:48 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:48 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:48 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x80, 0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x100000000000004) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = gettid() waitid(0x2, r1, &(0x7f0000000000), 0x1000001, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:34:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:34:48 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) [ 438.489142][ C1] net_ratelimit: 16 callbacks suppressed [ 438.489151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.500799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 438.569128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.575000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 438.889084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 438.895046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.129148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.135079][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.209127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.214995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 443.769128][ C0] net_ratelimit: 24 callbacks suppressed [ 443.769134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 443.780982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.729131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.735099][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.809767][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.815588][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.129118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.135259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.369167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.375026][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:34:58 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b000000000000002f6465762f617564696f00000000000052d8d94cdc79035c900f6d0e099fa347426e472b3fe6b0f125be1b413c30292bd727b14ef99fff32827313bb786db43d8767ccc8adf6f78b62e9d626efc6c08517ac91cf992f210aedeee8a801a279dd078227f6a59be9fbb1f1bdcdb43baba709abf00cb12c6ef98d11e8f900147802e238e3bccad44200de392a614a634f2cac"], 0xb8) 03:34:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:34:58 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:58 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:34:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:58 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000080)={0x1, 0x6e4}, 0x2) 03:34:58 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:34:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) [ 448.889091][ C1] net_ratelimit: 16 callbacks suppressed [ 448.889097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.901026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.969109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 448.975003][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.289135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.294956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.529141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.534999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.609064][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.614845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.169156][ C0] net_ratelimit: 24 callbacks suppressed [ 454.169162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 454.180976][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.129122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.134952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.209211][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.215086][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.529135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.534952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.769108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.775044][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:08 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:08 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x41) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:08 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:08 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000003c0)={0x4, &(0x7f0000000000)=""/151, &(0x7f0000000140)=[{0x100000001, 0x36, 0x3ff, &(0x7f00000000c0)=""/54}, {0x76172165, 0x20, 0xffffffffffffff11, &(0x7f0000000100)=""/32}, {0x3, 0x87, 0xb2, &(0x7f0000000200)=""/135}, {0x5, 0xad, 0x8, &(0x7f0000000300)=""/173}]}) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:08 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000240)=0x2) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ftruncate(r4, 0x274) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xff, 0x20}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x603, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x2, r6}) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:35:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:08 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$UI_DEV_CREATE(r0, 0x5501) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) socket(0xb, 0x80005, 0x4) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r2) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x9, 0x4, [0xffffffff]}) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000080)) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x0, 0x0, 0x6}, 0x90}}, 0x18) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, 0x0, 0x0) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x4, 0x100000001) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)=0x9d0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xb6e9, 0x80000) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b80000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000001e00000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x100, 0xc, 0x1, 0x2, 0x3, 0x3, 0xc0e, 0x1f, 0x26, 0x8000, 0x3c5a, 0x2, 0x0, 0x6, 0x8, 0x2}}) 03:35:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, 0x0, 0x0) 03:35:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="b800000000000000040000000000000000000000000000000000000000000000000000000000000003e302000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, 0x0, 0x0) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f00000000c0)={0x8, 0x2, 0x38000000000, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffff0, 0x1, 'queue0\x00', 0x6}) 03:35:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000), 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x1, 0x2) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b80000000000000004000000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000ef5f91617e93c8d800000000000000000200000000b1e0a2602dc1abd80000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000040000000000000000000000000b000000000000002f6465762f617564696f000000000000"], 0xb8) 03:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 4: close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000040)=0x1c) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xff, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000), 0x0) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00c3b0af67965a0000000000000000000000000000000000000000000000000000005a45cc0a1962a10b000000000000002f6465762f617564696f"], 0xb8) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 4: close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000), 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{}], 0x1) 03:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000073c52387bbd0e6b206000000000000000000000b000000000000002f6465762f617564696f00002000000021c99b8b749738b2fa234a7147619bf17c96c7c60cf73ef7c3945e4e3a8d99fe8c5644e536efd44ef01ff20b757f260851b05b6464677c1e8652eaf6be81c227af2e5b824fabf2fbf2a6285888b677a3b4553a01a2600e4394db8df77ba31c5ff1ac535758992ea32ea24906"], 0xb8) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 4: close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:09 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x2, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0xc0000102]}) r5 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0x5, 0x4) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0}) dup3(r0, r1, 0x0) 03:35:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:10 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{}], 0x1) 03:35:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:10 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$KDSKBLED(r0, 0x4b65, 0x3) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) stat(0x0, 0x0) getgroups(0x6, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0x0, 0xee01]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="b80000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000200000000000000000000000000000000400000000000000230000000000000000000007004000000000000000000000000000009e2bd59c", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:35:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x2}) dup3(r0, r1, 0x0) 03:35:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:10 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x200000) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x3f00}) dup3(r0, r1, 0x0) 03:35:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:11 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}, {0x0, 0xffff}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{}], 0x1) 03:35:11 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x30, 0x6, 0x1c}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x7, 0x0, 0x10000, 0x8b9, 0x7}, &(0x7f0000000100)=0x14) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000008000000000000b000000401200002f64657e2f617564696f000000000000"], 0xb8) 03:35:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:11 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x1000000}) dup3(r0, r1, 0x0) 03:35:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:35:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:35:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) [ 459.289077][ C1] net_ratelimit: 16 callbacks suppressed [ 459.289087][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.300676][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:11 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)) io_setup(0x18000000, &(0x7f00000000c0)=0x0) io_cancel(r1, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x3ffc000, 0xfffffffffffffff8, 0x7, 0x8, 0x7, r2}) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) [ 459.369097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.374990][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x2000000}) dup3(r0, r1, 0x0) [ 459.689109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.695013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 459.929110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.934930][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:35:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x3f000000}) dup3(r0, r1, 0x0) 03:35:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0x64}}) 03:35:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:35:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x7, 0x0, [{0xd002, 0x38, &(0x7f0000000040)=""/56}, {0xf001, 0xae, &(0x7f0000000080)=""/174}, {0x6cc1b49332d4fef4, 0x11, &(0x7f0000000140)=""/17}, {0x1, 0xec, &(0x7f0000000300)=""/236}, {0x1, 0xb6, &(0x7f0000000200)=""/182}, {0x12000, 0x2a, &(0x7f0000000180)=""/42}, {0x104000, 0x2e, &(0x7f0000000400)=""/46}]}) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x4d, 0x1) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) fcntl$setlease(r1, 0x400, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 460.009073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 460.014880][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000004c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10) 03:35:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r0, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x100000000000000}) dup3(r0, r1, 0x0) 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) syncfs(r0) 03:35:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:35:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgsnd(r1, &(0x7f0000000380)={0x3}, 0x8, 0x0) 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:35:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000000}) dup3(r0, r1, 0x0) 03:35:12 executing program 1: syz_execute_func(&(0x7f0000000280)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={0x0}}, 0x0) 03:35:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:12 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000140)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x1f, 0x100}, {0x5, 0x6}], r2}, 0x18, 0x2) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000000c0)="64ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3193e66430f3a0ce397") clone(0x9a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x0, 0x0, 0x0) 03:35:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:35:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x3f00000000000000}) dup3(r0, r1, 0x0) 03:35:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:12 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x800) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r4, 0x1, 0x0) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:13 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:13 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x7fffffffffffffff}) dup3(r0, r1, 0x0) 03:35:13 executing program 1: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x4, 0x2, @tid=r0}, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 03:35:13 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0xffffffffffffff7f}) dup3(r0, r1, 0x0) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:13 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000c7ebbca49b8f77843b020000000000000000000b000000000000002f6465762f61751168d05fe50ad31ad5d6417ac7506c25d3323fb70ce5849f7d1b240be6702cf91ab057bf42ffb7a0201a7a8eaa9bb9f62f576399d4eb031c131908784872d3025f278ac859a09fd221277dfd2dfc6bf0605ce91938f77e6708166c"], 0xb8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x12c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4289ab3187e94703}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2c83f0fe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff7}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4500}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x12c}, 0x1, 0x0, 0x0, 0xea6117d662c12583}, 0x8000) 03:35:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 03:35:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/11, 0x232) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)) dup2(r2, r1) syz_execute_func(&(0x7f0000000340)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") clone(0xb102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) ioctl$int_out(r1, 0x5462, 0x0) 03:35:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:13 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10008000000000, 0x47fffd) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00}) dup3(r0, r1, 0x0) 03:35:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:14 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0xfffffffeffffffff, 0x5) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', 'self/cgroup$[\x00'}, &(0x7f0000000040)='&\x00', 0x2, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) [ 461.824433][T24464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:35:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000000)=""/232, 0xe8) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x1000000}) dup3(r0, r1, 0x0) 03:35:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:35:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:14 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0080000000000000000000000000000000000b0000d008000000000000762f617564696f000000000000"], 0xb8) 03:35:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x2000000}) dup3(r0, r1, 0x0) 03:35:14 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:14 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x404180, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000000000000000000000000000000000000000000000000000000000000000800030000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000400000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:35:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 464.569167][ C0] net_ratelimit: 24 callbacks suppressed [ 464.569176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 464.580806][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.539109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.544891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.609179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.615059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.929180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.935083][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 466.169134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 466.174996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 469.689205][ C1] net_ratelimit: 16 callbacks suppressed [ 469.696418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.703865][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.769321][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.775534][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.089212][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 470.095574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.329214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 470.335325][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.409185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 470.415838][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:24 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000028, r0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:35:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f000000}) dup3(r0, r1, 