getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000050000d7000000db073386666d40ded6fb6b0a41752eb5f66e29165dceaf5b698d1f17a84bbce2da4da54f3eea5bbddb33a8607614400280abfcc6812ee1ea79422515ef6b80d742a7188241bcd72b813a864e042d82ed6703943758a511cba7fea2676d24551f645fce6f66d2b90c3e1eaf6e22666d55d13417ac2105750f830f1665e9952007401135f0c9d99358f9953f6ed2e484ccb3d2fe165ac6073df60b7c66f6e50dd41d5be419451851396a7e64eacec3678844758b963bc0ee28913e39f97a664da9be03eaa7bb895008173a978bd1ec7893e3232373ba115776ae3117c2e1448b86e5232e16e5f6d529af5fca026bf28514eb8ac2c1b70e5269344f7d58738fe85a73328f5b4ad31c227ed016ce5a760b4019b0e11f2b39501cb70b552c98167a43b133364bfd78525d816bdd90854cbd924af77e614dce7136056a4ef8099d0472caa903a92553165e8092a7a0a44a849dfe81a6aa5493aaad43db3ff73111471a5719480d09b5f86fddd7f73df06257cbe2a55547c83f0c4ac3acc681cdfb35d57330fe50b33277d7749a67f6c57e00399d7654df8e59def0a4fc482d738dfa65fb5e9b229c08f654867633c034650f7cc024859c19ad22af8ab7746354bc7f065741ca4e40966af390d630b65b3ce26e"], &(0x7f0000000180)=0xfb) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x401) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r6, 0x12) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r7, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000340)) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:11 executing program 2 (fault-call:4 fault-nth:10): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2849.498371][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3762f9b6d4 [ 2849.506337][T14793] R13: 00000000004c0cb2 R14: 00000000004d3d80 R15: 0000000000000005 [ 2849.514320][T15311] CPU: 1 PID: 15311 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2849.522217][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.532280][T15311] Call Trace: [ 2849.535731][T15311] dump_stack+0x1d8/0x2f8 [ 2849.540091][T15311] should_fail+0x555/0x770 [ 2849.544523][T15311] should_fail_alloc_page+0x55/0x60 [ 2849.550075][T15311] prepare_alloc_pages+0x283/0x470 [ 2849.555199][T15311] __alloc_pages_nodemask+0xb2/0x5d0 [ 2849.560494][T15311] alloc_pages_current+0x2db/0x500 [ 2849.565596][T15311] push_pipe+0x3b1/0x750 [ 2849.565607][T15311] __pipe_get_pages+0x8b/0x390 [ 2849.565617][T15311] ? __kmalloc_node+0x4d/0x60 [ 2849.565626][T15311] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2849.565638][T15311] default_file_splice_read+0x10e/0x8d0 [ 2849.565646][T15311] ? trace_lock_release+0x135/0x1a0 [ 2849.565655][T15311] ? rcu_lock_release+0x4/0x20 03:37:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2849.565666][T15311] ? fsnotify+0x1318/0x13d0 [ 2849.565686][T15311] ? security_file_permission+0x23c/0x350 [ 2849.579343][T15311] ? rw_verify_area+0x1c2/0x360 [ 2849.579352][T15311] ? __ia32_sys_tee+0xb0/0xb0 [ 2849.579362][T15311] splice_direct_to_actor+0x39c/0xac0 [ 2849.579373][T15311] ? do_splice_direct+0x330/0x330 [ 2849.590601][T15311] do_splice_direct+0x200/0x330 [ 2849.590618][T15311] ? security_file_permission+0x110/0x350 [ 2849.590631][T15311] do_sendfile+0x7e4/0xfd0 [ 2849.646290][T15311] __x64_sys_sendfile64+0xfc/0x1b0 [ 2849.646305][T15311] do_syscall_64+0xfe/0x140 [ 2849.655991][T15311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2849.655999][T15311] RIP: 0033:0x4598e9 [ 2849.656007][T15311] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2849.656012][T15311] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:37:11 executing program 2 (fault-call:4 fault-nth:11): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x707100}]) [ 2849.656020][T15311] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2849.656025][T15311] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2849.656029][T15311] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2849.656034][T15311] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2849.656038][T15311] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2849.752076][T15422] FAULT_INJECTION: forcing a failure. [ 2849.752076][T15422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2849.836024][T15422] CPU: 1 PID: 15422 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2849.844604][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.854691][T15422] Call Trace: [ 2849.858082][T15422] dump_stack+0x1d8/0x2f8 [ 2849.862427][T15422] should_fail+0x555/0x770 [ 2849.866868][T15422] should_fail_alloc_page+0x55/0x60 [ 2849.872082][T15422] prepare_alloc_pages+0x283/0x470 [ 2849.877211][T15422] __alloc_pages_nodemask+0xb2/0x5d0 [ 2849.882514][T15422] alloc_pages_current+0x2db/0x500 [ 2849.887886][T15422] push_pipe+0x3b1/0x750 [ 2849.892144][T15422] __pipe_get_pages+0x8b/0x390 [ 2849.896973][T15422] ? __kmalloc_node+0x4d/0x60 [ 2849.896983][T15422] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2849.896994][T15422] default_file_splice_read+0x10e/0x8d0 [ 2849.897002][T15422] ? trace_lock_release+0x135/0x1a0 [ 2849.897009][T15422] ? rcu_lock_release+0x4/0x20 [ 2849.897019][T15422] ? fsnotify+0x1318/0x13d0 [ 2849.897034][T15422] ? security_file_permission+0x23c/0x350 [ 2849.897046][T15422] ? rw_verify_area+0x1c2/0x360 [ 2849.939100][T15422] ? __ia32_sys_tee+0xb0/0xb0 [ 2849.943842][T15422] splice_direct_to_actor+0x39c/0xac0 [ 2849.949201][T15422] ? do_splice_direct+0x330/0x330 [ 2849.954221][T15422] do_splice_direct+0x200/0x330 [ 2849.959235][T15422] ? security_file_permission+0x110/0x350 [ 2849.965075][T15422] do_sendfile+0x7e4/0xfd0 [ 2849.969544][T15422] __x64_sys_sendfile64+0xfc/0x1b0 [ 2849.974639][T15422] do_syscall_64+0xfe/0x140 [ 2849.979299][T15422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2849.985383][T15422] RIP: 0033:0x4598e9 [ 2849.989265][T15422] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2850.009107][T15422] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2850.017504][T15422] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2850.025462][T15422] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:11 executing program 1 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:11 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000280)=""/250) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xd09, 0x1) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r6, 0x0) r7 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x0, 0x0, [0x524, 0x5, 0x0, 0x96, 0x5, 0x5, 0x1, 0xfffffffffffffffd]}) r8 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) sendfile(r8, r7, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x70e000}]) [ 2850.033547][T15422] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2850.041507][T15422] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2850.049464][T15422] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:11 executing program 2 (fault-call:4 fault-nth:12): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2850.161938][T15726] FAULT_INJECTION: forcing a failure. [ 2850.161938][T15726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2850.180852][T15726] CPU: 0 PID: 15726 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2850.188802][T15726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.198972][T15726] Call Trace: [ 2850.198988][T15726] dump_stack+0x1d8/0x2f8 [ 2850.199001][T15726] should_fail+0x555/0x770 03:37:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x717000}]) [ 2850.199014][T15726] should_fail_alloc_page+0x55/0x60 [ 2850.199024][T15726] prepare_alloc_pages+0x283/0x470 [ 2850.199036][T15726] __alloc_pages_nodemask+0xb2/0x5d0 [ 2850.199051][T15726] alloc_pages_current+0x2db/0x500 [ 2850.199061][T15726] push_pipe+0x3b1/0x750 [ 2850.199072][T15726] __pipe_get_pages+0x8b/0x390 [ 2850.199082][T15726] ? __kmalloc_node+0x4d/0x60 [ 2850.199093][T15726] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2850.199103][T15726] default_file_splice_read+0x10e/0x8d0 [ 2850.199116][T15726] ? trace_lock_release+0x135/0x1a0 [ 2850.211257][T15726] ? rcu_lock_release+0x4/0x20 [ 2850.211271][T15726] ? fsnotify+0x1318/0x13d0 [ 2850.211289][T15726] ? security_file_permission+0x23c/0x350 [ 2850.211302][T15726] ? rw_verify_area+0x1c2/0x360 [ 2850.282933][T15726] ? __ia32_sys_tee+0xb0/0xb0 [ 2850.287752][T15726] splice_direct_to_actor+0x39c/0xac0 [ 2850.293110][T15726] ? do_splice_direct+0x330/0x330 [ 2850.298124][T15726] do_splice_direct+0x200/0x330 [ 2850.303179][T15726] ? security_file_permission+0x110/0x350 [ 2850.309231][T15726] do_sendfile+0x7e4/0xfd0 [ 2850.313647][T15726] __x64_sys_sendfile64+0xfc/0x1b0 [ 2850.318837][T15726] do_syscall_64+0xfe/0x140 [ 2850.323468][T15726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2850.329356][T15726] RIP: 0033:0x4598e9 [ 2850.333365][T15726] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2850.353511][T15726] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:37:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xc000ffd, 0x10a000d02) 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:12 executing program 2 (fault-call:4 fault-nth:13): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2850.362021][T15726] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2850.370143][T15726] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2850.378172][T15726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2850.386191][T15726] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2850.394236][T15726] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x760000}]) 03:37:12 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2850.527451][T15971] FAULT_INJECTION: forcing a failure. [ 2850.527451][T15971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2850.562612][T15971] CPU: 1 PID: 15971 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2850.570908][T15971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.581060][T15971] Call Trace: [ 2850.584381][T15971] dump_stack+0x1d8/0x2f8 [ 2850.588757][T15971] should_fail+0x555/0x770 [ 2850.593189][T15971] should_fail_alloc_page+0x55/0x60 [ 2850.598655][T15971] prepare_alloc_pages+0x283/0x470 [ 2850.603761][T15971] __alloc_pages_nodemask+0xb2/0x5d0 [ 2850.609056][T15971] alloc_pages_current+0x2db/0x500 [ 2850.614190][T15971] push_pipe+0x3b1/0x750 [ 2850.618473][T15971] __pipe_get_pages+0x8b/0x390 [ 2850.623356][T15971] ? __kmalloc_node+0x4d/0x60 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2850.628051][T15971] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2850.633619][T15971] default_file_splice_read+0x10e/0x8d0 [ 2850.639174][T15971] ? trace_lock_release+0x135/0x1a0 [ 2850.644495][T15971] ? rcu_lock_release+0x4/0x20 [ 2850.649364][T15971] ? fsnotify+0x1318/0x13d0 [ 2850.653983][T15971] ? security_file_permission+0x23c/0x350 [ 2850.659699][T15971] ? rw_verify_area+0x1c2/0x360 [ 2850.664546][T15971] ? __ia32_sys_tee+0xb0/0xb0 [ 2850.664554][T15971] splice_direct_to_actor+0x39c/0xac0 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2850.664561][T15971] ? do_splice_direct+0x330/0x330 [ 2850.664574][T15971] do_splice_direct+0x200/0x330 [ 2850.664587][T15971] ? security_file_permission+0x110/0x350 [ 2850.664596][T15971] do_sendfile+0x7e4/0xfd0 [ 2850.664611][T15971] __x64_sys_sendfile64+0xfc/0x1b0 [ 2850.664623][T15971] do_syscall_64+0xfe/0x140 [ 2850.704793][T15971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2850.710696][T15971] RIP: 0033:0x4598e9 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc1005667, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2850.714605][T15971] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2850.734506][T15971] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2850.743015][T15971] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2850.751144][T15971] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2850.759131][T15971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2850.767242][T15971] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) ioprio_set$uid(0x0, 0x0, 0x5e62) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0x10) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xa37, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x1dda0647}) [ 2850.775231][T15971] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:12 executing program 2 (fault-call:4 fault-nth:14): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x960000}]) 03:37:12 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:12 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r6 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x53, &(0x7f0000000300)={@remote, @remote, [], {@llc_tr={0x11, {@llc={0xdc, 0xd3, "7906", "994fee6446af8a150d24ac7565692a5eb946e5d2b582ac4da45d636e6d5b4da0b51ef74519f9fd53f35e8af2b6437015279dbd2e30d1a9b9a666cb40f07b12b3a9"}}}}}, &(0x7f0000000380)={0x1, 0x3, [0x984, 0x5d7, 0x9cf, 0x5bb]}) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a00000027bd700000000000030006000000000002000000e0000009000000000000000002000100000000070000000000000000030005000000000002000000e00000010000000000000000e0ad12af1515241b13db2cead501ea69790255"], 0x50}}, 0x0) r7 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r7, 0x0) r8 = fsmount(r7, 0x3, 0x70) sync_file_range(r8, 0xfb9e, 0x9, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8080010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r5, 0x100, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x240580c0) [ 2850.919152][T16598] FAULT_INJECTION: forcing a failure. [ 2850.919152][T16598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2850.951786][T16598] CPU: 1 PID: 16598 