0x0) 03:35:24 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000640)=ANY=[], 0x277) 03:35:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:25 executing program 1: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x8000000000000, 0x0, 0x100000000c, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:35:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x100000000000000}) dup3(r0, r1, 0x0) 03:35:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x2000008000083d, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) sync() 03:35:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x200000000000000}) dup3(r0, r1, 0x0) 03:35:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:25 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) finit_module(r0, &(0x7f0000000100)='/dev/snd/controlC#\x00', 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x7, 0x80000000, 0x70, 0x0, 0x7, 0x2, 0x2, 0x8, 0x7fffffff, 0x1, 0x4, 0x4, 0x2, 0x3, 0x3, 0xa0, 0xde70, 0xfffffffffffff800, 0x8, 0x20, 0x1, 0x100000001, 0xd78b, 0x2, 0x0, 0x0, 0x9, 0x0, 0x5, 0x4f3e, 0xffffffffffffff81, 0x7, 0x0, 0xeb, 0x3, 0x0, 0x4, 0x2, @perf_config_ext={0xba5}, 0x1000, 0x7, 0x4, 0x0, 0x2, 0x100, 0x7}, 0x0, 0xb, r1, 0x1) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b8000000fd111d3f7a5dfc5800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000008c3e954670c0b503c3b2010816a63159e98809ebc2826e0dc59dcd8dc9a074f036c3d1351e3b495653bb02f0df248fd70e7ef5a87e0bba8617c1e53da7b71c77646ccb32496cc2f098ce783f4d2f364292ff6c721eafcb76fc1b8826b5839f3a2bf40c16276d5f9e14f783c6aeef81c8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:35:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 474.969122][ C0] net_ratelimit: 24 callbacks suppressed [ 474.969128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 474.980837][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.929100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.934902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 476.009141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.015120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 476.329147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.334971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 476.569173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.575051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.089118][ C1] net_ratelimit: 16 callbacks suppressed [ 480.094818][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.100624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 480.169189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.175034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.489148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.495001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.729200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.735114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.809106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 480.816477][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00000000000000}) dup3(r0, r1, 0x0) 03:35:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 03:35:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x81, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8663, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000000)=""/99) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000000000000000000000000000000000000000000000b000000000000002f6465762f617564696f000000000000"], 0xb8) 03:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:35 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="d4"], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:35:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:35 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x7fffffffffffffff}) dup3(r0, r1, 0x0) 03:35:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) [ 485.369444][ C0] net_ratelimit: 24 callbacks suppressed [ 485.369451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 485.381006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 486.329100][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.334937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 486.409125][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.415060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 486.729141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.734978][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 486.969152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.975047][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.489157][ C1] net_ratelimit: 16 callbacks suppressed [ 490.494883][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.500712][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.569205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.575101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.889132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.894998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.129173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 491.135033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.209076][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 491.214867][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:45 executing program 1: process_vm_readv(0x0, &(0x7f0000001d40)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x22) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0xe, 0x3, @thr={&(0x7f0000000140)="5ecb975e45643a64b71547d109e831a414f7f562ac3aad28989ac56df144f6333d1724a547cd46c45cf70bb0aac3aadefc652f63c4882cadea51", 0x0}}, &(0x7f00000000c0)) timer_delete(0x0) 03:35:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:45 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) fanotify_mark(r1, 0x10, 0x40000012, r1, &(0x7f0000000000)='./file0\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0xffffffffffffff7f}) dup3(r0, r1, 0x0) 03:35:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:45 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x47) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:35:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:35:45 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/11, 0x5e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x400003102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, 0x0) [ 495.779182][ C0] net_ratelimit: 24 callbacks suppressed [ 495.779189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.790962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.729114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.735030][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.809217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.815327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 497.129150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 497.134969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 497.369136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 497.374967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 500.889112][ C1] net_ratelimit: 16 callbacks suppressed [ 500.894973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.900888][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.969127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.975134][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.289117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.295168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.529185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.534994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.609130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.614980][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:35:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:35:55 executing program 0: socket$netlink(0x10, 0x3, 0xe) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:35:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:35:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3f00, 0x0, 0x0, 0x54}, 0x98) 03:35:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:35:56 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x33, 0x3, 0x0, {0x2, 0x12, 0x0, '/dev/snd/pcmC#D#p\x00'}}, 0x33) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000b0000000000000000000000000b000000000000002f642f617564696f0000050000000000"], 0xb8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x4e23, @local}}}, 0x88) 03:35:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:35:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:35:56 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x800000, 0x400000000000000) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x61c0, 0x800) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x1, 0x4, 0x4, 0x80000004, 0x17ecf61e, 0xffffffffffffffc0}) sysfs$3(0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000040)) [ 506.169101][ C0] net_ratelimit: 24 callbacks suppressed [ 506.169107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 506.180807][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 507.129166][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 507.135241][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 507.209151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.214986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 507.529134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.535052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 507.769197][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.776125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.289139][ C1] net_ratelimit: 16 callbacks suppressed [ 511.295026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.300896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.369783][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.375729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.689151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.695204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.929136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.935039][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 512.009114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.015265][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:36:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) io_setup(0x4, &(0x7f0000000040)=0x0) io_cancel(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="b8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000b00000040000000036465762f617564696f0000000000004a115d8a3402796d295efa6cfae827d7070aa92c59d59222c484bd8413b71015a7aa54f5e30dec10f7929e98b6443255"], 0xb8) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3f00, 0x0, 0x0, 0x54}, 0x98) 03:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r0}) 03:36:06 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) r0 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0xf22e, 0x2}}, 0x28) write$FUSE_DIRENTPLUS(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000e70b000000000000000000000000000000000000000b000000000000002f6465762f617564696f000000000000"], 0xb8) 03:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:36:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) [ 516.569117][ C0] net_ratelimit: 24 callbacks suppressed [ 516.569129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 516.580792][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 517.529128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 517.534994][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 517.609183][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.615211][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 517.929143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.935093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 518.169111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 518.175093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 521.689102][ C1] net_ratelimit: 16 callbacks suppressed [ 521.689109][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.700837][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.769154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 521.774975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 522.089081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 522.094920][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 522.329115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 522.335187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 522.409138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 522.415066][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3f00, 0x0, 0x0, 0x54}, 0x98) 03:36:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x90080) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000000400006900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a040000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00/dev/audio\x00\x00\x00\x00\x00\x00'], 0xb8) 03:36:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) 03:36:16 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f0000000080)=""/150}) 03:36:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:16 executing program 0: socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x402) stat(0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000008c0)={0xb8, 0x0, 0x4, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0xb, 0x0, '/dev/audio\x00'}}]}, 0xb8) 03:36:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3f00, 0x0, 0x0, 0x54}, 0x98) 03:36:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:36:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r0}) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) close(r1) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) 03:36:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000180)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000140)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x0) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) 03:36:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup3(r1, r0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 03:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) 03:36:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x20000) fallocate(r2, 0x40, 0x4, 0xe7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x34c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x6}, 0x8) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:36:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) 03:36:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040)='trustedlotrustedkeyring\x00', 0xffffffffffffffff}, 0x30) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x3, 0x0, 0x0, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x6, r2}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) dup3(r0, r1, 0x0) 03:36:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 526.969138][ C0] net_ratelimit: 24 callbacks suppressed [ 526.969147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 526.980729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 527.929084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.934899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.009143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.015074][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 528.329107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.334929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 528.569136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 528.575005][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.089126][ C1] net_ratelimit: 16 callbacks suppressed [ 532.089132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.100625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 532.169186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 532.175007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.489162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 532.494989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.729196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 532.735101][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.809098][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.814926][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:27 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[0x0, 0x400]}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000200)=[0x100000000, 0x2]) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x100a}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r3, 0x10, "006c0e", "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"}}, 0x110) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'bcsf0\x00', 0x10}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r4 = dup3(r0, r0, 0xfffffffffffffffc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000040)=""/146) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) 03:36:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 537.369171][ C0] net_ratelimit: 24 callbacks suppressed [ 537.369180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.380939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 538.329061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 538.334966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 538.409139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 538.414986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 538.729111][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 538.735088][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 538.969136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 538.975041][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 542.489133][ C1] net_ratelimit: 16 callbacks suppressed [ 542.489139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.500668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 542.569218][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 542.575060][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 542.889147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 542.894955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.129168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 543.135052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.209105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 543.214919][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, 0x0) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0x40005046, 0x9}) dup3(r0, r1, 0x0) 03:36:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, 0x0) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x105200, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x4}, &(0x7f0000000280)=0x8) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) socket$l2tp(0x18, 0x1, 0x1) r4 = getpgid(0xffffffffffffffff) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x7, 0x80000001, r4, 0x0, r5, 0x0, 0x0, 0xf6}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:36:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, 0x0) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x27, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) dup3(r0, r1, 0x0) [ 547.769141][ C0] net_ratelimit: 24 callbacks suppressed [ 547.769149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 547.780747][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 548.729118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.735069][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 548.809128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 548.814969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 549.129122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 549.134937][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 549.369168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 549.375064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 552.889119][ C1] net_ratelimit: 16 callbacks suppressed [ 552.894851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 552.900675][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 552.969205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 552.975135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.289160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 553.294964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.529228][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 553.535121][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.609108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 553.614906][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, &(0x7f0000000240)) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x100000000, 0x0, 0x1, 0x100000001, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r3 = dup3(r0, r1, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f00000000c0)={0x8c, 0x1, 0x7fff, 0x5}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x4, 0x623}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r4, 0x101}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100000, 0x0) 03:36:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xc, 0x0, 0x8001) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="03e6a42c64bbd8befdf32769de257ceb3dc36003ffa43057c150fa4c03f1e73fd8ce39275b1bc3c8c6d566f965226db8269dd984bd6c0ea8656af4be78d361be55df584c07276290c8133006b3b41307247133cf4ec41ee3698f32f5be708b1348c20f17d9fd4bfd308e2261f23f37506e8457515fa798225aaa8b4621e8e1e05198de98a95d81e2a9857381ebf8e94d8ec9dc8f1dbf530c4a2c4938dadc5f2b23eed1bad1d7145520bc79c1", 0xac) fcntl$lock(r1, 0x3, &(0x7f0000002000)={0x0, 0x4}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000080)={0x200, 0x400}) recvfrom$llc(r3, &(0x7f0000000200)=""/25, 0x19, 0x2, &(0x7f0000000240)={0x1a, 0x13, 0x0, 0x100, 0x8, 0x4}, 0x10) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000180)={0x2, 0xda0f}) dup3(r0, r1, 0x0) 03:36:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, &(0x7f0000000240)) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="562d82952223fc40d0ced0a708b629330daf4ad20bb30f240b14bb", 0x1b}, {&(0x7f0000000080)="5eaf98713f80be57d17e", 0xa}, {&(0x7f00000000c0)="8a8ef30920662d75b1298fd0ebeeefdb7195c186efb7e2e7af279131195d0ec690e5632b69e3a91c9fd4305ed4de8a56f931eae5469ae9cf2126ccf5818d2466f2bca6827d912f5c73686b3dbb22961d01fdfd21f4019b6090c1634f89321b2bce4b7346cbf36a964066898dd6e37c4159852de5723f41391c45260db56e72e1b48719df8315fb0f608240d0c4f045fcd4f9f9eab6c64641fc5899e09e89aef424c061394c70fd698e34b18ca027ddc83ccfde5678c73be0fe5a801173b536b95f5c6c86027fc100a86a5407", 0xcc}], 0x3, 0xc) 03:36:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 558.169169][ C0] net_ratelimit: 24 callbacks suppressed [ 558.169178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 558.180714][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 559.129074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 559.134910][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 559.209132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.215011][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 559.529165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.535037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 559.769158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.776353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 563.291823][ C1] net_ratelimit: 16 callbacks suppressed [ 563.297543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.303359][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 563.369214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.375123][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 563.689148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.694971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 563.929163][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.935059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 564.009105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.014898][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:36:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x0, &(0x7f0000000240)) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:36:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_crypto(0x10, 0x3, 0x15) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)) dup3(r0, r1, 0x0) 03:36:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) timer_create(0x7, &(0x7f0000000200)={0x0, 0x3, 0x0, @thr={&(0x7f0000000080)="7b2743b6f2866f786f3441a19399d6e65fe4d663f786166f54872e9ae70cf640c491384031bf9f5529eb1fbed595fe460c096cb633982753485e8d78f55b798c564b43ba0f9df4a10e58229158a9c13b432d631c5bdcf6fd96af81b0ea3f4522d04ecf4ca85a3552debb26124a36fea8c071c1435f4271b1886fc737102f320942048ba5a560dedeec24963b0fd88a10502686532139135c1ee022b2ad31c7933beb40db39301d1b52243cdad98a50993876c8c5b9e827bfc93c5b923e", &(0x7f0000000140)="6e958cf6ae2d8fa22f35975167519018d7fa018c93f2aaa7219aa38d9e817a08b6a786b76e46988a1d2ea7ded7499a3cd5730f0803b68cba2362d3959d68d74a68e15e4b08ec34ac979364b605898af1470a1a4dd759b3e42998c3128c8289b257f5a55d53af69fe1e7c1960b4"}}, &(0x7f0000000240)) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r0, 0x80000) 03:36:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[0x0]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x101000) write$9p(r2, &(0x7f0000000080)="5813d0391d5b71f11cc216189bc5cb924444b4e92db23f02459fa6b59e83aacdcd96d4ed7ea214bdca1d6b29ba5cee3e6e656600ff1d87e44a20710ae77f5459767a025036dfbcb8fc4c7928aa2e87aa87d6c87b006818d508541f3d802307bd24bc6d05f394c3cccb0212f82dee904a9a8a9f04624d97e2b0598bf7fb23f7f30ea3d324dd93b7210d847c8f134a", 0x8e) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x40) dup3(r0, r1, 0x0) 03:36:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x200000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x8001, 0x6, 0x101, 0x100000000, 0x20, 0x5, 0x2000000000000, {0x0, @in6={{0xa, 0x4e24, 0x80000001, @loopback, 0x8001}}, 0x5, 0x6fe, 0x8, 0x9}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000480)={r3, 0xb3, "fc3cc1f8a1c1d3673c33df410eb0478a0b50c7bccdd56d70e20ac04d384fa178a1dfcb76d9c557736f17aa61829d074acccc9e609099288f518686834eb1b9ab6d293e0153e559ff790d59494b3e4cbba1e5c39a62cfc54a491947d698961657e8dfdb0d62445fb1b852181187e4a829cbefdc1168db34d924569a5cbef629e54ec7397db84d763326d9c5c516c516d84ed2d378e07564486352afb00dc8c2207d355e2ac29bc1a7a32d5e5118500a63bf038b"}, &(0x7f0000000340)=0xbb) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) r4 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x8, 0x4001) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x5) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000200)={0x16, 0x48, &(0x7f0000000280)="f4d45dfc0c42d19920fe79a92889974bb461ae31ab77855bcc9c38fdd7c75870a773d70bdbb4e1d699788f729dbe69037bc40b5841d815c05004ec71cea262e9beadad2f9d80d1e0"}) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) accept$alg(r2, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000080)={0x0, 0x2}) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000140)=""/85) r6 = dup3(r0, r1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000100)={0xbb, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x2c, 0x5, 0x25}, 0x2c) 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:36:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = syz_open_dev$mice(&(0x7f0000009080)='/dev/input/mice\x00', 0x0, 0x402) sendto$llc(r2, &(0x7f00000090c0)="23351adc99bc647d633d891facc6a9c139e9fac43f4c3b46bbb1703034c803b1906fa98ec9297827b3acbf782262dc03e691f996a59d84d90dd55f46c1b861ff20f95f4679fe0fac41922186d86d5a94db9c385e8ed0cb45661026fc772897bfe99bf3fb1dfb73782b8a240b1deb5634b9217604043ed22fb05d73d7b3725d757114ee28e6392ea0393e475283ceff3ed54bc190d92e4e0b52807f0f86010130cab28a6975b372e96d3aa6756d3fdc61", 0xb0, 0x4000040, &(0x7f0000009180)={0x1a, 0x307, 0x100000001, 0x9c8bc02, 0x5, 0x3}, 0x10) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:36:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:36:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:37:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:37:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x9d9db0e99c83efb2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup3(r0, r1, 0x0) [ 568.569171][ C0] net_ratelimit: 24 callbacks suppressed [ 568.569179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 568.580730][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 569.529146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 569.535754][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 569.609151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 569.615253][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 569.929107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 569.935059][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 570.169142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 570.175023][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 573.689167][ C1] net_ratelimit: 16 callbacks suppressed [ 573.689174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 573.700996][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 573.769200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 573.775038][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 574.089109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 574.094894][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 574.329131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 574.334973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 574.409075][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 574.414851][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:37:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffe}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:37:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) dup3(r0, r1, 0x0) 03:37:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:37:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:10 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:37:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x8, 0x9, 0x8, 0x2, 0x3e, 0x3, 0x107, 0x38, 0x11c, 0x8, 0x6b97, 0x20, 0x1, 0xced, 0xc5fd, 0x7}, [{0x6, 0x1, 0x8001, 0x0, 0x8be, 0x100000001, 0x800}, {0x60000000, 0x3, 0x80000000, 0x5, 0x1, 0x1, 0x0, 0x3}], "dadfad4262da7f9cec2e8dbdd21ab6b79f8b40c48df7d378358e9c01ac88ba922ff6d839781432e84431959d7b46d8f68c63d6c0119a5122e2e409c9aa58b421779dbb8e9d5bc3f95774a32f1ce6dd9964fe8053298efd947ea80d7f6e6ed08dd318779dac54d7d4963748513c5116a1c8856d7da4d0ac0f6c33e37375673d180a45a73ac2dc9954c34e25c09e4fb2494bef9d328059c89900f45db91d168208", [[], [], [], [], [], []]}, 0x718) dup3(r0, r1, 0x0) 03:37:10 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:37:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) [ 578.969138][ C0] net_ratelimit: 24 callbacks suppressed [ 578.969146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 578.980743][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 579.929119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 579.934938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 580.009168][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 580.015006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 580.329130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 580.334977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 580.569116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 580.575137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 584.089127][ C1] net_ratelimit: 16 callbacks suppressed [ 584.089133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 584.100685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 584.169152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 584.174979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 584.489152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 584.494995][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 584.729120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 584.734977][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 584.809086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 584.814908][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:37:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x20000000000004}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x2000000026, &(0x7f0000000080)={0x200000000000201, 0xffffffffffffffff, 0x1, 0x800, r2}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x30) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000100)={0x0, {0x38, 0x3f}}) fcntl$lock(r1, 0x2000000000005, &(0x7f0000000040)={0x1, 0x0, 0xfffffffffffffffd, 0x2}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/147) dup3(r0, r1, 0x80000) 03:37:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x540c, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x82000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80a60040}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x110, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @ipv4={[], [], @multicast1}, 0x7fffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0x180}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x1}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x26, &(0x7f0000000340)={0x1}) dup3(r4, r5, 0x0) 03:37:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:37:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x10000) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e24, @loopback}}) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'b!\xbf\xd8\"\xd1\t\x00\xb1,\xa4\t\x00', r4}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40) dup3(r1, r2, 0x3) 03:37:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 589.369149][ C0] net_ratelimit: 24 callbacks suppressed [ 589.369157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 589.380729][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 590.329173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 590.334995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 590.409153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 590.415007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 590.729154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 590.735000][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 590.969149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 590.974996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 594.489150][ C1] net_ratelimit: 16 callbacks suppressed [ 594.494848][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 594.500606][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 594.569213][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 594.575100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 594.889138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 594.895008][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 595.129186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 595.135105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 595.209133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 595.214937][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:31 executing program 5: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:37:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:37:31 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x7f, 0x7ff}, @timestamp, @timestamp, @mss={0x2, 0x1}], 0x4) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000bc000)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000080), 0x13a, 0xde5ace93e36df66) dup2(r3, r4) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0xc000, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x1) ioctl$CAPI_NCCI_GETUNIT(r5, 0x80044327, &(0x7f0000000080)=0x4) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r6 = dup3(r0, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000180)={0x0, 0x14, [0xe67, 0x1, 0x200, 0x6, 0x2]}) 03:37:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:37:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x40000}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x3, 0x7}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8040, 0x0) dup3(r0, r1, 0x0) 03:37:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:31 executing program 5: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 599.779158][ C0] net_ratelimit: 24 callbacks suppressed [ 599.779165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 599.790663][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 600.729073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 