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2850.959737][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.969797][T16598] Call Trace: [ 2850.969814][T16598] dump_stack+0x1d8/0x2f8 [ 2850.969828][T16598] should_fail+0x555/0x770 [ 2850.969841][T16598] should_fail_alloc_page+0x55/0x60 [ 2850.969851][T16598] prepare_alloc_pages+0x283/0x470 [ 2850.969861][T16598] __alloc_pages_nodemask+0xb2/0x5d0 [ 2850.969874][T16598] alloc_pages_current+0x2db/0x500 [ 2850.969888][T16598] push_pipe+0x3b1/0x750 [ 2850.982020][T16598] __pipe_get_pages+0x8b/0x390 [ 2850.982036][T16598] ? __kmalloc_node+0x4d/0x60 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2851.016836][T16598] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2851.022423][T16598] default_file_splice_read+0x10e/0x8d0 [ 2851.027978][T16598] ? trace_lock_release+0x135/0x1a0 [ 2851.033310][T16598] ? rcu_lock_release+0x4/0x20 [ 2851.038108][T16598] ? fsnotify+0x1318/0x13d0 [ 2851.042629][T16598] ? security_file_permission+0x23c/0x350 [ 2851.048496][T16598] ? rw_verify_area+0x1c2/0x360 [ 2851.053356][T16598] ? __ia32_sys_tee+0xb0/0xb0 [ 2851.058045][T16598] splice_direct_to_actor+0x39c/0xac0 [ 2851.063423][T16598] ? do_splice_direct+0x330/0x330 [ 2851.068786][T16598] do_splice_direct+0x200/0x330 [ 2851.073651][T16598] ? security_file_permission+0x110/0x350 [ 2851.079383][T16598] do_sendfile+0x7e4/0xfd0 [ 2851.083916][T16598] __x64_sys_sendfile64+0xfc/0x1b0 [ 2851.090272][T16598] do_syscall_64+0xfe/0x140 [ 2851.094792][T16598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2851.100693][T16598] RIP: 0033:0x4598e9 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2851.104595][T16598] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2851.124206][T16598] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2851.132821][T16598] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2851.140931][T16598] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2851.140935][T16598] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2851.140939][T16598] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:12 executing program 2 (fault-call:4 fault-nth:15): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:12 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2851.140943][T16598] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xe07000}]) 03:37:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2851.267551][T16902] FAULT_INJECTION: forcing a failure. [ 2851.267551][T16902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:37:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400102, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000ede000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000140), 0x2) 03:37:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2851.380923][T16902] CPU: 0 PID: 16902 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2851.388876][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2851.399057][T16902] Call Trace: [ 2851.402368][T16902] dump_stack+0x1d8/0x2f8 [ 2851.406717][T16902] should_fail+0x555/0x770 [ 2851.411154][T16902] should_fail_alloc_page+0x55/0x60 [ 2851.416369][T16902] prepare_alloc_pages+0x283/0x470 [ 2851.421662][T16902] __alloc_pages_nodemask+0xb2/0x5d0 [ 2851.426967][T16902] alloc_pages_current+0x2db/0x500 [ 2851.432208][T16902] push_pipe+0x3b1/0x750 [ 2851.436580][T16902] __pipe_get_pages+0x8b/0x390 [ 2851.441370][T16902] ? __kmalloc_node+0x4d/0x60 [ 2851.446061][T16902] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2851.451768][T16902] default_file_splice_read+0x10e/0x8d0 [ 2851.451778][T16902] ? trace_lock_release+0x135/0x1a0 [ 2851.451791][T16902] ? rcu_lock_release+0x4/0x20 [ 2851.467804][T16902] ? fsnotify+0x1318/0x13d0 [ 2851.467822][T16902] ? security_file_permission+0x23c/0x350 [ 2851.467831][T16902] ? rw_verify_area+0x1c2/0x360 [ 2851.467841][T16902] ? __ia32_sys_tee+0xb0/0xb0 [ 2851.467850][T16902] splice_direct_to_actor+0x39c/0xac0 [ 2851.467863][T16902] ? do_splice_direct+0x330/0x330 [ 2851.498261][T16902] do_splice_direct+0x200/0x330 [ 2851.503132][T16902] ? security_file_permission+0x110/0x350 [ 2851.508867][T16902] do_sendfile+0x7e4/0xfd0 [ 2851.513516][T16902] __x64_sys_sendfile64+0xfc/0x1b0 [ 2851.518818][T16902] do_syscall_64+0xfe/0x140 [ 2851.523333][T16902] entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:37:13 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x38d5c2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.proc\xb7\xc1\\\xa8\x0f\xcc*O\xbc\x01U\"N\xafa\x86tM\x8a\xc6\xa7\b\xadV\x83\x8ej\xeb\xed\xbeN\f\xb8]\x1f(\x1f\x197\x9c\xac\xf3?\xdc\xa9\x14\x8b\xceAZS\n\xda\xf5\xac\xd4f\x01L\r7\xe2`\tl\xa2\x82\x83\xcc#\xe0G\xaa_\x86\xfe;\x10\xd9U\x1c}\xef\xdcL6\x03\x9c\xd3\x9e\xe0:O/\x8aC\xd4P\x01\x00sK\xd8\xec\xffP7\x04\x9bd\x88\xeb\xcb\xcc\x9dj\xbc\xe0\xaa+\xba\xa4\xb1\x002\xf8Vf\xaab\xb1\xd6P\xe1\xe3\x81(\x1eD\xc1\x01\xc94\x8d6~\xe7\x1c\xa4\xa9\xf7|\xf9>\xe1\xbe\xda\x0e\xa1%d1\x1e\x94d\xfa0[\xb2\xaa\x1a\x00\x00\x00i~T\xcb\n|\t\xbb\x10~\x9b\x7fG9\xee\xa8\x00\xb9~\x1c\xc0\x9eU\'\x9e\xe1\xfb|\xd2\x8fh\xf9\xacuQ\x7f\xd9\x8f\x05f\xa2\xd5\xac5t5o2~\xf9DG\x0f\xa2\xe9o\fW\xf0k\x94\xbb\xc2i\xfb\xaeM~o\x80h2\nq\x9a\\\x1f\x02\x9a\xa9\xb6\x84D\xc8\xe3\xf1lu?{\x02\x1e&\xe9Y\xd7D\x96/V.\xce$\xed \xd64\xd5\xbd\xfd\b\x05\xc0\x81\x00'/312, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2851.529370][T16902] RIP: 0033:0x4598e9 [ 2851.533504][T16902] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2851.557586][T16902] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2851.557594][T16902] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 03:37:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xf05000}]) [ 2851.557598][T16902] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2851.557602][T16902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2851.557606][T16902] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2851.557610][T16902] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:13 executing program 2 (fault-call:4 fault-nth:16): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000048}, 0x800) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r6, 0x0) r7 = inotify_add_watch(r6, &(0x7f0000000380)='./file0\x00', 0x2000000) inotify_rm_watch(r5, r7) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1100800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x605, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x2, 0x0, 0x1, 0xc8, 0xf}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20024858) 03:37:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfeffff}]) 03:37:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2851.849474][T17603] FAULT_INJECTION: forcing a failure. [ 2851.849474][T17603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.879006][T17603] CPU: 0 PID: 17603 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2851.887106][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:37:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2851.887110][T17603] Call Trace: [ 2851.887127][T17603] dump_stack+0x1d8/0x2f8 [ 2851.887140][T17603] should_fail+0x555/0x770 [ 2851.887153][T17603] should_fail_alloc_page+0x55/0x60 [ 2851.887163][T17603] prepare_alloc_pages+0x283/0x470 [ 2851.887176][T17603] __alloc_pages_nodemask+0xb2/0x5d0 [ 2851.900766][T17603] alloc_pages_current+0x2db/0x500 [ 2851.900778][T17603] push_pipe+0x3b1/0x750 [ 2851.900791][T17603] __pipe_get_pages+0x8b/0x390 [ 2851.940205][T17603] ? __kmalloc_node+0x4d/0x60 [ 2851.945017][T17603] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2851.951007][T17603] default_file_splice_read+0x10e/0x8d0 [ 2851.956573][T17603] ? trace_lock_release+0x135/0x1a0 [ 2851.961770][T17603] ? rcu_lock_release+0x4/0x20 [ 2851.966730][T17603] ? fsnotify+0x1318/0x13d0 [ 2851.971472][T17603] ? security_file_permission+0x23c/0x350 [ 2851.977803][T17603] ? rw_verify_area+0x1c2/0x360 [ 2851.982655][T17603] ? __ia32_sys_tee+0xb0/0xb0 [ 2851.987451][T17603] splice_direct_to_actor+0x39c/0xac0 [ 2851.992823][T17603] ? do_splice_direct+0x330/0x330 [ 2851.997852][T17603] do_splice_direct+0x200/0x330 [ 2852.002696][T17603] ? security_file_permission+0x110/0x350 [ 2852.008558][T17603] do_sendfile+0x7e4/0xfd0 [ 2852.013324][T17603] __x64_sys_sendfile64+0xfc/0x1b0 [ 2852.018427][T17603] do_syscall_64+0xfe/0x140 [ 2852.022924][T17603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2852.029078][T17603] RIP: 0033:0x4598e9 [ 2852.033013][T17603] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2852.053064][T17603] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2852.061744][T17603] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2852.070041][T17603] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2852.078024][T17603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2852.086304][T17603] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:13 executing program 2 (fault-call:4 fault-nth:17): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:13 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:13 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2852.094503][T17603] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x8, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x1000000}]) [ 2852.215711][T17808] FAULT_INJECTION: forcing a failure. [ 2852.215711][T17808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2852.249189][T17810] FAULT_INJECTION: forcing a failure. [ 2852.249189][T17810] name failslab, interval 1, probability 0, space 0, times 0 [ 2852.264837][T17808] CPU: 1 PID: 17808 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2852.272856][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.282923][T17808] Call Trace: [ 2852.286226][T17808] dump_stack+0x1d8/0x2f8 [ 2852.290829][T17808] should_fail+0x555/0x770 [ 2852.295257][T17808] should_fail_alloc_page+0x55/0x60 [ 2852.300461][T17808] prepare_alloc_pages+0x283/0x470 [ 2852.305676][T17808] __alloc_pages_nodemask+0xb2/0x5d0 [ 2852.311250][T17808] alloc_pages_current+0x2db/0x500 [ 2852.316369][T17808] push_pipe+0x3b1/0x750 [ 2852.320759][T17808] __pipe_get_pages+0x8b/0x390 [ 2852.325726][T17808] ? __kmalloc_node+0x4d/0x60 [ 2852.330613][T17808] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2852.336185][T17808] default_file_splice_read+0x10e/0x8d0 [ 2852.341741][T17808] ? trace_lock_release+0x135/0x1a0 [ 2852.346946][T17808] ? rcu_lock_release+0x4/0x20 [ 2852.351900][T17808] ? fsnotify+0x1318/0x13d0 [ 2852.356425][T17808] ? security_file_permission+0x23c/0x350 03:37:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2852.362164][T17808] ? rw_verify_area+0x1c2/0x360 [ 2852.367035][T17808] ? __ia32_sys_tee+0xb0/0xb0 [ 2852.371717][T17808] splice_direct_to_actor+0x39c/0xac0 [ 2852.377609][T17808] ? do_splice_direct+0x330/0x330 [ 2852.382817][T17808] do_splice_direct+0x200/0x330 [ 2852.388024][T17808] ? security_file_permission+0x110/0x350 [ 2852.393803][T17808] do_sendfile+0x7e4/0xfd0 [ 2852.398327][T17808] __x64_sys_sendfile64+0xfc/0x1b0 [ 2852.403564][T17808] do_syscall_64+0xfe/0x140 [ 2852.408107][T17808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2852.414211][T17808] RIP: 0033:0x4598e9 [ 2852.414220][T17808] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2852.414224][T17808] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2852.414232][T17808] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2852.414237][T17808] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2852.414242][T17808] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2852.414247][T17808] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2852.414252][T17808] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2852.417321][T17810] CPU: 1 PID: 17810 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 2852.439304][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.439308][T17810] Call Trace: [ 2852.439323][T17810] dump_stack+0x1d8/0x2f8 [ 2852.439335][T17810] should_fail+0x555/0x770 [ 2852.439347][T17810] __should_failslab+0x11a/0x160 [ 2852.439356][T17810] ? kmalloc_array+0x2f/0x50 [ 2852.439365][T17810] should_failslab+0x9/0x20 [ 2852.439375][T17810] __kmalloc+0x7a/0x340 [ 2852.439383][T17810] ? trace_lock_release+0x135/0x1a0 [ 2852.439392][T17810] kmalloc_array+0x2f/0x50 [ 2852.439400][T17810] rw_copy_check_uvector+0x96/0x360 [ 2852.439412][T17810] import_iovec+0x8c/0x2b0 [ 2852.439423][T17810] copy_msghdr_from_user+0x403/0x6a0 [ 2852.439434][T17810] ___sys_sendmsg+0xc4/0x910 [ 2852.439442][T17810] ? rcu_lock_release+0xd/0x30 [ 2852.439451][T17810] ? trace_lock_release+0x135/0x1a0 [ 2852.439457][T17810] ? rcu_lock_release+0xd/0x30 [ 2852.439471][T17810] ? rcu_lock_release+0x26/0x30 [ 2852.439484][T17810] ? __fdget+0x17c/0x200 [ 2852.439492][T17810] __sys_sendmmsg+0x239/0x470 [ 2852.439507][T17810] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 2852.495315][T18035] FAULT_INJECTION: forcing a failure. [ 2852.495315][T18035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:37:14 executing program 2 (fault-call:4 fault-nth:18): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2852.497022][T17810] ? prepare_exit_to_usermode+0x1f7/0x580 [ 2852.497032][T17810] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2852.497040][T17810] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2852.497052][T17810] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2852.519731][T17810] __x64_sys_sendmmsg+0xa0/0xb0 [ 2852.519744][T17810] do_syscall_64+0xfe/0x140 [ 2852.519759][T17810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2852.538834][T17810] RIP: 0033:0x4598e9 [ 2852.538844][T17810] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2852.538849][T17810] RSP: 002b:00007f660f9b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2852.538857][T17810] RAX: ffffffffffffffda RBX: 00007f660f9b8c90 RCX: 00000000004598e9 [ 2852.538866][T17810] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 2852.705969][T17810] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2852.714089][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f660f9b96d4 [ 2852.722167][T17810] R13: 00000000004c70da R14: 00000000004dc7c8 R15: 0000000000000005 [ 2852.734397][T18035] CPU: 0 PID: 18035 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2852.743588][T18035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.753798][T18035] Call Trace: [ 2852.757223][T18035] dump_stack+0x1d8/0x2f8 [ 2852.761556][T18035] should_fail+0x555/0x770 [ 2852.766184][T18035] should_fail_alloc_page+0x55/0x60 [ 2852.771429][T18035] prepare_alloc_pages+0x283/0x470 [ 2852.776544][T18035] __alloc_pages_nodemask+0xb2/0x5d0 [ 2852.781824][T18035] alloc_pages_current+0x2db/0x500 [ 2852.788181][T18035] push_pipe+0x3b1/0x750 [ 2852.792511][T18035] __pipe_get_pages+0x8b/0x390 [ 2852.797297][T18035] ? __kmalloc_node+0x4d/0x60 [ 2852.801964][T18035] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2852.808106][T18035] default_file_splice_read+0x10e/0x8d0 [ 2852.813640][T18035] ? trace_lock_release+0x135/0x1a0 [ 2852.819887][T18035] ? rcu_lock_release+0x4/0x20 [ 2852.824755][T18035] ? fsnotify+0x1318/0x13d0 [ 2852.830275][T18035] ? security_file_permission+0x23c/0x350 [ 2852.836009][T18035] ? rw_verify_area+0x1c2/0x360 [ 2852.840904][T18035] ? __ia32_sys_tee+0xb0/0xb0 [ 2852.845574][T18035] splice_direct_to_actor+0x39c/0xac0 [ 2852.850980][T18035] ? do_splice_direct+0x330/0x330 [ 2852.856039][T18035] do_splice_direct+0x200/0x330 [ 2852.860957][T18035] ? security_file_permission+0x110/0x350 [ 2852.866880][T18035] do_sendfile+0x7e4/0xfd0 [ 2852.871295][T18035] __x64_sys_sendfile64+0xfc/0x1b0 [ 2852.878341][T18035] do_syscall_64+0xfe/0x140 [ 2852.882831][T18035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2852.889784][T18035] RIP: 0033:0x4598e9 [ 2852.893808][T18035] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:37:14 executing program 3 (fault-call:3 fault-nth:1): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2852.914722][T18035] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2852.923168][T18035] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2852.931677][T18035] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2852.939670][T18035] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2852.947673][T18035] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2852.955689][T18035] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2853.013617][T18340] FAULT_INJECTION: forcing a failure. [ 2853.013617][T18340] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.026661][T18340] CPU: 1 PID: 18340 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 2853.034563][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.044795][T18340] Call Trace: [ 2853.048323][T18340] dump_stack+0x1d8/0x2f8 [ 2853.052673][T18340] should_fail+0x555/0x770 [ 2853.057221][T18340] __should_failslab+0x11a/0x160 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.062179][T18340] ? sctp_get_port_local+0x7c5/0x15b0 [ 2853.067564][T18340] should_failslab+0x9/0x20 [ 2853.072485][T18340] kmem_cache_alloc+0x56/0x2e0 [ 2853.077370][T18340] sctp_get_port_local+0x7c5/0x15b0 [ 2853.082679][T18340] sctp_get_port+0xba/0x110 [ 2853.087375][T18340] ? lock_sock_nested+0xd6/0x120 [ 2853.092472][T18340] inet_sendmsg+0x1fc/0x310 [ 2853.097089][T18340] ? inet_send_prepare+0x250/0x250 [ 2853.102370][T18340] ___sys_sendmsg+0x60d/0x910 [ 2853.107051][T18340] ? rcu_lock_release+0x26/0x30 [ 2853.107063][T18340] ? __fdget+0x17c/0x200 [ 2853.107070][T18340] __sys_sendmmsg+0x239/0x470 [ 2853.107085][T18340] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 2853.107094][T18340] ? prepare_exit_to_usermode+0x1f7/0x580 [ 2853.107101][T18340] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.107109][T18340] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2853.107119][T18340] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.150205][T18340] __x64_sys_sendmmsg+0xa0/0xb0 [ 2853.155235][T18340] do_syscall_64+0xfe/0x140 [ 2853.159948][T18340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2853.165956][T18340] RIP: 0033:0x4598e9 [ 2853.165964][T18340] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2853.165969][T18340] RSP: 002b:00007f660f9b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2853.165976][T18340] RAX: ffffffffffffffda RBX: 00007f660f9b8c90 RCX: 00000000004598e9 03:37:14 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:14 executing program 2 (fault-call:4 fault-nth:19): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:14 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.165980][T18340] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 2853.165984][T18340] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2853.165988][T18340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f660f9b96d4 [ 2853.165992][T18340] R13: 00000000004c70da R14: 00000000004dc7c8 R15: 0000000000000005 03:37:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x2000000}]) 03:37:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:14 executing program 3 (fault-call:3 fault-nth:2): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2853.279067][T18551] FAULT_INJECTION: forcing a failure. [ 2853.279067][T18551] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.340864][T18563] FAULT_INJECTION: forcing a failure. [ 2853.340864][T18563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2853.354903][T18563] CPU: 0 PID: 18563 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 2853.362984][T18563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.373170][T18563] Call Trace: [ 2853.376475][T18563] dump_stack+0x1d8/0x2f8 [ 2853.380909][T18563] should_fail+0x555/0x770 [ 2853.385344][T18563] should_fail_alloc_page+0x55/0x60 [ 2853.390723][T18563] prepare_alloc_pages+0x283/0x470 [ 2853.395960][T18563] __alloc_pages_nodemask+0xb2/0x5d0 [ 2853.401397][T18563] kmem_getpages+0x56/0xa20 [ 2853.405969][T18563] ? trace_lock_release+0x135/0x1a0 [ 2853.411170][T18563] cache_grow_begin+0x7e/0x2c0 [ 2853.415929][T18563] cache_alloc_refill+0x311/0x3f0 [ 2853.420948][T18563] ? check_preemption_disabled+0x47/0x2a0 [ 2853.426694][T18563] kmem_cache_alloc+0x2b9/0x2e0 [ 2853.431727][T18563] ? sctp_get_port_local+0x7c5/0x15b0 [ 2853.437100][T18563] sctp_get_port_local+0x7c5/0x15b0 [ 2853.442708][T18563] sctp_get_port+0xba/0x110 [ 2853.447295][T18563] ? lock_sock_nested+0xd6/0x120 [ 2853.452450][T18563] inet_sendmsg+0x1fc/0x310 [ 2853.457105][T18563] ? inet_send_prepare+0x250/0x250 [ 2853.462649][T18563] ___sys_sendmsg+0x60d/0x910 [ 2853.467503][T18563] ? rcu_lock_release+0x26/0x30 [ 2853.472383][T18563] ? __fdget+0x17c/0x200 [ 2853.476625][T18563] __sys_sendmmsg+0x239/0x470 [ 2853.481404][T18563] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 2853.487681][T18563] ? prepare_exit_to_usermode+0x1f7/0x580 [ 2853.493490][T18563] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.500948][T18563] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2853.506416][T18563] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.512131][T18563] __x64_sys_sendmmsg+0xa0/0xb0 [ 2853.516984][T18563] do_syscall_64+0xfe/0x140 [ 2853.521606][T18563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2853.527491][T18563] RIP: 0033:0x4598e9 [ 2853.531626][T18563] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2853.551706][T18563] RSP: 002b:00007f660f9b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2853.560731][T18563] RAX: ffffffffffffffda RBX: 00007f660f9b8c90 RCX: 00000000004598e9 [ 2853.573227][T18563] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 2853.581500][T18563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:37:15 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:15 executing program 3 (fault-call:3 fault-nth:3): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2853.590323][T18563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f660f9b96d4 [ 2853.598400][T18563] R13: 00000000004c70da R14: 00000000004dc7c8 R15: 0000000000000005 [ 2853.606621][T18551] CPU: 1 PID: 18551 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2853.614527][T18551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.624589][T18551] Call Trace: [ 2853.628685][T18551] dump_stack+0x1d8/0x2f8 [ 2853.633228][T18551] should_fail+0x555/0x770 03:37:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x11, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.638249][T18551] __should_failslab+0x11a/0x160 [ 2853.643419][T18551] ? kmalloc_array+0x2f/0x50 [ 2853.648106][T18551] should_failslab+0x9/0x20 [ 2853.652955][T18551] __kmalloc+0x7a/0x340 [ 2853.657207][T18551] ? __alloc_pages_nodemask+0x2e3/0x5d0 [ 2853.663017][T18551] kmalloc_array+0x2f/0x50 [ 2853.663939][T18672] FAULT_INJECTION: forcing a failure. [ 2853.663939][T18672] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.667537][T18551] rw_copy_check_uvector+0x96/0x360 [ 2853.667551][T18551] import_iovec+0x8c/0x2b0 03:37:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x12, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.667561][T18551] vfs_readv+0x90/0x120 [ 2853.667571][T18551] ? __kasan_check_write+0x14/0x20 [ 2853.667577][T18551] ? __pipe_get_pages+0x2c0/0x390 [ 2853.667589][T18551] ? iov_iter_get_pages_alloc+0x8b2/0xc50 [ 2853.667603][T18551] default_file_splice_read+0x544/0x8d0 [ 2853.718880][T18551] ? __ia32_sys_tee+0xb0/0xb0 [ 2853.723836][T18551] splice_direct_to_actor+0x39c/0xac0 [ 2853.729227][T18551] ? do_splice_direct+0x330/0x330 [ 2853.734270][T18551] do_splice_direct+0x200/0x330 [ 2853.739482][T18551] ? security_file_permission+0x110/0x350 [ 2853.745684][T18551] do_sendfile+0x7e4/0xfd0 [ 2853.745700][T18551] __x64_sys_sendfile64+0xfc/0x1b0 [ 2853.745711][T18551] do_syscall_64+0xfe/0x140 [ 2853.745721][T18551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2853.745729][T18551] RIP: 0033:0x4598e9 [ 2853.745737][T18551] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2853.745746][T18551] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2853.791809][T18551] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2853.791814][T18551] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2853.791819][T18551] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2853.791823][T18551] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x25, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.791827][T18551] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2853.801278][T18672] CPU: 1 PID: 18672 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 2853.817427][T18672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.817431][T18672] Call Trace: [ 2853.817453][T18672] dump_stack+0x1d8/0x2f8 [ 2853.817464][T18672] should_fail+0x555/0x770 [ 2853.817476][T18672] __should_failslab+0x11a/0x160 [ 2853.817486][T18672] should_failslab+0x9/0x20 [ 2853.817495][T18672] kmem_cache_alloc_trace+0x5d/0x2f0 03:37:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5c, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2853.817504][T18672] ? sctp_association_new+0x8c/0x21c0 [ 2853.817515][T18672] sctp_association_new+0x8c/0x21c0 [ 2853.817522][T18672] ? sctp_v4_to_sk_saddr+0x1e/0x80 [ 2853.817531][T18672] ? sctp_do_bind+0x672/0x840 [ 2853.817539][T18672] ? sctp_v4_scope+0x155/0x190 [ 2853.817548][T18672] ? security_sctp_bind_connect+0xaa/0xd0 [ 2853.817559][T18672] sctp_sendmsg+0x23da/0x3d20 [ 2853.817576][T18672] ? _raw_spin_unlock_bh+0x34/0x40 [ 2853.817586][T18672] ? release_sock+0x179/0x1d0 [ 2853.817598][T18672] inet_sendmsg+0x147/0x310 [ 2853.865712][T18672] ? inet_send_prepare+0x250/0x250 [ 2853.865721][T18672] ___sys_sendmsg+0x60d/0x910 [ 2853.865740][T18672] ? rcu_lock_release+0x26/0x30 [ 2853.865751][T18672] ? __fdget+0x17c/0x200 [ 2853.865760][T18672] __sys_sendmmsg+0x239/0x470 [ 2853.865776][T18672] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 2853.865786][T18672] ? prepare_exit_to_usermode+0x1f7/0x580 [ 2853.865797][T18672] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.874884][T18672] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2853.874892][T18672] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2853.874902][T18672] __x64_sys_sendmmsg+0xa0/0xb0 [ 2853.874911][T18672] do_syscall_64+0xfe/0x140 [ 2853.874921][T18672] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2853.874938][T18672] RIP: 0033:0x4598e9 [ 2854.018886][T18672] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2854.040931][T18672] RSP: 002b:00007f660f9b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2854.050714][T18672] RAX: ffffffffffffffda RBX: 00007f660f9b8c90 RCX: 00000000004598e9 [ 2854.059689][T18672] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 2854.068857][T18672] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2854.077906][T18672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f660f9b96d4 03:37:15 executing program 2 (fault-call:4 fault-nth:20): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:15 