600.734920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 600.809137][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 600.814952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 601.129114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.134945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 601.369118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.374980][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 604.889084][ C1] net_ratelimit: 16 callbacks suppressed [ 604.889090][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 604.900663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 604.969200][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 604.975023][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 605.289157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 605.295160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 605.529221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 605.535124][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 605.609115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 605.614926][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:37:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:42 executing program 5: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r3 = dup3(r0, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0xc6, "acd6f77bc650130b4bb3da1041d8e1acfc1a96658870f4756bd9c8b12b28215ae65f31bc51f0771631aec9d7e0bbcd2dd2ee9195114a50cf8f45f30ad96bb48906ec3298fa1dab3e1f99f80172b8ecada7cf8185b48f54d519ad395f7ea678c64fa8b0aabf73675d3063bcac44856dbe837f34a24907cd43878039cc716e9851e40f0447bb742dd4a2a478002e9df29e39299fee3585c0abd787912d0be61cfdbebcd6c4e1ab9b74031d9d35addbe81a73f7a758bd7206eb797f9deeb761097b42312117e123"}, &(0x7f0000000180)=0xea) 03:37:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:37:42 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:42 executing program 1: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) [ 610.169132][ C0] net_ratelimit: 24 callbacks suppressed [ 610.169142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 610.180723][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:37:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:42 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x1004080, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xb2}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) 03:37:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:37:42 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 611.129173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 611.136472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 611.209219][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.217174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 611.529170][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.535464][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 611.779196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 611.786311][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 615.289166][ C1] net_ratelimit: 16 callbacks suppressed [ 615.289172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 615.301736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 615.369258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 615.376181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 615.689233][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 615.695646][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 615.929210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 615.942738][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 616.009146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 616.015696][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:37:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, 0x0, 0x0) 03:37:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x600, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1f0, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff8d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x70}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) dup3(r0, r1, 0x0) 03:37:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:37:52 executing program 1: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:52 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x202) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, 0x0) 03:37:52 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:37:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:52 executing program 1: close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:37:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000140)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', @ifru_flags}) 03:37:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000001000001000000000000000200000000000000aefe00000000000075070000000000000204050000000000000000000000000000000000645b881c4ac6cffd00001e38aace422915c9a82f"]) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000100)={@local, @local}, 0x8) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000200)=""/162, &(0x7f0000000140)=0xa2) dup3(r0, r1, 0x0) 03:37:52 executing program 2: unshare(0x400) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 03:37:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 620.569147][ C0] net_ratelimit: 24 callbacks suppressed [ 620.569157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 620.580716][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 621.529133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 621.534951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 621.609138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 621.614968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 621.929103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 621.935673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 622.169128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.174943][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 625.689109][ C1] net_ratelimit: 16 callbacks suppressed [ 625.689115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 625.700600][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 625.769183][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 625.775246][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 626.089184][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 626.095144][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 626.329148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 626.335097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 626.409107][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 626.414966][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) 03:38:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40c0, 0x0) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000200)={{0x7, 0x0, 0xbb, 0x0, '\x00', 0x5}, 0x2, 0x2, 0xfff, r3, 0x5, 0x4, 'syz0\x00', &(0x7f00000000c0)=['\x00', '+\x00', 'vmnet1:\x00', '\x00', '\x00'], 0xd, [], [0x1, 0x100000001, 0x0, 0x9]}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x15, 0x2, 0x2, "c2fd66f698df9180afdffd34b5de14c2"}, 0x15, 0x3) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x0, 0x0, r4}) dup3(r0, r1, 0x0) 03:38:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, 0x0, 0x0) 03:38:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) 03:38:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x100, 0x540) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000400)={0x3ff}, 0x4) dup3(r0, r1, 0x0) 03:38:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 630.969111][ C0] net_ratelimit: 24 callbacks suppressed [ 630.969120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.980645][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 631.929101][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 631.934921][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 632.019145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.024969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 632.339130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.345006][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 632.569165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.575021][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 636.089127][ C1] net_ratelimit: 16 callbacks suppressed [ 636.089133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 636.100621][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 636.169193][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.175013][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 636.489173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.494982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 636.729148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.735037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 636.809208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 636.815137][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, 0x0, 0x0) 03:38:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:38:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x8080, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x1, @random="7fb2037189e6", 'ip6_vti0\x00'}}) dup3(r0, r1, 0x0) 03:38:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:38:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:13 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x4) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1}) dup3(r1, r2, 0x0) 03:38:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 641.369161][ C0] net_ratelimit: 24 callbacks suppressed [ 641.369171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 641.380676][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.329097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 642.335091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 642.409169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.415184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.729107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.735050][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.979077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.984986][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 646.489135][ C1] net_ratelimit: 16 callbacks suppressed [ 646.494995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 646.500808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 646.569175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 646.575261][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 646.889117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 646.894983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 647.129117][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 647.135194][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 647.209130][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 647.214977][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25}, 0x3) 03:38:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:38:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xa080, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x9c, "0812f7453b05442bb8272df94d53c081e55a6afb73301f41c5541017c42f5c7783f8215afe8ec4aa37f43c0de8ed4bc2cc13991588a139a681b46f848027cfe16ffcbe84cfbfdba324c33a03961feeda5afec4d94b1b935e5c18c198d0b73c874f7988ca45ae8816a40e205bc6353289ecc3b283b4edcf8f12b76252a058a0a48f829031367c823babad1364c718abdb453850f357101b38d299cb1f"}, &(0x7f0000000140)=0xc0) dup3(r0, r1, 0x0) 03:38:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:38:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 651.769108][ C0] net_ratelimit: 24 callbacks suppressed [ 651.769114][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 651.780639][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 652.729094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 652.735088][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 652.819118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 652.824981][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 653.129064][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 653.134921][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 653.369112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 653.374959][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 656.889115][ C1] net_ratelimit: 16 callbacks suppressed [ 656.889122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 656.900624][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 656.969179][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 656.974989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 657.289141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 657.294939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 657.529173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 657.535033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 657.609126][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 657.614923][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25}, 0x3) 03:38:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) dup3(r0, r1, 0x0) 03:38:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 661.375300][T27653] Unknown ioctl -2139050335 03:38:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 661.399457][T27650] Unknown ioctl -2139050335 03:38:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = getpgid(0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, r2}) dup3(r0, r1, 0x4000000000000000) 03:38:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 662.169142][ C0] net_ratelimit: 24 callbacks suppressed [ 662.174838][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 662.180633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.129113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 663.134915][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 663.209158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.215023][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.539158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.544983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.769105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.774941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.289055][ C1] net_ratelimit: 16 callbacks suppressed [ 667.289061][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 667.300554][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 667.369188][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.374997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.689108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.694888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.929167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.935037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 668.009185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 668.015116][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25}, 0x3) 03:38:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="f2abf20bad1df3", 0x7, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000200)=""/214, 0xd6) dup3(r0, r1, 0x0) 03:38:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = dup3(r0, r1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x1e, 0x3b, 0x3, 0x4, 0xb, 0x3, 0x3, 0x81}) 03:38:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 672.579146][ C0] net_ratelimit: 24 callbacks suppressed [ 672.579155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 672.590757][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 673.529152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 673.534987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 673.609153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 673.614957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 673.929070][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 673.934902][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.169095][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.174932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 677.689134][ C1] net_ratelimit: 16 callbacks suppressed [ 677.694842][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 677.700609][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 677.769191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 677.775017][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 678.089167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 678.094983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 678.329149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 678.335024][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 678.409168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 678.414991][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x800}) dup3(r0, r1, 0x0) 03:38:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, 0x0, 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:53 executing program 4: getpgid(0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 03:38:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = dup3(r0, r1, 0x0) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@exit_looper, @acquire_done={0x40106309, r3, 0x3}], 0x44, 0x0, &(0x7f0000000080)="aba48ea4f4adea9ae9a8f688520b4ff7c6660e292188ecd4f3d31b8fa94897920c6e091f93da3d41318bc322b117992899c20d5cec937f569ba1b9e222181d6d2ba5d9ca"}) 03:38:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x3, 0x4}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:38:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 682.979117][ C0] net_ratelimit: 24 callbacks suppressed [ 682.979124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 682.990665][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 683.929063][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 683.934864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 684.009151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.015172][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.339081][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.344944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 684.569102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 