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe7, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2854.086495][T18672] R13: 00000000004c70da R14: 00000000004dc7c8 R15: 0000000000000005 03:37:15 executing program 3 (fault-call:3 fault-nth:4): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2854.144992][T19091] FAULT_INJECTION: forcing a failure. [ 2854.144992][T19091] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.163095][T19091] CPU: 0 PID: 19091 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2854.171128][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.183107][T19091] Call Trace: [ 2854.187030][T19091] dump_stack+0x1d8/0x2f8 [ 2854.191566][T19091] should_fail+0x555/0x770 [ 2854.191583][T19091] __should_failslab+0x11a/0x160 [ 2854.202899][T19091] should_failslab+0x9/0x20 [ 2854.202911][T19091] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 2854.202919][T19091] ? __kmalloc_node+0x3c/0x60 [ 2854.202929][T19091] ? __mutex_lock_common+0x513/0x2820 [ 2854.202941][T19091] ? do_splice_direct+0x200/0x330 [ 2854.214038][T19091] __kmalloc_node+0x3c/0x60 [ 2854.214048][T19091] kvmalloc_node+0xcc/0x130 [ 2854.214057][T19091] traverse+0xf9/0x540 [ 2854.214066][T19091] ? kernel_poison_pages+0x121/0x270 [ 2854.214076][T19091] seq_read+0xcab/0xd70 [ 2854.214098][T19091] kernfs_fop_read+0x14f/0x580 [ 2854.224567][T19091] ? rw_verify_area+0x1c2/0x360 [ 2854.224576][T19091] ? rw_copy_check_uvector+0x313/0x360 [ 2854.224586][T19091] do_iter_read+0x4b1/0x5b0 [ 2854.224599][T19091] vfs_readv+0xc2/0x120 [ 2854.224613][T19091] ? iov_iter_get_pages_alloc+0x8b2/0xc50 [ 2854.224626][T19091] default_file_splice_read+0x544/0x8d0 [ 2854.264652][T19105] FAULT_INJECTION: forcing a failure. [ 2854.264652][T19105] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.267899][T19091] ? __ia32_sys_tee+0xb0/0xb0 [ 2854.267908][T19091] splice_direct_to_actor+0x39c/0xac0 [ 2854.267920][T19091] ? do_splice_direct+0x330/0x330 [ 2854.315855][T19091] do_splice_direct+0x200/0x330 [ 2854.320816][T19091] ? security_file_permission+0x110/0x350 [ 2854.326621][T19091] do_sendfile+0x7e4/0xfd0 [ 2854.331138][T19091] __x64_sys_sendfile64+0xfc/0x1b0 [ 2854.336361][T19091] do_syscall_64+0xfe/0x140 [ 2854.340862][T19091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2854.346893][T19091] RIP: 0033:0x4598e9 [ 2854.350870][T19091] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2854.370472][T19091] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2854.378915][T19091] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2854.386885][T19091] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x3000000}]) [ 2854.394853][T19091] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2854.402907][T19091] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2854.411002][T19091] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2854.418979][T19105] CPU: 1 PID: 19105 Comm: syz-executor.3 Not tainted 5.3.0-rc8+ #0 [ 2854.426883][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.437077][T19105] Call Trace: [ 2854.440374][T19105] dump_stack+0x1d8/0x2f8 [ 2854.444714][T19105] should_fail+0x555/0x770 [ 2854.449137][T19105] __should_failslab+0x11a/0x160 [ 2854.454203][T19105] should_failslab+0x9/0x20 [ 2854.458717][T19105] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2854.464012][T19105] ? sctp_association_new+0x8c/0x21c0 [ 2854.469537][T19105] sctp_association_new+0x8c/0x21c0 [ 2854.474741][T19105] ? sctp_v4_to_sk_saddr+0x1e/0x80 [ 2854.480040][T19105] ? sctp_do_bind+0x672/0x840 [ 2854.484886][T19105] ? sctp_v4_scope+0x155/0x190 [ 2854.484895][T19105] ? security_sctp_bind_connect+0xaa/0xd0 [ 2854.484905][T19105] sctp_sendmsg+0x23da/0x3d20 [ 2854.484921][T19105] ? _raw_spin_unlock_bh+0x34/0x40 [ 2854.484930][T19105] ? release_sock+0x179/0x1d0 [ 2854.484940][T19105] inet_sendmsg+0x147/0x310 [ 2854.484947][T19105] ? inet_send_prepare+0x250/0x250 [ 2854.484960][T19105] ___sys_sendmsg+0x60d/0x910 [ 2854.484979][T19105] ? rcu_lock_release+0x26/0x30 [ 2854.484992][T19105] ? __fdget+0x17c/0x200 [ 2854.533691][T19105] __sys_sendmmsg+0x239/0x470 [ 2854.538476][T19105] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 2854.544790][T19105] ? prepare_exit_to_usermode+0x1f7/0x580 [ 2854.550810][T19105] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2854.557220][T19105] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 2854.562672][T19105] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 2854.568498][T19105] __x64_sys_sendmmsg+0xa0/0xb0 [ 2854.573353][T19105] do_syscall_64+0xfe/0x140 [ 2854.577854][T19105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2854.583986][T19105] RIP: 0033:0x4598e9 [ 2854.587873][T19105] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2854.607544][T19105] RSP: 002b:00007f660f9b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2854.615943][T19105] RAX: ffffffffffffffda RBX: 00007f660f9b8c90 RCX: 00000000004598e9 [ 2854.623988][T19105] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 2854.631952][T19105] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:37:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x85, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:16 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x300, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:16 executing program 2 (fault-call:4 fault-nth:21): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:16 executing program 3 (fault-call:3 fault-nth:5): r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2854.639919][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f660f9b96d4 [ 2854.648119][T19105] R13: 00000000004c70da R14: 00000000004dc7c8 R15: 0000000000000005 03:37:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x4000000}]) 03:37:16 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2854.736093][T19238] FAULT_INJECTION: forcing a failure. [ 2854.736093][T19238] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.767415][T19238] CPU: 1 PID: 19238 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2854.775376][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.775380][T19238] Call Trace: [ 2854.775395][T19238] dump_stack+0x1d8/0x2f8 [ 2854.775408][T19238] should_fail+0x555/0x770 [ 2854.775421][T19238] __should_failslab+0x11a/0x160 [ 2854.775432][T19238] should_failslab+0x9/0x20 [ 2854.775449][T19238] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 2854.775458][T19238] ? __kmalloc_node+0x3c/0x60 [ 2854.775467][T19238] ? __mutex_lock_common+0x513/0x2820 [ 2854.775476][T19238] ? do_splice_direct+0x200/0x330 [ 2854.775486][T19238] __kmalloc_node+0x3c/0x60 [ 2854.775498][T19238] kvmalloc_node+0xcc/0x130 [ 2854.775506][T19238] traverse+0xf9/0x540 [ 2854.775515][T19238] ? kernel_poison_pages+0x121/0x270 [ 2854.775525][T19238] seq_read+0xcab/0xd70 [ 2854.775541][T19238] kernfs_fop_read+0x14f/0x580 [ 2854.832909][T19238] ? rw_verify_area+0x1c2/0x360 [ 2854.832923][T19238] ? rw_copy_check_uvector+0x313/0x360 [ 2854.851765][T19238] do_iter_read+0x4b1/0x5b0 [ 2854.851785][T19238] vfs_readv+0xc2/0x120 [ 2854.875641][T19238] ? iov_iter_get_pages_alloc+0x8b2/0xc50 03:37:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x500, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2854.875655][T19238] default_file_splice_read+0x544/0x8d0 [ 2854.887219][T19238] ? __ia32_sys_tee+0xb0/0xb0 [ 2854.891913][T19238] splice_direct_to_actor+0x39c/0xac0 [ 2854.897301][T19238] ? do_splice_direct+0x330/0x330 [ 2854.902346][T19238] do_splice_direct+0x200/0x330 [ 2854.907237][T19238] ? security_file_permission+0x110/0x350 [ 2854.912976][T19238] do_sendfile+0x7e4/0xfd0 [ 2854.917508][T19238] __x64_sys_sendfile64+0xfc/0x1b0 [ 2854.922637][T19238] do_syscall_64+0xfe/0x140 [ 2854.927248][T19238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2854.933235][T19238] RIP: 0033:0x4598e9 03:37:16 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x600, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2854.937159][T19238] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2854.956855][T19238] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2854.965365][T19238] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2854.973488][T19238] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:16 executing program 2 (fault-call:4 fault-nth:22): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2854.981556][T19238] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2854.989540][T19238] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2854.997836][T19238] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:16 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x5000000}]) 03:37:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x3, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.116315][T19642] FAULT_INJECTION: forcing a failure. [ 2855.116315][T19642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2855.129703][T19642] CPU: 1 PID: 19642 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2855.137868][T19642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.148349][T19642] Call Trace: [ 2855.151679][T19642] dump_stack+0x1d8/0x2f8 [ 2855.156034][T19642] should_fail+0x555/0x770 [ 2855.160474][T19642] should_fail_alloc_page+0x55/0x60 03:37:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x700, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2855.165689][T19642] prepare_alloc_pages+0x283/0x470 [ 2855.170938][T19642] __alloc_pages_nodemask+0xb2/0x5d0 [ 2855.176236][T19642] ? __kernel_text_address+0x9a/0x110 [ 2855.181652][T19642] kmem_getpages+0x56/0xa20 [ 2855.186262][T19642] cache_grow_begin+0x7e/0x2c0 [ 2855.191044][T19642] cache_alloc_refill+0x311/0x3f0 [ 2855.196086][T19642] ? check_preemption_disabled+0xb7/0x2a0 [ 2855.201829][T19642] kmem_cache_alloc_node_trace+0x2a3/0x2d0 [ 2855.207719][T19642] ? __kmalloc_node+0x3c/0x60 03:37:16 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x4, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.212501][T19642] ? __mutex_lock_common+0x513/0x2820 [ 2855.217983][T19642] __kmalloc_node+0x3c/0x60 [ 2855.222616][T19642] kvmalloc_node+0xcc/0x130 [ 2855.227161][T19642] traverse+0xf9/0x540 [ 2855.231463][T19642] ? kernel_poison_pages+0x121/0x270 [ 2855.236769][T19642] seq_read+0xcab/0xd70 [ 2855.240971][T19642] kernfs_fop_read+0x14f/0x580 [ 2855.245751][T19642] ? rw_verify_area+0x1c2/0x360 [ 2855.250793][T19642] ? rw_copy_check_uvector+0x313/0x360 [ 2855.256418][T19642] do_iter_read+0x4b1/0x5b0 [ 2855.261038][T19642] vfs_readv+0xc2/0x120 [ 2855.265239][T19642] ? iov_iter_get_pages_alloc+0x8b2/0xc50 [ 2855.271098][T19642] default_file_splice_read+0x544/0x8d0 [ 2855.277541][T19642] ? __ia32_sys_tee+0xb0/0xb0 [ 2855.282399][T19642] splice_direct_to_actor+0x39c/0xac0 [ 2855.287779][T19642] ? do_splice_direct+0x330/0x330 [ 2855.287793][T19642] do_splice_direct+0x200/0x330 [ 2855.287805][T19642] ? security_file_permission+0x110/0x350 [ 2855.287816][T19642] do_sendfile+0x7e4/0xfd0 [ 2855.287834][T19642] __x64_sys_sendfile64+0xfc/0x1b0 03:37:16 executing program 2 (fault-call:4 fault-nth:23): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2855.287846][T19642] do_syscall_64+0xfe/0x140 [ 2855.287856][T19642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2855.287868][T19642] RIP: 0033:0x4598e9 [ 2855.297953][T19642] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2855.297959][T19642] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2855.297968][T19642] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0xa, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.297973][T19642] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2855.297978][T19642] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2855.297983][T19642] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2855.297991][T19642] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2855.354758][T20033] FAULT_INJECTION: forcing a failure. [ 2855.354758][T20033] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.373319][T20033] CPU: 1 PID: 20033 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2855.388326][T20033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.388331][T20033] Call Trace: [ 2855.388347][T20033] dump_stack+0x1d8/0x2f8 [ 2855.388363][T20033] should_fail+0x555/0x770 [ 2855.409326][T20033] __should_failslab+0x11a/0x160 [ 2855.409337][T20033] ? kernfs_fop_write+0x140/0x4f0 [ 2855.409345][T20033] should_failslab+0x9/0x20 [ 2855.409353][T20033] __kmalloc+0x7a/0x340 [ 2855.409362][T20033] ? debug_check_no_obj_freed+0x505/0x5b0 [ 2855.409369][T20033] kernfs_fop_write+0x140/0x4f0 [ 2855.409378][T20033] ? kernfs_fop_read+0x580/0x580 [ 2855.409387][T20033] __vfs_write+0xb8/0x740 [ 2855.409400][T20033] ? trace_hardirqs_on+0x74/0x80 [ 2855.435547][T20033] __kernel_write+0x11d/0x350 [ 2855.435560][T20033] write_pipe_buf+0x10e/0x160 [ 2855.435574][T20033] __splice_from_pipe+0x2f7/0x8a0 [ 2855.435583][T20033] ? default_file_splice_write+0x1c0/0x1c0 [ 2855.435598][T20033] default_file_splice_write+0x11c/0x1c0 [ 2855.435608][T20033] ? default_file_splice_read+0x8d0/0x8d0 03:37:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x900, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:17 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.435616][T20033] direct_splice_actor+0xf7/0x130 [ 2855.435626][T20033] splice_direct_to_actor+0x463/0xac0 [ 2855.435631][T20033] ? do_splice_direct+0x330/0x330 [ 2855.435647][T20033] do_splice_direct+0x200/0x330 [ 2855.444999][T20033] ? security_file_permission+0x110/0x350 [ 2855.445011][T20033] do_sendfile+0x7e4/0xfd0 [ 2855.445028][T20033] __x64_sys_sendfile64+0xfc/0x1b0 [ 2855.445042][T20033] do_syscall_64+0xfe/0x140 [ 2855.458705][T20033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2855.458717][T20033] RIP: 0033:0x4598e9 03:37:17 executing program 2 (fault-call:4 fault-nth:24): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.469589][T20033] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2855.469594][T20033] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2855.469602][T20033] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2855.469606][T20033] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x7000000}]) [ 2855.469610][T20033] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2855.469615][T20033] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2855.469619][T20033] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2855.614084][T20272] FAULT_INJECTION: forcing a failure. [ 2855.614084][T20272] name failslab, interval 1, probability 0, space 0, times 0 03:37:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x500, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:17 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.744357][T20272] CPU: 0 PID: 20272 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2855.752603][T20272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2855.762669][T20272] Call Trace: [ 2855.765969][T20272] dump_stack+0x1d8/0x2f8 [ 2855.770524][T20272] should_fail+0x555/0x770 [ 2855.774962][T20272] __should_failslab+0x11a/0x160 [ 2855.779907][T20272] ? update_flag+0x41/0x520 [ 2855.784428][T20272] should_failslab+0x9/0x20 [ 2855.789081][T20272] __kmalloc_track_caller+0x79/0x340 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x5, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.794378][T20272] kmemdup+0x24/0x50 [ 2855.798367][T20272] update_flag+0x41/0x520 [ 2855.802701][T20272] ? rcu_lock_release+0xd/0x30 [ 2855.807470][T20272] ? trace_lock_release+0x135/0x1a0 [ 2855.812683][T20272] cpuset_write_u64+0x1c0/0x200 [ 2855.817699][T20272] ? cpuset_read_u64+0x570/0x570 [ 2855.822665][T20272] cgroup_file_write+0x55d/0x5f0 [ 2855.827619][T20272] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2855.832859][T20272] kernfs_fop_write+0x3e4/0x4f0 [ 2855.837718][T20272] ? kernfs_fop_read+0x580/0x580 [ 2855.842669][T20272] __vfs_write+0xb8/0x740 [ 2855.847009][T20272] ? trace_hardirqs_on+0x74/0x80 [ 2855.852079][T20272] __kernel_write+0x11d/0x350 [ 2855.856770][T20272] write_pipe_buf+0x10e/0x160 [ 2855.861477][T20272] __splice_from_pipe+0x2f7/0x8a0 [ 2855.866510][T20272] ? default_file_splice_write+0x1c0/0x1c0 [ 2855.872441][T20272] default_file_splice_write+0x11c/0x1c0 [ 2855.878082][T20272] ? default_file_splice_read+0x8d0/0x8d0 [ 2855.883817][T20272] direct_splice_actor+0xf7/0x130 [ 2855.888848][T20272] splice_direct_to_actor+0x463/0xac0 03:37:17 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x6, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2855.894239][T20272] ? do_splice_direct+0x330/0x330 [ 2855.899277][T20272] do_splice_direct+0x200/0x330 [ 2855.904139][T20272] ? security_file_permission+0x110/0x350 [ 2855.909987][T20272] do_sendfile+0x7e4/0xfd0 [ 2855.914416][T20272] __x64_sys_sendfile64+0xfc/0x1b0 [ 2855.914428][T20272] do_syscall_64+0xfe/0x140 [ 2855.914439][T20272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2855.914447][T20272] RIP: 0033:0x4598e9 [ 2855.914458][T20272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2855.924165][T20272] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2855.924174][T20272] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2855.924179][T20272] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2855.924185][T20272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2855.924190][T20272] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:17 executing program 2 (fault-call:4 fault-nth:25): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:17 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:17 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2855.924196][T20272] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2856.032621][T20802] FAULT_INJECTION: forcing a failure. [ 2856.032621][T20802] name failslab, interval 1, probability 0, space 0, times 0 [ 2856.079990][T20802] CPU: 0 PID: 20802 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2856.088107][T20802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.098304][T20802] Call Trace: [ 2856.101765][T20802] dump_stack+0x1d8/0x2f8 [ 2856.106112][T20802] should_fail+0x555/0x770 [ 2856.110536][T20802] __should_failslab+0x11a/0x160 [ 2856.115464][T20802] ? update_flag+0x41/0x520 [ 2856.120125][T20802] should_failslab+0x9/0x20 [ 2856.124737][T20802] __kmalloc_track_caller+0x79/0x340 [ 2856.130262][T20802] kmemdup+0x24/0x50 [ 2856.134859][T20802] update_flag+0x41/0x520 [ 2856.139170][T20802] ? rcu_lock_release+0xd/0x30 [ 2856.144154][T20802] ? trace_lock_release+0x135/0x1a0 [ 2856.149338][T20802] cpuset_write_u64+0x1c0/0x200 [ 2856.154313][T20802] ? cpuset_read_u64+0x570/0x570 [ 2856.159480][T20802] cgroup_file_write+0x55d/0x5f0 [ 2856.164710][T20802] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2856.170187][T20802] kernfs_fop_write+0x3e4/0x4f0 [ 2856.175033][T20802] ? kernfs_fop_read+0x580/0x580 [ 2856.179962][T20802] __vfs_write+0xb8/0x740 [ 2856.184452][T20802] ? check_preemption_disabled+0xb7/0x2a0 [ 2856.190273][T20802] __kernel_write+0x11d/0x350 [ 2856.195004][T20802] write_pipe_buf+0x10e/0x160 [ 2856.199787][T20802] __splice_from_pipe+0x2f7/0x8a0 [ 2856.204969][T20802] ? default_file_splice_write+0x1c0/0x1c0 [ 2856.210886][T20802] default_file_splice_write+0x11c/0x1c0 [ 2856.216573][T20802] ? default_file_splice_read+0x8d0/0x8d0 [ 2856.222280][T20802] direct_splice_actor+0xf7/0x130 [ 2856.227288][T20802] splice_direct_to_actor+0x463/0xac0 [ 2856.232649][T20802] ? do_splice_direct+0x330/0x330 [ 2856.237663][T20802] do_splice_direct+0x200/0x330 [ 2856.242506][T20802] ? security_file_permission+0x110/0x350 [ 2856.248437][T20802] do_sendfile+0x7e4/0xfd0 [ 2856.252865][T20802] __x64_sys_sendfile64+0xfc/0x1b0 [ 2856.257971][T20802] do_syscall_64+0xfe/0x140 [ 2856.262460][T20802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2856.268335][T20802] RIP: 0033:0x4598e9 [ 2856.272259][T20802] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2856.291870][T20802] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2856.300412][T20802] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2856.308388][T20802] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2856.316367][T20802] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:37:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x8000000}]) 03:37:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x700, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:18 executing program 2 (fault-call:4 fault-nth:26): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2856.324618][T20802] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2856.332706][T20802] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xf000000}]) [ 2856.453129][T21025] FAULT_INJECTION: forcing a failure. [ 2856.453129][T21025] name failslab, interval 1, probability 0, space 0, times 0 03:37:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf00, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2856.512992][T21025] CPU: 0 PID: 21025 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2856.521243][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.531319][T21025] Call Trace: [ 2856.534629][T21025] dump_stack+0x1d8/0x2f8 [ 2856.539134][T21025] should_fail+0x555/0x770 [ 2856.543816][T21025] __should_failslab+0x11a/0x160 [ 2856.548981][T21025] should_failslab+0x9/0x20 [ 2856.553500][T21025] kmem_cache_alloc_node_trace+0x6e/0x2d0 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x8, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2856.559514][T21025] ? __kmalloc_node+0x3c/0x60 [ 2856.559523][T21025] ? free_unref_page+0x1eb/0x230 [ 2856.559531][T21025] ? trace_irq_enable_rcuidle+0x23/0x1e0 [ 2856.559539][T21025] __kmalloc_node+0x3c/0x60 [ 2856.559549][T21025] kvmalloc_node+0xcc/0x130 [ 2856.559558][T21025] iov_iter_get_pages_alloc+0x87d/0xc50 [ 2856.559571][T21025] default_file_splice_read+0x10e/0x8d0 [ 2856.597095][T21025] ? fsnotify+0x1318/0x13d0 [ 2856.602156][T21025] ? security_file_permission+0x23c/0x350 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xa, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2856.608937][T21025] ? rw_verify_area+0x1c2/0x360 [ 2856.614090][T21025] ? __ia32_sys_tee+0xb0/0xb0 [ 2856.618935][T21025] splice_direct_to_actor+0x39c/0xac0 [ 2856.624311][T21025] ? do_splice_direct+0x330/0x330 [ 2856.629349][T21025] do_splice_direct+0x200/0x330 [ 2856.634554][T21025] ? security_file_permission+0x110/0x350 [ 2856.640928][T21025] do_sendfile+0x7e4/0xfd0 [ 2856.646403][T21025] __x64_sys_sendfile64+0xfc/0x1b0 [ 2856.651524][T21025] do_syscall_64+0xfe/0x140 [ 2856.656037][T21025] entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2856.661924][T21025] RIP: 0033:0x4598e9 [ 2856.666050][T21025] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2856.688215][T21025] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2856.696984][T21025] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2856.705463][T21025] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2856.713612][T21025] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2856.722429][T21025] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2856.730640][T21025] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:18 executing program 2 (fault-call:4 fault-nth:27): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x1f000000}]) 03:37:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1f00, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2856.911485][T21670] FAULT_INJECTION: forcing a failure. [ 2856.911485][T21670] name failslab, interval 1, probability 0, space 0, times 0 03:37:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x39000000}]) [ 2856.958546][T21670] CPU: 0 PID: 21670 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2856.966843][T21670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2856.966848][T21670] Call Trace: [ 2856.966864][T21670] dump_stack+0x1d8/0x2f8 [ 2856.966882][T21670] should_fail+0x555/0x770 [ 2856.990161][T21670] __should_failslab+0x11a/0x160 [ 2856.995363][T21670] should_failslab+0x9/0x20 [ 2856.995374][T21670] kmem_cache_alloc_node_trace+0x6e/0x2d0 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x30, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2856.995385][T21670] ? __kmalloc_node+0x3c/0x60 [ 2857.011916][T21670] ? free_unref_page+0x1eb/0x230 [ 2857.017971][T21670] ? trace_irq_enable_rcuidle+0x23/0x1e0 [ 2857.023640][T21670] __kmalloc_node+0x3c/0x60 [ 2857.028752][T21670] kvmalloc_node+0xcc/0x130 [ 2857.033405][T21670] iov_iter_get_pages_alloc+0x87d/0xc50 [ 2857.033418][T21670] default_file_splice_read+0x10e/0x8d0 [ 2857.033431][T21670] ? fsnotify+0x1318/0x13d0 [ 2857.049323][T21670] ? security_file_permission+0x23c/0x350 [ 2857.049337][T21670] ? rw_verify_area+0x1c2/0x360 [ 2857.059937][T21670] ? __ia32_sys_tee+0xb0/0xb0 [ 2857.064628][T21670] splice_direct_to_actor+0x39c/0xac0 [ 2857.070166][T21670] ? do_splice_direct+0x330/0x330 [ 2857.075206][T21670] do_splice_direct+0x200/0x330 [ 2857.080157][T21670] ? security_file_permission+0x110/0x350 [ 2857.085885][T21670] do_sendfile+0x7e4/0xfd0 [ 2857.090314][T21670] __x64_sys_sendfile64+0xfc/0x1b0 [ 2857.095431][T21670] do_syscall_64+0xfe/0x140 [ 2857.099938][T21670] entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x60, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.105837][T21670] RIP: 0033:0x4598e9 [ 2857.109781][T21670] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2857.129496][T21670] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2857.129505][T21670] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2857.129509][T21670] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:18 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1100, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2857.129513][T21670] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2857.129517][T21670] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2857.129521][T21670] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:18 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:18 executing program 2 (fault-call:4 fault-nth:28): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:18 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfc, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x40000000}]) [ 2857.300416][T22101] FAULT_INJECTION: forcing a failure. [ 2857.300416][T22101] name failslab, interval 1, probability 0, space 0, times 0 [ 2857.321295][T22101] CPU: 1 PID: 22101 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2857.329435][T22101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2857.339503][T22101] Call Trace: [ 2857.342808][T22101] dump_stack+0x1d8/0x2f8 [ 2857.347145][T22101] should_fail+0x555/0x770 [ 2857.351561][T22101] __should_failslab+0x11a/0x160 [ 2857.356505][T22101] should_failslab+0x9/0x20 [ 2857.361020][T22101] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 2857.366754][T22101] ? __kmalloc_node+0x3c/0x60 [ 2857.371444][T22101] ? free_unref_page+0x1eb/0x230 [ 2857.376400][T22101] ? trace_irq_enable_rcuidle+0x23/0x1e0 [ 2857.382036][T22101] __kmalloc_node+0x3c/0x60 [ 2857.386539][T22101] kvmalloc_node+0xcc/0x130 [ 2857.391290][T22101] iov_iter_get_pages_alloc+0x87d/0xc50 [ 2857.396835][T22101] default_file_splice_read+0x10e/0x8d0 [ 2857.402961][T22101] ? fsnotify+0x1318/0x13d0 [ 2857.407476][T22101] ? security_file_permission+0x23c/0x350 [ 2857.413316][T22101] ? rw_verify_area+0x1c2/0x360 [ 2857.418171][T22101] ? __ia32_sys_tee+0xb0/0xb0 [ 2857.423024][T22101] splice_direct_to_actor+0x39c/0xac0 [ 2857.428404][T22101] ? do_splice_direct+0x330/0x330 [ 2857.433448][T22101] do_splice_direct+0x200/0x330 [ 2857.438438][T22101] ? security_file_permission+0x110/0x350 [ 2857.444169][T22101] do_sendfile+0x7e4/0xfd0 03:37:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1200, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x12c, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.448599][T22101] __x64_sys_sendfile64+0xfc/0x1b0 [ 2857.453716][T22101] do_syscall_64+0xfe/0x140 [ 2857.458223][T22101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2857.464191][T22101] RIP: 0033:0x4598e9 [ 2857.464199][T22101] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2857.464204][T22101] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:37:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:19 executing program 2 (fault-call:4 fault-nth:29): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2857.464211][T22101] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2857.464216][T22101] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2857.464220][T22101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2857.464225][T22101] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2857.464229][T22101] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xeffdffff}]) 03:37:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7600, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x144, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.640488][T22588] FAULT_INJECTION: forcing a failure. [ 2857.640488][T22588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2857.716258][T22588] CPU: 0 PID: 22588 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2857.724712][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2857.734991][T22588] Call Trace: [ 2857.738299][T22588] dump_stack+0x1d8/0x2f8 [ 2857.742732][T22588] should_fail+0x555/0x770 [ 2857.747163][T22588] should_fail_alloc_page+0x55/0x60 [ 2857.752507][T22588] prepare_alloc_pages+0x283/0x470 [ 2857.757794][T22588] __alloc_pages_nodemask+0xb2/0x5d0 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1b0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.763086][T22588] alloc_pages_current+0x2db/0x500 [ 2857.768200][T22588] push_pipe+0x3b1/0x750 [ 2857.772447][T22588] __pipe_get_pages+0x8b/0x390 [ 2857.777216][T22588] ? __kmalloc_node+0x4d/0x60 [ 2857.782211][T22588] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2857.787750][T22588] default_file_splice_read+0x10e/0x8d0 [ 2857.787763][T22588] ? fsnotify+0x1318/0x13d0 [ 2857.787779][T22588] ? security_file_permission+0x23c/0x350 [ 2857.787790][T22588] ? rw_verify_area+0x1c2/0x360 [ 2857.808423][T22588] ? __ia32_sys_tee+0xb0/0xb0 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1b1, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.813107][T22588] splice_direct_to_actor+0x39c/0xac0 [ 2857.818479][T22588] ? do_splice_direct+0x330/0x330 [ 2857.823517][T22588] do_splice_direct+0x200/0x330 [ 2857.828369][T22588] ? security_file_permission+0x110/0x350 [ 2857.834090][T22588] do_sendfile+0x7e4/0xfd0 [ 2857.838658][T22588] __x64_sys_sendfile64+0xfc/0x1b0 [ 2857.843780][T22588] do_syscall_64+0xfe/0x140 [ 2857.848305][T22588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2857.854197][T22588] RIP: 0033:0x4598e9 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1f4, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2857.858092][T22588] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2857.877692][T22588] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2857.886100][T22588] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2857.894069][T22588] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2857.902042][T22588] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:37:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2500, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:19 executing program 2 (fault-call:4 fault-nth:30): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2857.910018][T22588] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2857.917997][T22588] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8500, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfcfdffff}]) 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x300, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:19 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2858.086927][T23168] FAULT_INJECTION: forcing a failure. [ 2858.086927][T23168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.110470][T23168] CPU: 1 PID: 23168 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2858.118508][T23168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.128841][T23168] Call Trace: [ 2858.132147][T23168] dump_stack+0x1d8/0x2f8 [ 2858.136590][T23168] should_fail+0x555/0x770 [ 2858.141025][T23168] should_fail_alloc_page+0x55/0x60 [ 2858.146237][T23168] prepare_alloc_pages+0x283/0x470 [ 2858.151363][T23168] __alloc_pages_nodemask+0xb2/0x5d0 [ 2858.156644][T23168] alloc_pages_current+0x2db/0x500 [ 2858.156655][T23168] push_pipe+0x3b1/0x750 [ 2858.156664][T23168] __pipe_get_pages+0x8b/0x390 [ 2858.156672][T23168] ? __kmalloc_node+0x4d/0x60 [ 2858.156682][T23168] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2858.156692][T23168] default_file_splice_read+0x10e/0x8d0 [ 2858.156705][T23168] ? fsnotify+0x1318/0x13d0 [ 2858.156719][T23168] ? security_file_permission+0x23c/0x350 [ 2858.156731][T23168] ? rw_verify_area+0x1c2/0x360 [ 2858.186739][T23168] ? __ia32_sys_tee+0xb0/0xb0 [ 2858.186748][T23168] splice_direct_to_actor+0x39c/0xac0 [ 2858.186755][T23168] ? do_splice_direct+0x330/0x330 [ 2858.186770][T23168] do_splice_direct+0x200/0x330 [ 2858.186783][T23168] ? security_file_permission+0x110/0x350 [ 2858.186793][T23168] do_sendfile+0x7e4/0xfd0 [ 2858.186810][T23168] __x64_sys_sendfile64+0xfc/0x1b0 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3e8, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3f00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2858.197014][T23168] do_syscall_64+0xfe/0x140 [ 2858.241664][T23168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2858.247560][T23168] RIP: 0033:0x4598e9 [ 2858.251460][T23168] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2858.271067][T23168] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2858.279692][T23168] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 03:37:19 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:19 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x500, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:19 executing program 2 (fault-call:4 fault-nth:31): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfefdffff}]) [ 2858.287681][T23168] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2858.295748][T23168] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2858.303879][T23168] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2858.311862][T23168] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x9600, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2858.422771][T23650] FAULT_INJECTION: forcing a failure. [ 2858.422771][T23650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.456685][T23650] CPU: 1 PID: 23650 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5c00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2858.464637][T23650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.474697][T23650] Call Trace: [ 2858.478121][T23650] dump_stack+0x1d8/0x2f8 [ 2858.482464][T23650] should_fail+0x555/0x770 [ 2858.486882][T23650] should_fail_alloc_page+0x55/0x60 [ 2858.492169][T23650] prepare_alloc_pages+0x283/0x470 [ 2858.497293][T23650] __alloc_pages_nodemask+0xb2/0x5d0 [ 2858.502587][T23650] alloc_pages_current+0x2db/0x500 [ 2858.507702][T23650] push_pipe+0x3b1/0x750 [ 2858.511949][T23650] __pipe_get_pages+0x8b/0x390 [ 2858.516729][T23650] ? __kmalloc_node+0x4d/0x60 [ 2858.516739][T23650] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2858.516750][T23650] default_file_splice_read+0x10e/0x8d0 [ 2858.516766][T23650] ? fsnotify+0x1318/0x13d0 [ 2858.516782][T23650] ? security_file_permission+0x23c/0x350 [ 2858.516793][T23650] ? rw_verify_area+0x1c2/0x360 [ 2858.516800][T23650] ? __ia32_sys_tee+0xb0/0xb0 [ 2858.516808][T23650] splice_direct_to_actor+0x39c/0xac0 [ 2858.516818][T23650] ? do_splice_direct+0x330/0x330 [ 2858.562617][T23650] do_splice_direct+0x200/0x330 [ 2858.567473][T23650] ? security_file_permission+0x110/0x350 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xac00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2858.573193][T23650] do_sendfile+0x7e4/0xfd0 [ 2858.577624][T23650] __x64_sys_sendfile64+0xfc/0x1b0 [ 2858.582743][T23650] do_syscall_64+0xfe/0x140 [ 2858.587250][T23650] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2858.593143][T23650] RIP: 0033:0x4598e9 [ 2858.597035][T23650] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:37:20 executing program 2 (fault-call:4 fault-nth:32): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x5ac, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2858.616631][T23650] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2858.616640][T23650] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2858.616645][T23650] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2858.616650][T23650] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2858.616655][T23650] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2858.616660][T23650] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2858.653972][T23932] FAULT_INJECTION: forcing a failure. [ 2858.653972][T23932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2858.681255][T23932] CPU: 1 PID: 23932 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2858.689158][T23932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2858.699200][T23932] Call Trace: [ 2858.699217][T23932] dump_stack+0x1d8/0x2f8 [ 2858.699230][T23932] should_fail+0x555/0x770 [ 2858.699243][T23932] should_fail_alloc_page+0x55/0x60 [ 2858.699253][T23932] prepare_alloc_pages+0x283/0x470 [ 2858.699265][T23932] __alloc_pages_nodemask+0xb2/0x5d0 [ 2858.706851][T23932] alloc_pages_current+0x2db/0x500 [ 2858.706863][T23932] push_pipe+0x3b1/0x750 [ 2858.706874][T23932] __pipe_get_pages+0x8b/0x390 [ 2858.706884][T23932] ? __kmalloc_node+0x4d/0x60 [ 2858.706894][T23932] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2858.706906][T23932] default_file_splice_read+0x10e/0x8d0 [ 2858.706919][T23932] ? fsnotify+0x1318/0x13d0 [ 2858.716493][T23932] ? security_file_permission+0x23c/0x350 [ 2858.716506][T23932] ? rw_verify_area+0x1c2/0x360 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbd00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2858.726872][T23932] ? __ia32_sys_tee+0xb0/0xb0 [ 2858.726881][T23932] splice_direct_to_actor+0x39c/0xac0 [ 2858.726888][T23932] ? do_splice_direct+0x330/0x330 [ 2858.726902][T23932] do_splice_direct+0x200/0x330 [ 2858.726918][T23932] ? security_file_permission+0x110/0x350 [ 2858.797201][T23932] do_sendfile+0x7e4/0xfd0 [ 2858.801632][T23932] __x64_sys_sendfile64+0xfc/0x1b0 [ 2858.806756][T23932] do_syscall_64+0xfe/0x140 [ 2858.811257][T23932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2858.817139][T23932] RIP: 0033:0x4598e9 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe7ff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2858.821021][T23932] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2858.840741][T23932] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2858.849437][T23932] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2858.857396][T23932] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2858.865348][T23932] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x5dc, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xff600000}]) 03:37:20 executing program 2 (fault-call:4 fault-nth:33): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 2858.865354][T23932] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2858.865358][T23932] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xeffd, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2858.958386][T24348] FAULT_INJECTION: forcing a failure. [ 2858.958386][T24348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.012625][T24348] CPU: 1 PID: 24348 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2859.020562][T24348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.030615][T24348] Call Trace: [ 2859.030632][T24348] dump_stack+0x1d8/0x2f8 [ 2859.030649][T24348] should_fail+0x555/0x770 [ 2859.042650][T24348] should_fail_alloc_page+0x55/0x60 [ 2859.042665][T24348] prepare_alloc_pages+0x283/0x470 [ 2859.052941][T24348] __alloc_pages_nodemask+0xb2/0x5d0 [ 2859.058657][T24348] alloc_pages_current+0x2db/0x500 [ 2859.058671][T24348] push_pipe+0x3b1/0x750 [ 2859.067986][T24348] __pipe_get_pages+0x8b/0x390 [ 2859.072734][T24348] ? __kmalloc_node+0x4d/0x60 [ 