684.575038][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:56 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='6'], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:56 executing program 3: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x1f) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) dup3(r0, r1, 0x0) 03:38:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x22080, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)={[], 0x1f, 0xffffffff, 0x3, 0x0, 0xfffffffffffffffb, 0x100004, 0x1, [], 0x800}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x7, 0x1000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:38:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000740)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000006c0)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) keyctl$describe(0x6, r5, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000680)=0x7) pipe2(&(0x7f0000000340), 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x400}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000440)={r6, 0x7, 0x4}, &(0x7f0000000640)=0x8) clock_gettime(0x0, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r3}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) 03:38:57 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r1) fcntl$lock(r1, 0x7, &(0x7f0000002000)) ioctl$NBD_DISCONNECT(r2, 0xab08) write$vnet(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000040)=""/186, 0xba, &(0x7f0000000200)=""/232, 0x3, 0x6}}, 0x68) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000fcdbdf2501000000000000000c4100000018001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) dup3(r0, r1, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:38:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 03:38:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:38:57 executing program 4: r0 = fanotify_init(0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) fanotify_mark(r0, 0x11, 0x40000028, r1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) 03:38:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:38:57 executing program 4 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:38:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) sync_file_range(r1, 0x80000000003, 0x1, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x4) signalfd4(r1, &(0x7f0000000100)={0x9}, 0x8, 0x800) dup3(r0, r1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3e, 0x2) [ 685.835818][T28312] FAULT_INJECTION: forcing a failure. [ 685.835818][T28312] name failslab, interval 1, probability 0, space 0, times 0 [ 685.850301][T28312] CPU: 1 PID: 28312 Comm: syz-executor.4 Not tainted 5.1.0-rc1-next-20190322 #9 [ 685.859335][T28312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.869395][T28312] Call Trace: [ 685.872726][T28312] dump_stack+0x172/0x1f0 [ 685.877060][T28312] should_fail.cold+0xa/0x15 [ 685.877072][T28312] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 685.877094][T28312] ? ___might_sleep+0x163/0x280 [ 685.887517][T28312] __should_failslab+0x121/0x190 [ 685.887531][T28312] should_failslab+0x9/0x14 [ 685.887540][T28312] kmem_cache_alloc_node+0x264/0x710 [ 685.887553][T28312] ? lock_downgrade+0x880/0x880 [ 685.887566][T28312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 685.887635][T28312] __alloc_skb+0xd5/0x5e0 [ 685.923070][T28312] ? skb_trim+0x190/0x190 [ 685.927513][T28312] vhci_write+0xc4/0x470 [ 685.931772][T28312] new_sync_write+0x4c7/0x760 [ 685.936624][T28312] ? default_llseek+0x2e0/0x2e0 [ 685.941476][T28312] ? common_file_perm+0x238/0x720 [ 685.946565][T28312] ? __fget+0x381/0x550 [ 685.950738][T28312] ? apparmor_file_permission+0x25/0x30 [ 685.956386][T28312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 685.962701][T28312] ? security_file_permission+0x94/0x380 [ 685.968347][T28312] __vfs_write+0xe4/0x110 [ 685.972685][T28312] vfs_write+0x20c/0x580 [ 685.977032][T28312] ksys_write+0xea/0x1f0 [ 685.981280][T28312] ? __ia32_sys_read+0xb0/0xb0 [ 685.986059][T28312] ? do_syscall_64+0x26/0x610 [ 685.990750][T28312] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 685.996929][T28312] ? do_syscall_64+0x26/0x610 [ 686.001620][T28312] __x64_sys_write+0x73/0xb0 [ 686.006212][T28312] do_syscall_64+0x103/0x610 [ 686.010806][T28312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 686.016740][T28312] RIP: 0033:0x458209 [ 686.020638][T28312] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 686.040249][T28312] RSP: 002b:00007fb1430d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.048774][T28312] RAX: ffffffffffffffda RBX: 00007fb1430d1c90 RCX: 0000000000458209 [ 686.056893][T28312] RDX: 0000000000000003 RSI: 00000000200002c0 RDI: 0000000000000004 [ 686.064984][T28312] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 686.073333][T28312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1430d26d4 03:38:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 686.081940][T28312] R13: 00000000004c77f0 R14: 00000000004dd480 R15: 0000000000000006 03:38:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:38:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:38:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:38:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x80000) 03:38:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:38:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:38:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:38:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 688.169129][ C1] net_ratelimit: 16 callbacks suppressed [ 688.169138][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 688.169173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 688.174920][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 688.489101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 688.494996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 688.729121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 688.734965][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 688.809121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 688.814984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 689.209193][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 693.369215][ C0] net_ratelimit: 21 callbacks suppressed [ 693.374921][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 693.380738][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.409190][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 694.409196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.409282][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.415010][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 694.729099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.734912][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 694.969149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 694.975011][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:08 executing program 4 (fault-call:8 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:39:08 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:39:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000400)={0x2, 0x1, 0xfffffffffffffff9, 0x23}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r4, @ANYBLOB="10002bbd7000fbdbdf25150000002000020004000400080002000900000004000400040004000800020008000000380006000400020008000100eeed00000400020004000200080001000000000004000200040002000800010009000000080001000800000030000200040004000800020003000000040004000800020007000000040004000800100002000800020000000000040004002c00020004000400080002000600000008000100000800000800010000feffff08000100fdffffff040004000c000900080002000900000020000600080001008c00000008000100070000000400020008000100040000002000020008000100ffffffff04000400080002000600000008000100000001004c000100080003008000000008000300c2310000380004001400010002004e20ffffffff0000000000000000200002000a004e2300000000fe88000000000000000000000000010120000000840001000800030000000080340002000800030001000000080001000f000000080001001a000000080001000a00000008000300e00f0000080002007f0000000c00020008000200f7ffffff38000400200001000a004e220000003fff010000000000000000000000000001ff0300001400020002004e21ac1e00010000000000000000"], 0x1f4}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:39:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:39:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:39:08 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 696.518227][T28363] FAULT_INJECTION: forcing a failure. [ 696.518227][T28363] name failslab, interval 1, probability 0, space 0, times 0 03:39:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:39:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 696.601597][T28363] CPU: 1 PID: 28363 Comm: syz-executor.4 Not tainted 5.1.0-rc1-next-20190322 #9 [ 696.610677][T28363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.620756][T28363] Call Trace: [ 696.624101][T28363] dump_stack+0x172/0x1f0 [ 696.628569][T28363] should_fail.cold+0xa/0x15 [ 696.633197][T28363] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 696.639026][T28363] ? ___might_sleep+0x163/0x280 [ 696.639047][T28363] __should_failslab+0x121/0x190 [ 696.639069][T28363] should_failslab+0x9/0x14 [ 696.648874][T28363] kmem_cache_alloc_node_trace+0x270/0x720 [ 696.659288][T28363] __kmalloc_node_track_caller+0x3d/0x70 [ 696.665039][T28363] __kmalloc_reserve.isra.0+0x40/0xf0 [ 696.670442][T28363] __alloc_skb+0x10b/0x5e0 [ 696.674889][T28363] ? skb_trim+0x190/0x190 [ 696.679283][T28363] vhci_write+0xc4/0x470 [ 696.683720][T28363] new_sync_write+0x4c7/0x760 [ 696.688509][T28363] ? default_llseek+0x2e0/0x2e0 [ 696.693409][T28363] ? common_file_perm+0x238/0x720 03:39:08 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 696.698449][T28363] ? __fget+0x381/0x550 [ 696.702631][T28363] ? apparmor_file_permission+0x25/0x30 [ 696.708284][T28363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.714552][T28363] ? security_file_permission+0x94/0x380 [ 696.720210][T28363] __vfs_write+0xe4/0x110 [ 696.724567][T28363] vfs_write+0x20c/0x580 [ 696.728820][T28363] ksys_write+0xea/0x1f0 [ 696.733072][T28363] ? __ia32_sys_read+0xb0/0xb0 [ 696.737923][T28363] ? do_syscall_64+0x26/0x610 [ 696.743850][T28363] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.749919][T28363] ? do_syscall_64+0x26/0x610 [ 696.754599][T28363] __x64_sys_write+0x73/0xb0 [ 696.759195][T28363] do_syscall_64+0x103/0x610 [ 696.763925][T28363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.769822][T28363] RIP: 0033:0x458209 [ 696.773718][T28363] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.793342][T28363] RSP: 002b:00007fb1430d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:39:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:39:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 696.801943][T28363] RAX: ffffffffffffffda RBX: 00007fb1430d1c90 RCX: 0000000000458209 [ 696.809914][T28363] RDX: 0000000000000003 RSI: 00000000200002c0 RDI: 0000000000000004 [ 696.817916][T28363] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 696.825989][T28363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb1430d26d4 [ 696.834008][T28363] R13: 00000000004c77f0 R14: 00000000004dd480 R15: 0000000000000006 [ 698.569145][ C1] net_ratelimit: 16 callbacks suppressed [ 698.569152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 698.579147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.580634][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 698.586352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 698.889107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.894935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 699.129107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 699.134934][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 699.209108][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 699.214966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 703.769215][ C0] net_ratelimit: 22 callbacks suppressed [ 703.775013][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 703.780831][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 704.809174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 704.809214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 704.815031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 705.129160][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.134976][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.369150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 705.374960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 705.449173][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:39:18 executing program 4 (fault-call:8 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:39:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:39:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x0, 0x0, 0xfffffffffffffffc, 0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x3, 0x2, 0x1, 0xdfc}, 0x20, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x0, 0x6, 0x8}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) dup3(r0, r1, 0x0) 03:39:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:39:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0xfffffffffffffffe}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:39:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(0x0, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:39:18 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:39:19 executing program 3: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) [ 708.969110][ C1] net_ratelimit: 15 callbacks suppressed [ 708.969162][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 708.974845][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 708.974896][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 709.289120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.294941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 709.529084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.534935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 709.609218][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 709.615046][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 710.009195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 714.169151][ C0] net_ratelimit: 23 callbacks suppressed [ 714.174970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 714.180822][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.209122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 715.209127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.209203][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.215052][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 715.529169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.535180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.769101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.775151][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3}}, 0x3) 03:39:29 executing program 0 (fault-call:7 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:39:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:39:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x80000) 03:39:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:39:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:39:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:29 executing program 3: r0 = add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="2c12a81086f8c72a6c54e27e439b6eef991d704db00459fa995605f9cc5b84cd9cd5b934c3c5741135fe3c25b488a0f4cfdb347a533317e2f9733f23f4a6b04c125a88dc61e13b46e9b7eaa568f2346c3c5b39a48ee7661cb1f186f0f4fb10dcf64e9cf4eaea834a26bf4aaac37f3f6399c647603bd3b5b3bd627ae50edff13561f3de4cf0c14747", 0x88, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfff, 0x2582) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000340)={{0x1, 0x3, 0x5, 0x3, 0x4}, 0x800, 0x2}) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x4, @mcast2, 0x5}, {0xa, 0x4e23, 0x4b, @empty, 0xffff}, 0x9, [0xffffffff, 0x5, 0x3, 0xfff, 0x7, 0x80000000000006, 0x1f, 0x401]}, 0x5c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x1d, 0x4) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1}) write$P9_RLOCK(r3, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) dup3(r1, r2, 0x0) [ 719.369093][ C1] net_ratelimit: 16 callbacks suppressed [ 719.369125][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.374817][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 719.374871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 719.689097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.694982][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 719.929063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 719.934989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 720.009114][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 720.014930][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 720.409214][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 724.569182][ C0] net_ratelimit: 23 callbacks suppressed [ 724.574969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 724.580883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 725.609138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.609153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 725.609187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 725.615180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 725.929153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 725.935086][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 726.169110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 726.175073][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, 0x0) 03:39:39 executing program 3: socketpair$unix(0x1, 0x40000008, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x9}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = dup3(r1, r1, 0x80000) write$rfkill(r2, &(0x7f0000000040)={0x3f, 0x8, 0x1, 0x1}, 0x8) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:39:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x2, 0x0) 03:39:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x2}}, 0x3) 03:39:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x204001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) fcntl$lock(r2, 0x7, &(0x7f0000002000)) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000001c0)={0x1}) dup3(r1, r2, 0x0) 03:39:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:39:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:39:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x5421, 0x0) 03:39:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) [ 729.769118][ C1] net_ratelimit: 16 callbacks suppressed [ 729.769127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 729.779123][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 729.780882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 729.786562][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.089122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 730.094962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.329139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 730.335040][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 730.409175][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 730.414998][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 734.969164][ C0] net_ratelimit: 22 callbacks suppressed [ 734.974900][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.980694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.009202][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.009208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 736.009275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 736.015048][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.329180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.335052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 736.569173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 736.574984][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x4}}, 0x3) 03:39:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:39:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x100000000000, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = getpgid(0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1, 0x0, 0x100000001, 0x0, r2}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x16202, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) dup3(r0, r1, 0x80000) 03:39:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:39:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x5450, 0x0) 03:39:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x0, &(0x7f0000000240)) 03:39:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:39:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:39:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x5451, 0x0) 03:39:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) [ 740.169125][ C1] net_ratelimit: 16 callbacks suppressed [ 740.169133][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 740.169180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.174899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 740.489132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.494968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.729144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.735075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.809151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 740.814990][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 741.209195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 745.369214][ C0] net_ratelimit: 22 callbacks suppressed [ 745.374948][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 745.380789][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.409158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 746.409210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.415019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 746.729143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.734955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.969135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.974949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 747.049156][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:39:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0xfdef}}, 0x3) 03:39:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:39:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x7, 0x9, "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", 0x51, 0x1, 0x6, 0x5, 0x8, 0x6, 0xfa}, r3}}, 0x120) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:39:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x5452, 0x0) 03:39:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 03:39:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 03:39:59 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:39:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x400280, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r3, 0x7, 0x20, 0x648aeb25, 0x9}, &(0x7f0000000280)=0x18) r4 = getpid() fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x2, 0x56a, r4}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 03:40:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x24000, 0x0) write$capi20(r2, &(0x7f0000000080)={0x10, 0x1, 0x41, 0x82, 0xffff, 0x3}, 0x10) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) [ 750.569113][ C1] net_ratelimit: 14 callbacks suppressed [ 750.569119][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 750.569141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.574863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 750.580720][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 750.889201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 750.895068][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 751.129130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 751.135105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 751.209084][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 751.214891][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 755.769201][ C0] net_ratelimit: 24 callbacks suppressed [ 755.769210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 755.782067][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 756.809091][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 756.809097][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 756.809156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 756.814900][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 757.129523][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.135419][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 757.369105][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.374971][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x200002c3}}, 0x3) 03:40:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[0x0]) 03:40:10 executing program 5 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 03:40:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r2}) r3 = dup3(r1, r1, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) connect$packet(r3, &(0x7f0000000180)={0x11, 0x11, r4, 0x1, 0x0, 0x6, @remote}, 0x14) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) [ 757.907659][T29008] FAULT_INJECTION: forcing a failure. [ 757.907659][T29008] name failslab, interval 1, probability 0, space 0, times 0 [ 757.967827][T29008] CPU: 1 PID: 29008 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 757.976998][T29008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.987228][T29008] Call Trace: [ 757.990544][T29008] dump_stack+0x172/0x1f0 [ 757.994897][T29008] should_fail.cold+0xa/0x15 [ 757.999508][T29008] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.005335][T29008] ? ___might_sleep+0x163/0x280 [ 758.010291][T29008] __should_failslab+0x121/0x190 [ 758.015520][T29008] should_failslab+0x9/0x14 [ 758.020042][T29008] kmem_cache_alloc+0x2b2/0x6f0 [ 758.024965][T29008] ? __get_reqs_available+0x1aa/0x410 [ 758.030384][T29008] io_submit_one+0x131/0x1cf0 [ 758.035178][T29008] ? __might_fault+0x12b/0x1e0 [ 758.040234][T29008] ? ioctx_alloc+0x1db0/0x1db0 [ 758.045010][T29008] ? __might_fault+0x12b/0x1e0 [ 758.049811][T29008] __x64_sys_io_submit+0x1bd/0x580 [ 758.054950][T29008] ? __x64_sys_io_submit+0x1bd/0x580 [ 758.060250][T29008] ? __ia32_sys_io_destroy+0x420/0x420 [ 758.065721][T29008] ? 0xffffffff81000000 [ 758.069982][T29008] ? do_syscall_64+0x26/0x610 [ 758.074680][T29008] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.080764][T29008] ? do_syscall_64+0x26/0x610 [ 758.085483][T29008] ? lockdep_hardirqs_on+0x418/0x5d0 [ 758.090788][T29008] do_syscall_64+0x103/0x610 [ 758.095390][T29008] ? __ia32_sys_io_destroy+0x420/0x420 [ 758.100859][T29008] ? do_syscall_64+0x103/0x610 [ 758.105640][T29008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.111538][T29008] RIP: 0033:0x458209 [ 758.115437][T29008] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.135052][T29008] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 758.143490][T29008] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 758.151486][T29008] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 758.159475][T29008] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.167467][T29008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 758.175461][T29008] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 03:40:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, r2}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:10 executing program 5 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 758.384502][T29035] FAULT_INJECTION: forcing a failure. [ 758.384502][T29035] name failslab, interval 1, probability 0, space 0, times 0 [ 758.435690][T29035] CPU: 0 PID: 29035 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 758.444791][T29035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.454876][T29035] Call Trace: [ 758.458207][T29035] dump_stack+0x172/0x1f0 [ 758.462574][T29035] should_fail.cold+0xa/0x15 [ 758.467205][T29035] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.473063][T29035] ? ___might_sleep+0x163/0x280 [ 758.477941][T29035] __should_failslab+0x121/0x190 [ 758.482927][T29035] should_failslab+0x9/0x14 [ 758.487462][T29035] kmem_cache_alloc_node+0x264/0x710 [ 758.492791][T29035] __alloc_skb+0xd5/0x5e0 [ 758.497148][T29035] ? skb_trim+0x190/0x190 [ 758.501508][T29035] ? apparmor_file_permission+0x25/0x30 [ 758.507083][T29035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.513351][T29035] ? security_file_permission+0x94/0x380 [ 758.519018][T29035] vhci_write+0xc4/0x470 [ 758.523300][T29035] aio_write+0x34b/0x540 [ 758.527572][T29035] ? aio_read+0x3c0/0x3c0 [ 758.531924][T29035] ? __might_fault+0x12b/0x1e0 [ 758.536719][T29035] ? __might_fault+0x12b/0x1e0 [ 758.541516][T29035] ? lock_downgrade+0x880/0x880 [ 758.546406][T29035] io_submit_one+0x1305/0x1cf0 [ 758.551213][T29035] ? ioctx_alloc+0x1db0/0x1db0 [ 758.556004][T29035] ? __might_fault+0x12b/0x1e0 [ 758.560825][T29035] __x64_sys_io_submit+0x1bd/0x580 [ 758.565956][T29035] ? __x64_sys_io_submit+0x1bd/0x580 [ 758.571271][T29035] ? __ia32_sys_io_destroy+0x420/0x420 [ 758.576747][T29035] ? 0xffffffff81000000 [ 758.580923][T29035] ? do_syscall_64+0x26/0x610 [ 758.585619][T29035] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.591703][T29035] ? do_syscall_64+0x26/0x610 [ 758.596404][T29035] ? lockdep_hardirqs_on+0x418/0x5d0 [ 758.601730][T29035] do_syscall_64+0x103/0x610 [ 758.606389][T29035] ? __ia32_sys_io_destroy+0x420/0x420 [ 758.611883][T29035] ? do_syscall_64+0x103/0x610 [ 758.616680][T29035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.622600][T29035] RIP: 0033:0x458209 [ 758.626529][T29035] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.646502][T29035] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 758.654943][T29035] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 758.662947][T29035] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 758.670940][T29035] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.678955][T29035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 03:40:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 758.686959][T29035] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 760.969134][ C1] net_ratelimit: 16 callbacks suppressed [ 760.969142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 760.969187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 760.974919][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 761.289141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.294975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 761.529141][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.534955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 761.609147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.614973][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 762.009154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 766.169217][ C0] net_ratelimit: 22 callbacks suppressed [ 766.174943][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 766.180776][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.209168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 767.209174][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.209272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.215005][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 767.529196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.535071][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.769145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.775050][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0xfffffdef}}, 0x3) 03:40:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:20 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x10) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000000000000000100000000009200000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000949a000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000f00000000000007500000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000030100000000000e600000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) dup3(r0, r1, 0x0) 03:40:20 executing program 5 (fault-call:5 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 768.687566][T29059] FAULT_INJECTION: forcing a failure. [ 768.687566][T29059] name failslab, interval 1, probability 0, space 0, times 0 [ 768.787473][T29059] CPU: 1 PID: 29059 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 768.796582][T29059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.806667][T29059] Call Trace: [ 768.809994][T29059] dump_stack+0x172/0x1f0 [ 768.814361][T29059] should_fail.cold+0xa/0x15 [ 768.819008][T29059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 768.824848][T29059] ? ___might_sleep+0x163/0x280 [ 768.829728][T29059] __should_failslab+0x121/0x190 03:40:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) r2 = dup3(r0, r1, 0x0) r3 = getpgid(0xffffffffffffffff) fcntl$lock(r2, 0x27, &(0x7f0000000040)={0x1, 0x3, 0x7fff, 0x8000, r3}) [ 768.834694][T29059] should_failslab+0x9/0x14 [ 768.839225][T29059] kmem_cache_alloc_node_trace+0x270/0x720 [ 768.845051][T29059] __kmalloc_node_track_caller+0x3d/0x70 [ 768.850700][T29059] __kmalloc_reserve.isra.0+0x40/0xf0 [ 768.856083][T29059] __alloc_skb+0x10b/0x5e0 [ 768.860592][T29059] ? skb_trim+0x190/0x190 [ 768.860611][T29059] ? apparmor_file_permission+0x25/0x30 [ 768.860629][T29059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 768.860645][T29059] ? security_file_permission+0x94/0x380 [ 768.860663][T29059] vhci_write+0xc4/0x470 03:40:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 768.860691][T29059] aio_write+0x34b/0x540 [ 768.883097][T29059] ? aio_read+0x3c0/0x3c0 [ 768.891661][T29059] ? __might_fault+0x12b/0x1e0 [ 768.891678][T29059] ? __might_fault+0x12b/0x1e0 [ 768.891700][T29059] ? lock_downgrade+0x880/0x880 [ 768.891729][T29059] io_submit_one+0x1305/0x1cf0 [ 768.891752][T29059] ? ioctx_alloc+0x1db0/0x1db0 [ 768.910449][T29059] ? __might_fault+0x12b/0x1e0 [ 768.910489][T29059] __x64_sys_io_submit+0x1bd/0x580 [ 768.910505][T29059] ? __x64_sys_io_submit+0x1bd/0x580 [ 768.910523][T29059] ? __ia32_sys_io_destroy+0x420/0x420 [ 768.910538][T29059] ? 