2859.072745][T24348] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2859.072758][T24348] default_file_splice_read+0x10e/0x8d0 [ 2859.088469][T24348] ? fsnotify+0x1318/0x13d0 [ 2859.092980][T24348] ? security_file_permission+0x23c/0x350 [ 2859.098693][T24348] ? rw_verify_area+0x1c2/0x360 [ 2859.103537][T24348] ? __ia32_sys_tee+0xb0/0xb0 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfdfd, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x600, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2859.108213][T24348] splice_direct_to_actor+0x39c/0xac0 [ 2859.113581][T24348] ? do_splice_direct+0x330/0x330 [ 2859.118609][T24348] do_splice_direct+0x200/0x330 [ 2859.123459][T24348] ? security_file_permission+0x110/0x350 [ 2859.129175][T24348] do_sendfile+0x7e4/0xfd0 [ 2859.133599][T24348] __x64_sys_sendfile64+0xfc/0x1b0 [ 2859.138709][T24348] do_syscall_64+0xfe/0x140 [ 2859.143203][T24348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.149206][T24348] RIP: 0033:0x4598e9 [ 2859.153118][T24348] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2859.172836][T24348] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2859.181249][T24348] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2859.189236][T24348] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2859.197202][T24348] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2859.205170][T24348] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:20 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xffe7, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffdffff}]) 03:37:20 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2859.213244][T24348] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:20 executing program 2 (fault-call:4 fault-nth:34): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfcfd, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:20 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x700, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffdef}]) 03:37:21 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2859.340924][T24691] FAULT_INJECTION: forcing a failure. [ 2859.340924][T24691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.400677][T24691] CPU: 1 PID: 24691 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2859.408608][T24691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.418665][T24691] Call Trace: [ 2859.421954][T24691] dump_stack+0x1d8/0x2f8 [ 2859.426277][T24691] should_fail+0x555/0x770 [ 2859.430683][T24691] should_fail_alloc_page+0x55/0x60 [ 2859.435882][T24691] prepare_alloc_pages+0x283/0x470 [ 2859.435894][T24691] __alloc_pages_nodemask+0xb2/0x5d0 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x11fff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2859.435909][T24691] alloc_pages_current+0x2db/0x500 [ 2859.435921][T24691] push_pipe+0x3b1/0x750 [ 2859.435933][T24691] __pipe_get_pages+0x8b/0x390 [ 2859.460344][T24691] ? __kmalloc_node+0x4d/0x60 [ 2859.465008][T24691] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2859.470551][T24691] default_file_splice_read+0x10e/0x8d0 [ 2859.476092][T24691] ? fsnotify+0x1318/0x13d0 [ 2859.480595][T24691] ? security_file_permission+0x23c/0x350 [ 2859.486301][T24691] ? rw_verify_area+0x1c2/0x360 [ 2859.491135][T24691] ? __ia32_sys_tee+0xb0/0xb0 [ 2859.495798][T24691] splice_direct_to_actor+0x39c/0xac0 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10ad00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2859.501160][T24691] ? do_splice_direct+0x330/0x330 [ 2859.506184][T24691] do_splice_direct+0x200/0x330 [ 2859.511031][T24691] ? security_file_permission+0x110/0x350 [ 2859.516738][T24691] do_sendfile+0x7e4/0xfd0 [ 2859.516758][T24691] __x64_sys_sendfile64+0xfc/0x1b0 [ 2859.516770][T24691] do_syscall_64+0xfe/0x140 [ 2859.516781][T24691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.516789][T24691] RIP: 0033:0x4598e9 03:37:21 executing program 2 (fault-call:4 fault-nth:35): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xa00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2859.516798][T24691] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2859.516806][T24691] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2859.527155][T24691] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2859.527161][T24691] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2859.527166][T24691] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2859.527172][T24691] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:21 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2859.527177][T24691] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2859.622912][T25014] FAULT_INJECTION: forcing a failure. [ 2859.622912][T25014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.664401][T25014] CPU: 1 PID: 25014 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2859.672333][T25014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.682380][T25014] Call Trace: [ 2859.685669][T25014] dump_stack+0x1d8/0x2f8 [ 2859.689998][T25014] should_fail+0x555/0x770 [ 2859.694417][T25014] should_fail_alloc_page+0x55/0x60 [ 2859.699612][T25014] prepare_alloc_pages+0x283/0x470 [ 2859.704734][T25014] __alloc_pages_nodemask+0xb2/0x5d0 [ 2859.710019][T25014] alloc_pages_current+0x2db/0x500 [ 2859.715126][T25014] push_pipe+0x3b1/0x750 [ 2859.719366][T25014] __pipe_get_pages+0x8b/0x390 [ 2859.724124][T25014] ? __kmalloc_node+0x4d/0x60 [ 2859.728797][T25014] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2859.734341][T25014] default_file_splice_read+0x10e/0x8d0 [ 2859.739881][T25014] ? fsnotify+0x1318/0x13d0 [ 2859.744385][T25014] ? security_file_permission+0x23c/0x350 [ 2859.750095][T25014] ? rw_verify_area+0x1c2/0x360 [ 2859.754935][T25014] ? __ia32_sys_tee+0xb0/0xb0 [ 2859.759605][T25014] splice_direct_to_actor+0x39c/0xac0 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10be00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2859.764964][T25014] ? do_splice_direct+0x330/0x330 [ 2859.769987][T25014] do_splice_direct+0x200/0x330 [ 2859.774841][T25014] ? security_file_permission+0x110/0x350 [ 2859.780726][T25014] do_sendfile+0x7e4/0xfd0 [ 2859.785139][T25014] __x64_sys_sendfile64+0xfc/0x1b0 [ 2859.785152][T25014] do_syscall_64+0xfe/0x140 [ 2859.785163][T25014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.785171][T25014] RIP: 0033:0x4598e9 [ 2859.785179][T25014] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2859.785184][T25014] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2859.785193][T25014] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2859.785198][T25014] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2859.785203][T25014] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2859.785207][T25014] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:21 executing program 2 (fault-call:4 fault-nth:36): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffdfc}]) 03:37:21 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2859.785216][T25014] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2859.892625][T25464] FAULT_INJECTION: forcing a failure. [ 2859.892625][T25464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2859.934158][T25464] CPU: 0 PID: 25464 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2859.942079][T25464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.942083][T25464] Call Trace: [ 2859.942099][T25464] dump_stack+0x1d8/0x2f8 [ 2859.942115][T25464] should_fail+0x555/0x770 [ 2859.942129][T25464] should_fail_alloc_page+0x55/0x60 [ 2859.969537][T25464] prepare_alloc_pages+0x283/0x470 [ 2859.974649][T25464] __alloc_pages_nodemask+0xb2/0x5d0 03:37:21 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfdfc, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2859.979933][T25464] alloc_pages_current+0x2db/0x500 [ 2859.985041][T25464] push_pipe+0x3b1/0x750 [ 2859.985053][T25464] __pipe_get_pages+0x8b/0x390 [ 2859.985064][T25464] ? __kmalloc_node+0x4d/0x60 [ 2859.985075][T25464] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2859.985088][T25464] default_file_splice_read+0x10e/0x8d0 [ 2859.994059][T25464] ? fsnotify+0x1318/0x13d0 [ 2859.994079][T25464] ? security_file_permission+0x23c/0x350 [ 2859.994091][T25464] ? rw_verify_area+0x1c2/0x360 [ 2860.004267][T25464] ? __ia32_sys_tee+0xb0/0xb0 [ 2860.004277][T25464] splice_direct_to_actor+0x39c/0xac0 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x209d00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2860.004285][T25464] ? do_splice_direct+0x330/0x330 [ 2860.004301][T25464] do_splice_direct+0x200/0x330 [ 2860.004317][T25464] ? security_file_permission+0x110/0x350 [ 2860.014313][T25464] do_sendfile+0x7e4/0xfd0 [ 2860.014334][T25464] __x64_sys_sendfile64+0xfc/0x1b0 [ 2860.014345][T25464] do_syscall_64+0xfe/0x140 [ 2860.014356][T25464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.014367][T25464] RIP: 0033:0x4598e9 03:37:21 executing program 2 (fault-call:4 fault-nth:37): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x20ae00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2860.024884][T25464] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2860.024890][T25464] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2860.024899][T25464] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2860.024904][T25464] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2860.024909][T25464] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2860.024914][T25464] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2860.024918][T25464] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 [ 2860.120190][T25732] FAULT_INJECTION: forcing a failure. [ 2860.120190][T25732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2860.167003][T25732] CPU: 1 PID: 25732 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2860.174921][T25732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.184975][T25732] Call Trace: [ 2860.188524][T25732] dump_stack+0x1d8/0x2f8 [ 2860.192858][T25732] should_fail+0x555/0x770 [ 2860.197272][T25732] should_fail_alloc_page+0x55/0x60 [ 2860.202467][T25732] prepare_alloc_pages+0x283/0x470 [ 2860.207578][T25732] __alloc_pages_nodemask+0xb2/0x5d0 [ 2860.212855][T25732] alloc_pages_current+0x2db/0x500 [ 2860.217956][T25732] push_pipe+0x3b1/0x750 [ 2860.222191][T25732] __pipe_get_pages+0x8b/0x390 [ 2860.226951][T25732] ? __kmalloc_node+0x4d/0x60 03:37:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x309e00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2860.231620][T25732] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2860.237166][T25732] default_file_splice_read+0x10e/0x8d0 [ 2860.242705][T25732] ? fsnotify+0x1318/0x13d0 [ 2860.247202][T25732] ? security_file_permission+0x23c/0x350 [ 2860.247212][T25732] ? rw_verify_area+0x1c2/0x360 [ 2860.247221][T25732] ? __ia32_sys_tee+0xb0/0xb0 [ 2860.247228][T25732] splice_direct_to_actor+0x39c/0xac0 [ 2860.247234][T25732] ? do_splice_direct+0x330/0x330 [ 2860.247248][T25732] do_splice_direct+0x200/0x330 [ 2860.247260][T25732] ? security_file_permission+0x110/0x350 [ 2860.283321][T25732] do_sendfile+0x7e4/0xfd0 [ 2860.287749][T25732] __x64_sys_sendfile64+0xfc/0x1b0 [ 2860.292861][T25732] do_syscall_64+0xfe/0x140 [ 2860.297365][T25732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.303246][T25732] RIP: 0033:0x4598e9 [ 2860.307134][T25732] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2860.326854][T25732] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:37:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x30af00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2860.335262][T25732] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2860.343237][T25732] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2860.351211][T25732] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2860.359185][T25732] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2860.367156][T25732] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffdfe}]) 03:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfdfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:22 executing program 2 (fault-call:4 fault-nth:38): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2860.528004][T26092] FAULT_INJECTION: forcing a failure. [ 2860.528004][T26092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2860.541881][T26092] CPU: 1 PID: 26092 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2860.549792][T26092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.559864][T26092] Call Trace: [ 2860.559881][T26092] dump_stack+0x1d8/0x2f8 [ 2860.559897][T26092] should_fail+0x555/0x770 [ 2860.559912][T26092] should_fail_alloc_page+0x55/0x60 [ 2860.577073][T26092] prepare_alloc_pages+0x283/0x470 [ 2860.582187][T26092] __alloc_pages_nodemask+0xb2/0x5d0 [ 2860.587468][T26092] alloc_pages_current+0x2db/0x500 [ 2860.587481][T26092] push_pipe+0x3b1/0x750 [ 2860.587493][T26092] __pipe_get_pages+0x8b/0x390 [ 2860.596804][T26092] ? __kmalloc_node+0x4d/0x60 [ 2860.606198][T26092] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2860.611739][T26092] default_file_splice_read+0x10e/0x8d0 [ 2860.611754][T26092] ? fsnotify+0x1318/0x13d0 [ 2860.611771][T26092] ? security_file_permission+0x23c/0x350 03:37:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x409f00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2860.627486][T26092] ? rw_verify_area+0x1c2/0x360 [ 2860.627497][T26092] ? __ia32_sys_tee+0xb0/0xb0 [ 