0xffffffff81000000 [ 768.910554][T29059] ? do_syscall_64+0x26/0x610 [ 768.910580][T29059] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.920128][T29059] ? do_syscall_64+0x26/0x610 [ 768.940783][T29059] ? lockdep_hardirqs_on+0x418/0x5d0 [ 768.940807][T29059] do_syscall_64+0x103/0x610 [ 768.940833][T29059] ? __ia32_sys_io_destroy+0x420/0x420 [ 768.956167][T29059] ? do_syscall_64+0x103/0x610 [ 768.956202][T29059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.956222][T29059] RIP: 0033:0x458209 [ 768.991011][T29059] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.010722][T29059] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 769.010736][T29059] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 769.010744][T29059] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 03:40:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 769.010752][T29059] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.010760][T29059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 769.010769][T29059] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 03:40:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = getpid() r3 = getpgid(0x0) kcmp(r2, r3, 0x7, r1, r1) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 771.369079][ C1] net_ratelimit: 16 callbacks suppressed [ 771.369111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.374776][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 771.374833][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 771.689170][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.694999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.929206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.935075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 772.009081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.014903][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 772.409201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 776.569323][ C0] net_ratelimit: 23 callbacks suppressed [ 776.575625][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 776.582700][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 777.609619][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 777.609823][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 777.616244][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 777.622750][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 777.929284][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 777.935751][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.169131][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.175431][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0xfffffffffffffdef}}, 0x3) 03:40:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:40:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r0, 0x0) 03:40:31 executing program 5 (fault-call:5 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 03:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 779.040838][T29206] FAULT_INJECTION: forcing a failure. [ 779.040838][T29206] name failslab, interval 1, probability 0, space 0, times 0 [ 779.110716][T29206] CPU: 0 PID: 29206 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 779.119881][T29206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.130040][T29206] Call Trace: [ 779.133353][T29206] dump_stack+0x172/0x1f0 [ 779.133378][T29206] should_fail.cold+0xa/0x15 [ 779.133403][T29206] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.142326][T29206] ? ___might_sleep+0x163/0x280 [ 779.142347][T29206] __should_failslab+0x121/0x190 [ 779.142364][T29206] should_failslab+0x9/0x14 [ 779.142379][T29206] kmem_cache_alloc_node+0x264/0x710 [ 779.142440][T29206] ? trace_hardirqs_off+0x62/0x220 [ 779.142463][T29206] __alloc_skb+0xd5/0x5e0 [ 779.153135][T29206] ? skb_trim+0x190/0x190 [ 779.153151][T29206] ? vhci_write+0x2b3/0x470 [ 779.153250][T29206] ? rcu_read_lock_sched_held+0x110/0x130 [ 779.153273][T29206] ? kmem_cache_free+0x225/0x260 [ 779.153290][T29206] __vhci_create_device+0x88/0x5a0 [ 779.153306][T29206] vhci_write+0x2d0/0x470 [ 779.162984][T29206] aio_write+0x34b/0x540 03:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 779.163003][T29206] ? aio_read+0x3c0/0x3c0 [ 779.163023][T29206] ? __might_fault+0x12b/0x1e0 [ 779.173403][T29206] ? __might_fault+0x12b/0x1e0 [ 779.173425][T29206] ? lock_downgrade+0x880/0x880 [ 779.173453][T29206] io_submit_one+0x1305/0x1cf0 [ 779.173479][T29206] ? ioctx_alloc+0x1db0/0x1db0 [ 779.173490][T29206] ? __might_fault+0x12b/0x1e0 [ 779.173524][T29206] __x64_sys_io_submit+0x1bd/0x580 [ 779.197279][T29206] ? __x64_sys_io_submit+0x1bd/0x580 [ 779.210942][T29206] ? __ia32_sys_io_destroy+0x420/0x420 03:40:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) [ 779.210960][T29206] ? 0xffffffff81000000 [ 779.210977][T29206] ? do_syscall_64+0x26/0x610 [ 779.211002][T29206] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.220163][T29206] ? do_syscall_64+0x26/0x610 [ 779.220181][T29206] ? lockdep_hardirqs_on+0x418/0x5d0 [ 779.220211][T29206] do_syscall_64+0x103/0x610 [ 779.220227][T29206] ? __ia32_sys_io_destroy+0x420/0x420 [ 779.220240][T29206] ? do_syscall_64+0x103/0x610 [ 779.220261][T29206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.220279][T29206] RIP: 0033:0x458209 [ 779.230047][T29206] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.230056][T29206] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 779.230070][T29206] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 779.230078][T29206] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 779.230086][T29206] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.230093][T29206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 779.230102][T29206] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 03:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 03:40:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x2}]) 03:40:31 executing program 5 (fault-call:5 fault-nth:4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 779.601179][T29336] FAULT_INJECTION: forcing a failure. [ 779.601179][T29336] name failslab, interval 1, probability 0, space 0, times 0 [ 779.630755][T29336] CPU: 0 PID: 29336 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 779.639821][T29336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.649888][T29336] Call Trace: [ 779.653189][T29336] dump_stack+0x172/0x1f0 [ 779.657551][T29336] should_fail.cold+0xa/0x15 [ 779.662151][T29336] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.667962][T29336] ? ___might_sleep+0x163/0x280 [ 779.672834][T29336] __should_failslab+0x121/0x190 [ 779.677776][T29336] should_failslab+0x9/0x14 [ 779.682278][T29336] kmem_cache_alloc_node_trace+0x270/0x720 [ 779.688092][T29336] __kmalloc_node_track_caller+0x3d/0x70 [ 779.693725][T29336] __kmalloc_reserve.isra.0+0x40/0xf0 [ 779.699096][T29336] __alloc_skb+0x10b/0x5e0 [ 779.703510][T29336] ? skb_trim+0x190/0x190 [ 779.707833][T29336] ? vhci_write+0x2b3/0x470 [ 779.712334][T29336] ? rcu_read_lock_sched_held+0x110/0x130 [ 779.718072][T29336] ? kmem_cache_free+0x225/0x260 [ 779.723011][T29336] __vhci_create_device+0x88/0x5a0 [ 779.728124][T29336] vhci_write+0x2d0/0x470 [ 779.732459][T29336] aio_write+0x34b/0x540 [ 779.736705][T29336] ? aio_read+0x3c0/0x3c0 [ 779.741125][T29336] ? __might_fault+0x12b/0x1e0 [ 779.745909][T29336] ? __might_fault+0x12b/0x1e0 [ 779.750683][T29336] ? lock_downgrade+0x880/0x880 [ 779.755552][T29336] io_submit_one+0x1305/0x1cf0 [ 779.760328][T29336] ? ioctx_alloc+0x1db0/0x1db0 [ 779.765086][T29336] ? __might_fault+0x12b/0x1e0 [ 779.776994][T29336] __x64_sys_io_submit+0x1bd/0x580 [ 779.782108][T29336] ? __x64_sys_io_submit+0x1bd/0x580 [ 779.787400][T29336] ? __ia32_sys_io_destroy+0x420/0x420 [ 779.792856][T29336] ? 0xffffffff81000000 [ 779.797098][T29336] ? do_syscall_64+0x26/0x610 [ 779.801773][T29336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.807849][T29336] ? do_syscall_64+0x26/0x610 [ 779.812522][T29336] ? lockdep_hardirqs_on+0x418/0x5d0 [ 779.817814][T29336] do_syscall_64+0x103/0x610 [ 779.822509][T29336] ? __ia32_sys_io_destroy+0x420/0x420 [ 779.827977][T29336] ? do_syscall_64+0x103/0x610 [ 779.832746][T29336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.838638][T29336] RIP: 0033:0x458209 [ 779.842533][T29336] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.862142][T29336] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 779.870824][T29336] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 779.878798][T29336] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 779.886775][T29336] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.894762][T29336] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 779.902844][T29336] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 781.929118][ C1] net_ratelimit: 16 callbacks suppressed [ 781.929127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 781.929166][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 781.934909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 782.099122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 782.104936][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 782.329147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 782.335029][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 782.409105][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 782.414938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 782.809157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 786.969148][ C0] net_ratelimit: 22 callbacks suppressed [ 786.969154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 786.980712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.169123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 788.169163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.174955][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 788.329189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.335001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.569171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 788.575049][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 788.649100][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:40:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3, 0x2}}, 0x3) 03:40:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 03:40:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 03:40:41 executing program 5 (fault-call:5 fault-nth:5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 789.277241][T29347] FAULT_INJECTION: forcing a failure. [ 789.277241][T29347] name failslab, interval 1, probability 0, space 0, times 0 [ 789.329464][T29347] CPU: 1 PID: 29347 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 789.338544][T29347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.338552][T29347] Call Trace: [ 789.338580][T29347] dump_stack+0x172/0x1f0 [ 789.338601][T29347] should_fail.cold+0xa/0x15 [ 789.338621][T29347] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 789.338642][T29347] ? ___might_sleep+0x163/0x280 [ 789.338664][T29347] __should_failslab+0x121/0x190 [ 789.338689][T29347] should_failslab+0x9/0x14 [ 789.352055][T29347] kmem_cache_alloc_trace+0x2d1/0x760 [ 789.352070][T29347] ? skb_trim+0x190/0x190 [ 789.352083][T29347] ? vhci_write+0x2b3/0x470 [ 789.352099][T29347] ? rcu_read_lock_sched_held+0x110/0x130 [ 789.352192][T29347] hci_alloc_dev+0x43/0x1d00 [ 789.352224][T29347] __vhci_create_device+0x101/0x5a0 [ 789.361147][T29347] vhci_write+0x2d0/0x470 [ 789.361166][T29347] aio_write+0x34b/0x540 [ 789.361184][T29347] ? aio_read+0x3c0/0x3c0 [ 789.361210][T29347] ? __might_fault+0x12b/0x1e0 [ 789.361227][T29347] ? __might_fault+0x12b/0x1e0 [ 789.361247][T29347] ? lock_downgrade+0x880/0x880 [ 789.361273][T29347] io_submit_one+0x1305/0x1cf0 [ 789.361296][T29347] ? ioctx_alloc+0x1db0/0x1db0 [ 789.361307][T29347] ? __might_fault+0x12b/0x1e0 [ 789.361340][T29347] __x64_sys_io_submit+0x1bd/0x580 [ 789.458175][T29347] ? __x64_sys_io_submit+0x1bd/0x580 [ 789.463474][T29347] ? __ia32_sys_io_destroy+0x420/0x420 [ 789.468949][T29347] ? 0xffffffff81000000 [ 789.473150][T29347] ? do_syscall_64+0x26/0x610 [ 789.478417][T29347] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.484510][T29347] ? do_syscall_64+0x26/0x610 [ 789.489224][T29347] ? lockdep_hardirqs_on+0x418/0x5d0 [ 789.494568][T29347] do_syscall_64+0x103/0x610 [ 789.499180][T29347] ? __ia32_sys_io_destroy+0x420/0x420 [ 789.499195][T29347] ? do_syscall_64+0x103/0x610 [ 789.499236][T29347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.499249][T29347] RIP: 0033:0x458209 [ 789.499263][T29347] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.499270][T29347] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 789.499283][T29347] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 789.499291][T29347] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 789.499300][T29347] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 789.499317][T29347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 03:40:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240000, 0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000180)={0x7, 0x2, 0x7, 0x100}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000080)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'nq\x00', 0x1, 0xf, 0x45}, 0x2c) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x51, 0xfff, 0x1, "744e23e37995e678b0f8919ab9ddf3edd7b6c57d2a7c6d381f503bc4469b7076ffb21d01726db89094f685ec7ee1362377e8c7f8b8ae945c93ffe4c6107528900a379fb786ecf2e8703bec8761629843a0"}) 03:40:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 789.509563][T29347] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 03:40:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 03:40:41 executing program 5 (fault-call:5 fault-nth:6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 03:40:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 03:40:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000200)="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", &(0x7f0000000080)=""/214}, 0x18) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) [ 789.809581][T29540] FAULT_INJECTION: forcing a failure. [ 789.809581][T29540] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 789.822844][T29540] CPU: 0 PID: 29540 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 789.831882][T29540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.841953][T29540] Call Trace: [ 789.845268][T29540] dump_stack+0x172/0x1f0 [ 789.849628][T29540] should_fail.cold+0xa/0x15 [ 789.854254][T29540] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 789.860069][T29540] ? __lock_acquire+0x548/0x3fb0 [ 789.865035][T29540] should_fail_alloc_page+0x50/0x60 [ 789.870326][T29540] __alloc_pages_nodemask+0x1a1/0x7e0 [ 789.875733][T29540] ? __alloc_pages_slowpath+0x2900/0x2900 [ 789.881469][T29540] ? find_held_lock+0x35/0x130 [ 789.881499][T29540] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 789.881516][T29540] cache_grow_begin+0x9c/0x860 [ 789.881531][T29540] ? hci_alloc_dev+0x43/0x1d00 [ 789.881547][T29540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 789.881569][T29540] kmem_cache_alloc_trace+0x67f/0x760 [ 789.892156][T29540] hci_alloc_dev+0x43/0x1d00 [ 789.892172][T29540] __vhci_create_device+0x101/0x5a0 [ 789.892188][T29540] vhci_write+0x2d0/0x470 [ 789.892215][T29540] aio_write+0x34b/0x540 [ 789.892231][T29540] ? aio_read+0x3c0/0x3c0 [ 789.892247][T29540] ? __might_fault+0x12b/0x1e0 [ 789.892261][T29540] ? __might_fault+0x12b/0x1e0 [ 789.892281][T29540] ? lock_downgrade+0x880/0x880 [ 789.892308][T29540] io_submit_one+0x1305/0x1cf0 [ 789.892330][T29540] ? ioctx_alloc+0x1db0/0x1db0 [ 789.931796][T29540] ? __might_fault+0x12b/0x1e0 [ 789.931837][T29540] __x64_sys_io_submit+0x1bd/0x580 [ 789.931860][T29540] ? __x64_sys_io_submit+0x1bd/0x580 [ 789.941067][T29540] ? __ia32_sys_io_destroy+0x420/0x420 [ 789.941083][T29540] ? 0xffffffff81000000 [ 789.941098][T29540] ? do_syscall_64+0x26/0x610 [ 789.941115][T29540] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.941127][T29540] ? do_syscall_64+0x26/0x610 [ 789.941143][T29540] ? lockdep_hardirqs_on+0x418/0x5d0 [ 789.941162][T29540] do_syscall_64+0x103/0x610 [ 789.941184][T29540] ? __ia32_sys_io_destroy+0x420/0x420 [ 789.950810][T29540] ? do_syscall_64+0x103/0x610 [ 789.950833][T29540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.950845][T29540] RIP: 0033:0x458209 [ 789.950859][T29540] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.950867][T29540] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 789.950880][T29540] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 789.950888][T29540] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 789.950904][T29540] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 789.960436][T29540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 789.960445][T29540] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 792.329095][ C0] net_ratelimit: 15 callbacks suppressed [ 792.329101][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 792.339069][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 792.340755][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 792.346438][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 792.489103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 792.494953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 792.729107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 792.734942][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 792.809082][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 792.814884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 797.369140][ C0] net_ratelimit: 23 callbacks suppressed [ 797.374886][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 797.380687][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.569147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 798.569153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.569259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.574977][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 798.729152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.735018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 798.969134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 798.974961][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:40:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) write$tun(r1, &(0x7f00000002c0)={@void, @void, @x25={0x3, 0x8}}, 0x3) 03:40:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 03:40:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 03:40:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) ioctl$FICLONE(r0, 0x40049409, r0) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:52 executing program 5 (fault-call:5 fault-nth:7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 800.892972][T29614] FAULT_INJECTION: forcing a failure. [ 800.892972][T29614] name failslab, interval 1, probability 0, space 0, times 0 [ 800.942573][T29614] CPU: 1 PID: 29614 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 800.951656][T29614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.961741][T29614] Call Trace: [ 800.965082][T29614] dump_stack+0x172/0x1f0 [ 800.969454][T29614] should_fail.cold+0xa/0x15 [ 800.974080][T29614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 800.979916][T29614] ? ___might_sleep+0x163/0x280 [ 800.984797][T29614] __should_failslab+0x121/0x190 [ 800.989761][T29614] should_failslab+0x9/0x14 [ 800.989779][T29614] __kmalloc+0x2dc/0x740 [ 800.989889][T29614] ? alloc_workqueue+0x13e/0xf30 [ 800.989911][T29614] alloc_workqueue+0x13e/0xf30 [ 800.998669][T29614] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 800.998685][T29614] ? scnprintf+0x140/0x140 [ 800.998707][T29614] ? __init_waitqueue_head+0x36/0x90 [ 800.998773][T29614] hci_register_dev+0x1b8/0x860 [ 800.998815][T29614] ? hci_init_sysfs+0x7c/0xa0 [ 801.033492][T29614] __vhci_create_device+0x2d0/0x5a0 [ 801.038690][T29614] vhci_write+0x2d0/0x470 [ 801.043022][T29614] aio_write+0x34b/0x540 [ 801.047368][T29614] ? aio_read+0x3c0/0x3c0 [ 801.051720][T29614] ? __might_fault+0x12b/0x1e0 [ 801.056519][T29614] ? __might_fault+0x12b/0x1e0 [ 801.061405][T29614] ? lock_downgrade+0x880/0x880 [ 801.066297][T29614] io_submit_one+0x1305/0x1cf0 [ 801.071096][T29614] ? ioctx_alloc+0x1db0/0x1db0 [ 801.075885][T29614] ? __might_fault+0x12b/0x1e0 [ 801.080696][T29614] __x64_sys_io_submit+0x1bd/0x580 [ 801.085863][T29614] ? __x64_sys_io_submit+0x1bd/0x580 [ 801.091194][T29614] ? __ia32_sys_io_destroy+0x420/0x420 [ 801.096686][T29614] ? 0xffffffff81000000 [ 801.100870][T29614] ? do_syscall_64+0x26/0x610 [ 801.105577][T29614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.111672][T29614] ? do_syscall_64+0x26/0x610 [ 801.116482][T29614] ? lockdep_hardirqs_on+0x418/0x5d0 [ 801.121810][T29614] do_syscall_64+0x103/0x610 [ 801.126428][T29614] ? __ia32_sys_io_destroy+0x420/0x420 [ 801.132179][T29614] ? do_syscall_64+0x103/0x610 [ 801.136992][T29614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.142911][T29614] RIP: 0033:0x458209 [ 801.146839][T29614] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.166464][T29614] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 801.174902][T29614] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 801.182897][T29614] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 03:40:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)="915165c907a8eaa5479962da2291c5f30e73d8d349db13a79348f2fa313cdd667217fd31ac47cc9ef1aab6613a904dff8c9e9eb886cfd9474144aa229005d2b1f714d6f8413144e137cc06f2c5b480c13e1c263d2974301b8ce7ff63f5500da2dadf62b16a93ee42179a8e56703d4f57b70f1f2ad4dd6108", 0x78}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f00000000c0)="1ac5d35a6d15bcb5eb12182179d1d0", 0xf}, {&(0x7f0000002040)="47f1a832408312fc6221d84bf72242e7b54c34a6478ffceb6828f5386e8e60927d1a500e05e519c68c1723c1cc06a8c07fb9649524a9ad2d7e298c0bb53aa88fb4da8c2b4c564c3cb1814aa9a9cb50ab182d56a674cddcb079d39789038dffe4f521bb839058b6a9c48913dbbf6efe1d6691fd0fd43e5cf2bc7c4dbeb9a85e5ff7de474a9f11b45e5cfdc4eecd832cc6223228da6f26c25950b7578d073f2123e99372ef9e9af47c9bab1bdcc1f959850461667f358e26d21232d7c41f8f785e6b9e0c01a61a89fa884c19adb44e4ca0ef9363667b80b5ef22b958b3e465c9958fd0aeee93f5dc3b3d91fa1a80f857a6228948fa77a22da04caacb32792a813c325e8f7bf7555a6cc831fa26b96c0db20b51149eef41533ec3c40d71e77b1c5018d75267e02e3342f98421238d683dca989a2df3367160e0c3642181887af155453996696710fefdf57e0c1c8bd3cd0cd627d480410884f3e35cfc952a2c6af005d3044d07ec8c83780b87b90edb685ddacc59cddb995e38aa8043d3f32639f748fe7a44fbc4ef9793b4ab9e88f58f99f3d819460fe97b254bbf33cf5f7d478132ff42b9165218a27da0efa2b129fcc5f2164c14572344db22d4d0c4c7ba6115443c164ab752f364b61ecd1d06363649fc2b75765129b00148ee5482e0af9cc9f508acd87fa366c6abb6d84f88e88cecaa577526d4deca311829ac89bef195b2c88995f597cce7bc4555d4fa7a760ba88e8e613423f9f2cf3f14f3103aa6c7722a47b33d152273d2b2145df6b88c7a1558a601d6ec22d7362c169484f030b1e588b63d168cb2fa2a4489671390a340c4b0b24e531e5323161e6e4fddd03a9c14fe7e5a15045304e615bca8f3b86d141f3c3a7a4cdd04d8f4ab6d44f6486e6ee5772ada5eb3f560eb4fcd420fda9ce7b9b0ac949feda9f26ec01fc061d9318544748003659c5b262ca79668dd9aaf2960ae88a6b686f30292751529f32fb00df2e7ae99dd6c0ecc096436af9033c5d7c8a7424cea891344b0e103dc86c564952e284376148805880cfe0ddd22050d76befb1ee21bfe41fdb77e0344df8eaa0c75801d4713c0c85b66dc33056d8218779a132f08cb84bd9ffaef1d1af389f3d576479b90074eadf37a1c58c2a75e8746b6068eae2fbdcb11968c0ac8415b822109e6069594ccc85d14c72630157d47d7d46fd1b1b5b9ba5346d410bbe13e11df73233f2e46a879bfeb4818950949ddeca865131c49575792c7aa222d8f6fd4bd2df78fa25b7b1046d178cc90d15f86390780a51e11cf13d6234f714fcb8acbf22cf24715fbb0eca6e7eccd3c4b35a73e5b6b4800446d204e0989a32b930905a02e33b3d6ada313767a9efccf38cf980ee7bf407c7576cb46778aa809a3b76cbc20c6218647af79aad7658da2657c55fe8906418a85fe032bd4cb32dd3c9f4d8ea8be3ed7f86d17e37a576da5f6088b6ffe8bcd319e3705a47d3badf7cc28e32ebbd6297abf1d78225519bc3a2129c03dd1a2bc12e131ffae3c6870dba357fa513cbeb3662dd32491bd4c64595029e76fcc615b2c697397f9753e73b0ef0713faa05d05c74882a177999ca80a365749ba6e018474513f9a48fe003b28d0b0115017ef1950326bca2944dc0719e61ceaea16d3f9668e7d524673e80d518002116bc2bdbebbaac4ca3e1aadb684df6fcb8fa2df419a344fd403c5563cab0d85d2bc3cdac55e0498710763c53297e4001e25dc68aeffb3b17b0821e7e2f318a63d7d86129a9e306ad6b69644ccb7e4409e256dcc5bc074f0a1e76bf725ef7c97019973090aa726e12430d26a340f77ebc8ad3d3064f45eeb70aa59908160d5a6167e56ad25aa9dad040f09b4eb3e2a92ffacd5fe221403d362290359f542ff86bfee651518d19ae7b90bad4a4592e0b1cdb94c5ba1ce656fd0db10c09043e8fa355df0e9a86eed32cffdd6a944e132077ead0dcf66d04b05219b66b6b69b93292dc00109918bc3fe32156457c3e38758f6c757a59d480efe7d60b54fa44974683df4d01c698d3256db670e9a1822cfc8d9e5da946e7375651711132b6898c2f14f3eb2e20d8743ad0ebf4cdeec45f5eb727a224ff70eb55c2a39b286f3c107b8be4b1c6c0b097ac3f84d80ee77b3529ee044fe2b30ab6e4441fa0507949841af32ca18b4e25771619789d43834712423d55d04bb0a4f1447302eba7696c8197c8bf6e1f00711987261ea48565fb9306eb5fe3d97299a2169f37b99b1bd8ff5974f2073f6846ac47d7d3a8e91fc5bbe558448f5a79f9ecf9e128ed7e02781312e4076778b33993c7d534b327d66864c746a34e9bd1a47a6f3d64d3984a0110916363a84374926eec42776b522f1d7c55466ff62be1c73bdc2ad6f7dd532663b82a933860a0ccb1c328f3aac1aa9f5735cd80a552b49d201c95051a6814a0829e2c27a43e05bb7f516dcb1adbc359eef0bacbd3f36565fc7def60dc08806bdf5063b896a3ba0297a7f856f16b99fdaddf1a2d41f16d29987cd0a6b358e40f8b56409a201bce7db6f39825ca7bc8b73070d3fd5aa594f17a645645de010e442f6f6e01237ca1a0ee7864e94f4ec0e7ac837a1685f8ff0bac3147a83d12a49775f6dec3b11d7365904f81f89c06668a2cf94bdbcecceb7f95b6664e832b48078f2c0eef752ff4ec680f4cfe5f80cef9e6cf9db7da7db809185ad27acdbb3de3c2d63f2c1e20e68b8f4ab03df0124c2cba309c20b38a74c4df950ed2bd0aa64f15d8443cc147a8fb65b76ce5bb9c2671317093bf68e28d9723bec0ea0fb3d5d92f0a9b9c8f3fe9a3705d0c726faea627c10a88fcf49a9b0a7bc17b242686358c9c81dccadc7d1c21a5ef9f35b65836b8e15ecce932f0884ae27f8e03bbfba0314421be573f088a304f0623518054eb10fc08f49e43670305c40874a968710544d65574bf1b7b7e193c5b505b03bcc56d92d697102622ed9cf6a12c0001ae8ae15338682bed46a996b7ebb61fb7149de9c1540b1ea664283a59e45f3259054feaa51025fd571cf25285af3ef38216625a49cc81df3b35c4e630db023895b8fd4081bf8f0bd6eaeed1804e79770023a6c0eaae36230580ca88a21e8269c90bfb3b863f2293502bd1210ca778a7cbccc062346e2cd3873b4195f556e05a53be0449941587fb281c1c116ef8e37401d61c4aa065adea2860e46412bdb1d00ab9bfb6c9346e2140792d09e6be48e6764593a1d1d2f1c2e6ce3457fdd0b69703098eaa710bf20559e3cd3a1e1b7328d5569b077701b253b9e3a5ba5ce40b4db9a5056dbf182098cc4922726731d39f752bcaf445911148b280e16a871bbc3c53942894cdf69f3db3e0258544ff081d6babac28c07d55aa2d4a60420388827968ab14193001fe3b3a74d1ef2de20a19ae11cc806b790d7092fc0e7cc6dbf50cf4905a91c9b7cdb54bdcd6b35e95c441776690a9d40bd60504d5f68b02c7f6a699a4cb2cc7c961e73088f66ad824171e703f961834c20af1604b9b66d762f60bd303c44f8e434da1f37c17a99542453feb22b7fb1921dd5268d015347c3173b12f4fc9ef20df91cc1b1eec63aec2ebb1e256d679e7555511abb53e0caef580f5e12c94b98a260fb31a9fc9aa0f6ab67223398ab02b04bb5af7d77ae0e8def572dcbb3fba0212ae31939397260769667afc5fdcc6683805252367539e43d265fa15baa85776125bfdc5ceb2874a264172849a5d09e38adfc22e3c3b1804c2f2c4191bece05a7ec484b2a78abf4836da12ce43bc1022349041a24d7aa5f7a28b628ab366a2e5e03828fc01154ac81726f8c9c9fdfd6860d7e3d82979dd647a95c5fff247f3d23c27c34bbe6cae66c8e7adcb378e8c80c2d8184b68b3404f27566023b02a4b286abf620e629e210616568822356e1e1c101288d7c8624884a77adaf8d86349aa982db44d47b1a582e5b873e4d610b48d56f2975cd5978e82313cb4bddd825ca919e8b53d8ce63aa427ad4cc2b18ed917a6f996fe5c25bef0efc51a3037731ed5a30fd37703e8e9e9dc430758f8f5d02fbffcd69277f7a9d3b9397124ac06960ad66955ae50714a4c8cb8dc3fb96c8a3a67e542bc0a16b05800bd547c0334ce05d59029a5eb76493387ebc82aa41353f20cd28e786851e7a3537493c7d3b16b2842cd6c9ac4cfd1d7cb32009e55a7ac33f728eaa9dd7bac5684438a9ce25ebbf3f79e9bc40daebecc7c97f171ac2b086137e6450dbbf06036f9324048ef40ce8e8f0e128d2d47e12249410481e04095c435eb426e1cdf550cfb235b188cc737d5d9d55e65be7bb0ee48e8e23199823745709d229a43d2c47d799c5228a002d87dff4e332043306fb2995face453e5c72ea40b48f0d8e3bd9d9a23705086f11d1c6548fd131605cb01361fa03ce8228c30b30568b38c48651b5d8d724722d826bfc17c07e58edba67ccf6b2bc80b15fdfb5fe8151adc6d103fdd82aa08d462e6a04a2affd285a4162b0e72e09df6c35fd2c13087f120dc6f1838fac8735a6e1566903e66121f8e694109de70e3a49a29933d77f0d3ee5303b43db557bb36bd2dce9ff4feb96c54c5c2a7f6c814e9ec4246c3c9bcc80f25b371bf30a11d5e9c758735cca8fc986b4897111c009404ff62f32ec0a06ff7c33f83bdbbdbb7e8932675fc5ed7537357977c33f3ed15167a3f98adbdbd87df8bd03b841ee8e4898d64737d43e8d0f6f2498d55176789a72c83ab5617999bd3837f9718f9736d0e9f1e21de1609ab9ef9e9d3f41245a5bea51d3d2efe20b5756e9a627c110888a031cd246e7742b07521cb4ad3d1625857d7658db268c8ed8d1d6dd7a97429094a67cf07e4152591f1070137dd2a455b97ad8a8d99d1195c0844a4f5e028b3180115a8f2d2a4a79bea0ab63b6b3053b1793a9dc56366d0de19c962227a7b031cea4a94f00c8326514528af806d19f51117b0e785a3e2b0f8d01cacd6800c62db49a7f227d6fd7fa84e48693b6d875b5520a28e7259b445015e701e9c1ba4d3d4456017b5c09b5b652fd9aafac5ce4a315f94c72d9ed708a4df1fae1bbfbe80cf73c26e37273981cb368e485cd38580950f81ee9c69c241a4d1672932cfa56046ca75bb02a96894b6d3b4b5c8e81d7b63ad9463440d2074268af406e4f75f3ac27cf67ae7028d53df21364ce35b5e52920ae7774db19101968339af34e725fa125b304564cbe5890c1deccff72746688cff018663132d15fe75bea4ab6b4d7adc5cb4b9ffc686e42f61c345eb1580559b4a9d566bf83b6833d44f2613c8ed8776999ffa5f417b4c5fb9b036219da6330e32d835f4d8119df2be55688d130722c9840e6131b0a3b536ace637bb59709a69aea97ab3586efea074ad609226260ab5b346191ea0cfd6549fb7b1186a8c88887e6f03553db16f49c8238dd8b01d8980ee7d5367228d9064f994e2561287d37abbb6193200e40180e0ea00078d8492df217519246902beea101a0e4a5ed03965463d68e9c349d89c8a13387384b3d563f6d40a5f92d473f77e22603ae8d464414cbc8f28a4c015236b0171c0f24442dc2f6f5af481aa71f888ccc6f45c4eafa14ededb9b7c55815c9f9d83e8f0aaa3672c0d3364892cd8a4f86f82a8bda0f3397169e1e8edf74c698e0c35b1fc2e1905dd07b1b4d34afbdd65af9a09e53b35df4dff2dacc80a58c96d1797dfa5b6af8d75f1e01a1a0da38f09bf9d35a75852ba770e8c0b12d9ffcd7b41ec17d40c989b8f57ac5d580ffae8bb3ae8dbc289e773e0411b7c85819de01df1da3b937da972c3135f0fd85402a47", 0x1000}, {&(0x7f0000000100)="af2a52ea141d6030749d3866071a66b725275532d22bdddf03f708c5fd94a156d9ee8d9c381bff762d8ae141d6a2eb629ff32b48ed56df329752ebef876250", 0x3f}, {&(0x7f0000000140)="ee534f8ce01a9369b8943172c4e1ff979a3e813aae3a662268b4bb1b35", 0x1d}], 0x6) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x1}) dup3(r0, r1, 0x0) 03:40:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 03:40:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000000c0)="64ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3193e66430f3a0ce397") clone(0x1a02100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000003d80), 0x14) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) [ 801.190892][T29614] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 801.198918][T29614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 801.206919][T29614] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 801.217826][T29614] Bluetooth: Can't register HCI device 03:40:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x4000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:40:53 executing program 5 (fault-call:5 fault-nth:8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0x1, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 801.467204][T29637] FAULT_INJECTION: forcing a failure. [ 801.467204][T29637] name failslab, interval 1, probability 0, space 0, times 0 [ 801.505500][T29637] CPU: 1 PID: 29637 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 801.514580][T29637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.524684][T29637] Call Trace: [ 801.528030][T29637] dump_stack+0x172/0x1f0 [ 801.532410][T29637] should_fail.cold+0xa/0x15 [ 801.537045][T29637] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 801.542868][T29637] ? ___might_sleep+0x163/0x280 [ 801.547734][T29637] __should_failslab+0x121/0x190 [ 801.552692][T29637] should_failslab+0x9/0x14 [ 801.557207][T29637] kmem_cache_alloc_trace+0x2d1/0x760 [ 801.562602][T29637] ? rcu_read_lock_sched_held+0x110/0x130 [ 801.568344][T29637] ? __kmalloc+0x5d5/0x740 [ 801.572790][T29637] alloc_workqueue_attrs+0x82/0x120 [ 801.578005][T29637] alloc_workqueue+0x17b/0xf30 [ 801.582797][T29637] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 801.588530][T29637] ? scnprintf+0x140/0x140 [ 801.588555][T29637] ? __init_waitqueue_head+0x36/0x90 [ 801.588582][T29637] hci_register_dev+0x1b8/0x860 [ 801.598276][T29637] ? hci_init_sysfs+0x7c/0xa0 [ 801.598300][T29637] __vhci_create_device+0x2d0/0x5a0 [ 801.598319][T29637] vhci_write+0x2d0/0x470 [ 801.617390][T29637] aio_write+0x34b/0x540 [ 801.623385][T29637] ? aio_read+0x3c0/0x3c0 [ 801.627763][T29637] ? __might_fault+0x12b/0x1e0 [ 801.632538][T29637] ? __might_fault+0x12b/0x1e0 [ 801.637317][T29637] ? lock_downgrade+0x880/0x880 [ 801.642183][T29637] io_submit_one+0x1305/0x1cf0 [ 801.646965][T29637] ? ioctx_alloc+0x1db0/0x1db0 [ 801.651730][T29637] ? __might_fault+0x12b/0x1e0 [ 801.656528][T29637] __x64_sys_io_submit+0x1bd/0x580 [ 801.661653][T29637] ? __x64_sys_io_submit+0x1bd/0x580 [ 801.666953][T29637] ? __ia32_sys_io_destroy+0x420/0x420 [ 801.672589][T29637] ? 0xffffffff81000000 [ 801.676770][T29637] ? do_syscall_64+0x26/0x610 [ 801.681485][T29637] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.687557][T29637] ? do_syscall_64+0x26/0x610 [ 801.692253][T29637] ? lockdep_hardirqs_on+0x418/0x5d0 [ 801.697548][T29637] do_syscall_64+0x103/0x610 [ 801.702143][T29637] ? __ia32_sys_io_destroy+0x420/0x420 [ 801.707626][T29637] ? do_syscall_64+0x103/0x610 [ 801.712491][T29637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.718393][T29637] RIP: 0033:0x458209 [ 801.722292][T29637] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.741912][T29637] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 801.750341][T29637] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 801.758856][T29637] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 801.766875][T29637] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 801.774870][T29637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 801.783302][T29637] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 801.797050][T29637] WARNING: CPU: 1 PID: 29637 at kernel/locking/lockdep.c:4925 lockdep_unregister_key+0x1ef/0x4c0 [ 801.807586][T29637] Kernel panic - not syncing: panic_on_warn set ... [ 801.821413][T29637] CPU: 1 PID: 29637 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 801.830612][T29637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.840877][T29637] Call Trace: [ 801.844222][T29637] dump_stack+0x172/0x1f0 [ 801.848651][T29637] ? lockdep_unregister_key+0x180/0x4c0 [ 801.854288][T29637] panic+0x2cb/0x65c [ 801.858387][T29637] ? __warn_printk+0xf3/0xf3 [ 801.863079][T29637] ? lockdep_unregister_key+0x1ef/0x4c0 [ 801.868732][T29637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 801.874994][T29637] ? __warn.cold+0x5/0x45 [ 801.879351][T29637] ? lockdep_unregister_key+0x1ef/0x4c0 [ 801.884915][T29637] __warn.cold+0x20/0x45 [ 801.889188][T29637] ? lockdep_unregister_key+0x1ef/0x4c0 [ 801.895199][T29637] report_bug+0x263/0x2b0 [ 801.899778][T29637] do_error_trap+0x11b/0x200 [ 801.904377][T29637] do_invalid_op+0x37/0x50 [ 801.908785][T29637] ? lockdep_unregister_key+0x1ef/0x4c0 [ 801.914336][T29637] invalid_op+0x14/0x20 [ 801.918497][T29637] RIP: 0010:lockdep_unregister_key+0x1ef/0x4c0 [ 801.924774][T29637] Code: 00 00 00 00 00 fc ff df 4c 89 c2 48 c1 ea 03 80 3c 02 00 0f 85 c9 02 00 00 48 b8 00 02 00 00 00 00 ad de 49 89 44 24 08 eb 02 <0f> 0b ba 01 00 00 00 4c 89 e6 4c 89 ff e8 8f de ff ff 4c 89 ff e8 [ 801.944469][T29637] RSP: 0018:ffff888059527878 EFLAGS: 00010046 [ 801.950538][T29637] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffffffff12bd6ef [ 801.958511][T29637] RDX: 1ffffffff1468a98 RSI: 0000000000000000 RDI: ffffffff8a3454c0 [ 801.966490][T29637] RBP: ffff8880595278a8 R08: 1ffff1100b2a4f03 R09: ffffed100b2a4f04 [ 801.974471][T29637] R10: ffffed100b2a4f03 R11: 0000000000000003 R12: ffff88808950b958 [ 801.982626][T29637] R13: dffffc0000000000 R14: 0000000000000282 R15: ffffffff8a0bd778 [ 801.990801][T29637] ? lockdep_unregister_key+0xa7/0x4c0 [ 801.996271][T29637] alloc_workqueue+0xc52/0xf30 [ 802.001042][T29637] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 802.006767][T29637] ? scnprintf+0x140/0x140 [ 802.011411][T29637] ? __init_waitqueue_head+0x36/0x90 [ 802.016885][T29637] hci_register_dev+0x1b8/0x860 [ 802.021749][T29637] ? hci_init_sysfs+0x7c/0xa0 [ 802.026440][T29637] __vhci_create_device+0x2d0/0x5a0 [ 802.031687][T29637] vhci_write+0x2d0/0x470 [ 802.036423][T29637] aio_write+0x34b/0x540 [ 802.040673][T29637] ? aio_read+0x3c0/0x3c0 [ 802.044995][T29637] ? __might_fault+0x12b/0x1e0 [ 802.049836][T29637] ? __might_fault+0x12b/0x1e0 [ 802.054611][T29637] ? lock_downgrade+0x880/0x880 [ 802.059906][T29637] io_submit_one+0x1305/0x1cf0 [ 802.064906][T29637] ? ioctx_alloc+0x1db0/0x1db0 [ 802.069877][T29637] ? __might_fault+0x12b/0x1e0 [ 802.074656][T29637] __x64_sys_io_submit+0x1bd/0x580 [ 802.079813][T29637] ? __x64_sys_io_submit+0x1bd/0x580 [ 802.085262][T29637] ? __ia32_sys_io_destroy+0x420/0x420 [ 802.091047][T29637] ? 0xffffffff81000000 [ 802.095741][T29637] ? do_syscall_64+0x26/0x610 [ 802.100531][T29637] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.106693][T29637] ? do_syscall_64+0x26/0x610 [ 802.111447][T29637] ? lockdep_hardirqs_on+0x418/0x5d0 [ 802.116741][T29637] do_syscall_64+0x103/0x610 [ 802.121497][T29637] ? __ia32_sys_io_destroy+0x420/0x420 [ 802.126959][T29637] ? do_syscall_64+0x103/0x610 [ 802.131838][T29637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.137736][T29637] RIP: 0033:0x458209 [ 802.142194][T29637] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.162006][T29637] RSP: 002b:00007fd6d6112c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 802.170556][T29637] RAX: ffffffffffffffda RBX: 00007fd6d6112c90 RCX: 0000000000458209 [ 802.178532][T29637] RDX: 0000000020000240 RSI: 0000000000001400 RDI: 00007fd6d60f2000 [ 802.186554][T29637] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 802.194533][T29637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6d61136d4 [ 802.202542][T29637] R13: 00000000004bf36f R14: 00000000004d0d30 R15: 0000000000000005 [ 802.211308][T29637] Kernel Offset: disabled [ 802.216125][T29637] Rebooting in 86400 seconds..