2860.627505][T26092] splice_direct_to_actor+0x39c/0xac0 [ 2860.627511][T26092] ? do_splice_direct+0x330/0x330 [ 2860.627526][T26092] do_splice_direct+0x200/0x330 [ 2860.627541][T26092] ? security_file_permission+0x110/0x350 [ 2860.658767][T26092] do_sendfile+0x7e4/0xfd0 [ 2860.663274][T26092] __x64_sys_sendfile64+0xfc/0x1b0 [ 2860.668378][T26092] do_syscall_64+0xfe/0x140 [ 2860.672870][T26092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2860.678754][T26092] RIP: 0033:0x4598e9 [ 2860.682642][T26092] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2860.702234][T26092] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2860.710728][T26092] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2860.718695][T26092] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2c01, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x40b000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:22 executing program 2 (fault-call:4 fault-nth:39): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffdff}]) [ 2860.726665][T26092] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2860.734631][T26092] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2860.742598][T26092] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfdff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2860.882698][T26523] FAULT_INJECTION: forcing a failure. [ 2860.882698][T26523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2860.919723][T26523] CPU: 0 PID: 26523 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2860.927650][T26523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.937701][T26523] Call Trace: [ 2860.940989][T26523] dump_stack+0x1d8/0x2f8 [ 2860.945324][T26523] should_fail+0x555/0x770 [ 2860.949750][T26523] should_fail_alloc_page+0x55/0x60 [ 2860.954947][T26523] prepare_alloc_pages+0x283/0x470 [ 2860.960057][T26523] __alloc_pages_nodemask+0xb2/0x5d0 [ 2860.965331][T26523] alloc_pages_current+0x2db/0x500 [ 2860.970436][T26523] push_pipe+0x3b1/0x750 [ 2860.974672][T26523] __pipe_get_pages+0x8b/0x390 [ 2860.979426][T26523] ? __kmalloc_node+0x4d/0x60 [ 2860.984092][T26523] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2860.989621][T26523] default_file_splice_read+0x10e/0x8d0 [ 2860.989634][T26523] ? fsnotify+0x1318/0x13d0 [ 2860.989650][T26523] ? security_file_permission+0x23c/0x350 [ 2860.989662][T26523] ? rw_verify_area+0x1c2/0x360 [ 2861.010208][T26523] ? __ia32_sys_tee+0xb0/0xb0 [ 2861.014883][T26523] splice_direct_to_actor+0x39c/0xac0 [ 2861.020250][T26523] ? do_splice_direct+0x330/0x330 [ 2861.025279][T26523] do_splice_direct+0x200/0x330 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2861.030131][T26523] ? security_file_permission+0x110/0x350 [ 2861.035842][T26523] do_sendfile+0x7e4/0xfd0 [ 2861.040264][T26523] __x64_sys_sendfile64+0xfc/0x1b0 [ 2861.045374][T26523] do_syscall_64+0xfe/0x140 [ 2861.049877][T26523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.049892][T26523] RIP: 0033:0x4598e9 [ 2861.059632][T26523] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:37:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffe00}]) [ 2861.059637][T26523] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2861.087635][T26523] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2861.095606][T26523] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2861.103574][T26523] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2861.111539][T26523] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2861.119497][T26523] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfe00, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x50a000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:22 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:22 executing program 2 (fault-call:4 fault-nth:40): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:22 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfefd, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x10000000000}]) 03:37:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x50b100, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:23 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x400000000000}]) [ 2861.335392][T27016] FAULT_INJECTION: forcing a failure. [ 2861.335392][T27016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 03:37:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffd, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4401, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2861.421398][T27016] CPU: 1 PID: 27016 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2861.429325][T27016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.439374][T27016] Call Trace: [ 2861.442664][T27016] dump_stack+0x1d8/0x2f8 [ 2861.446994][T27016] should_fail+0x555/0x770 [ 2861.451417][T27016] should_fail_alloc_page+0x55/0x60 [ 2861.456613][T27016] prepare_alloc_pages+0x283/0x470 [ 2861.461722][T27016] __alloc_pages_nodemask+0xb2/0x5d0 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x60a100, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x60b200, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2861.467009][T27016] alloc_pages_current+0x2db/0x500 [ 2861.472113][T27016] push_pipe+0x3b1/0x750 [ 2861.476356][T27016] __pipe_get_pages+0x8b/0x390 [ 2861.481119][T27016] ? __kmalloc_node+0x4d/0x60 [ 2861.485790][T27016] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2861.491330][T27016] default_file_splice_read+0x10e/0x8d0 [ 2861.496876][T27016] ? fsnotify+0x1318/0x13d0 [ 2861.501381][T27016] ? security_file_permission+0x23c/0x350 [ 2861.507093][T27016] ? rw_verify_area+0x1c2/0x360 [ 2861.511942][T27016] ? __ia32_sys_tee+0xb0/0xb0 [ 2861.516611][T27016] splice_direct_to_actor+0x39c/0xac0 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x70a200, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2861.521977][T27016] ? do_splice_direct+0x330/0x330 [ 2861.527001][T27016] do_splice_direct+0x200/0x330 [ 2861.531857][T27016] ? security_file_permission+0x110/0x350 [ 2861.537573][T27016] do_sendfile+0x7e4/0xfd0 [ 2861.541988][T27016] __x64_sys_sendfile64+0xfc/0x1b0 [ 2861.547098][T27016] do_syscall_64+0xfe/0x140 [ 2861.551619][T27016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.557505][T27016] RIP: 0033:0x4598e9 [ 2861.561390][T27016] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2861.581070][T27016] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2861.589475][T27016] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2861.597447][T27016] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2861.605420][T27016] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2861.613388][T27016] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2861.621354][T27016] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:23 executing program 2 (fault-call:4 fault-nth:41): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x70b300, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x6000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:23 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x555555cc6000}]) 03:37:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2861.767513][T27618] FAULT_INJECTION: forcing a failure. [ 2861.767513][T27618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2861.792329][T27618] CPU: 1 PID: 27618 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2861.800258][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2861.810307][T27618] Call Trace: [ 2861.813592][T27618] dump_stack+0x1d8/0x2f8 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x80a300, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2861.817925][T27618] should_fail+0x555/0x770 [ 2861.822343][T27618] should_fail_alloc_page+0x55/0x60 [ 2861.827553][T27618] prepare_alloc_pages+0x283/0x470 [ 2861.832645][T27618] __alloc_pages_nodemask+0xb2/0x5d0 [ 2861.837924][T27618] alloc_pages_current+0x2db/0x500 [ 2861.843035][T27618] push_pipe+0x3b1/0x750 [ 2861.847274][T27618] __pipe_get_pages+0x8b/0x390 [ 2861.852047][T27618] ? __kmalloc_node+0x4d/0x60 [ 2861.856708][T27618] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2861.856720][T27618] default_file_splice_read+0x10e/0x8d0 03:37:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x60ff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2861.856732][T27618] ? fsnotify+0x1318/0x13d0 [ 2861.856748][T27618] ? security_file_permission+0x23c/0x350 [ 2861.856758][T27618] ? rw_verify_area+0x1c2/0x360 [ 2861.856765][T27618] ? __ia32_sys_tee+0xb0/0xb0 [ 2861.856775][T27618] splice_direct_to_actor+0x39c/0xac0 [ 2861.887515][T27618] ? do_splice_direct+0x330/0x330 [ 2861.897885][T27618] do_splice_direct+0x200/0x330 [ 2861.897897][T27618] ? security_file_permission+0x110/0x350 [ 2861.897907][T27618] do_sendfile+0x7e4/0xfd0 [ 2861.897924][T27618] __x64_sys_sendfile64+0xfc/0x1b0 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x80b400, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2861.897939][T27618] do_syscall_64+0xfe/0x140 [ 2861.922467][T27618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.928348][T27618] RIP: 0033:0x4598e9 [ 2861.932233][T27618] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2861.951829][T27618] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2861.960234][T27618] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 03:37:23 executing program 2 (fault-call:4 fault-nth:42): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:23 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x555555ce8000}]) [ 2861.968200][T27618] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2861.976163][T27618] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2861.984122][T27618] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2861.992088][T27618] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:23 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x90a400, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x50f000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:23 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:23 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2862.095466][T28105] FAULT_INJECTION: forcing a failure. [ 2862.095466][T28105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2862.168259][T28105] CPU: 0 PID: 28105 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2862.176188][T28105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2862.186238][T28105] Call Trace: [ 2862.189614][T28105] dump_stack+0x1d8/0x2f8 [ 2862.193949][T28105] should_fail+0x555/0x770 [ 2862.198360][T28105] should_fail_alloc_page+0x55/0x60 [ 2862.203547][T28105] prepare_alloc_pages+0x283/0x470 [ 2862.208652][T28105] __alloc_pages_nodemask+0xb2/0x5d0 [ 2862.213929][T28105] alloc_pages_current+0x2db/0x500 [ 2862.219014][T28105] push_pipe+0x3b1/0x750 [ 2862.223231][T28105] __pipe_get_pages+0x8b/0x390 [ 2862.227971][T28105] ? __kmalloc_node+0x4d/0x60 [ 2862.232629][T28105] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2862.238158][T28105] default_file_splice_read+0x10e/0x8d0 [ 2862.243693][T28105] ? fsnotify+0x1318/0x13d0 [ 2862.248173][T28105] ? security_file_permission+0x23c/0x350 [ 2862.253866][T28105] ? rw_verify_area+0x1c2/0x360 [ 2862.258720][T28105] ? __ia32_sys_tee+0xb0/0xb0 [ 2862.263383][T28105] splice_direct_to_actor+0x39c/0xac0 [ 2862.268742][T28105] ? do_splice_direct+0x330/0x330 [ 2862.273745][T28105] do_splice_direct+0x200/0x330 [ 2862.278575][T28105] ? security_file_permission+0x110/0x350 [ 2862.284283][T28105] do_sendfile+0x7e4/0xfd0 [ 2862.288696][T28105] __x64_sys_sendfile64+0xfc/0x1b0 [ 2862.293788][T28105] do_syscall_64+0xfe/0x140 [ 2862.298266][T28105] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2862.304136][T28105] RIP: 0033:0x4598e9 [ 2862.308014][T28105] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2862.327606][T28105] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2862.336002][T28105] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2862.343956][T28105] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2862.351906][T28105] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2862.359852][T28105] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xac05, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x60ffffffffff}]) 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x707100, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2862.367840][T28105] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x90b500, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:24 executing program 2 (fault-call:4 fault-nth:43): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x760000000000}]) 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb001, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2862.530166][T28482] FAULT_INJECTION: forcing a failure. [ 2862.530166][T28482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2862.562176][T28482] CPU: 1 PID: 28482 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2862.570102][T28482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x70e000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2862.580156][T28482] Call Trace: [ 2862.583449][T28482] dump_stack+0x1d8/0x2f8 [ 2862.587779][T28482] should_fail+0x555/0x770 [ 2862.592199][T28482] should_fail_alloc_page+0x55/0x60 [ 2862.597394][T28482] prepare_alloc_pages+0x283/0x470 [ 2862.602505][T28482] __alloc_pages_nodemask+0xb2/0x5d0 [ 2862.607788][T28482] alloc_pages_current+0x2db/0x500 [ 2862.612878][T28482] push_pipe+0x3b1/0x750 [ 2862.617114][T28482] __pipe_get_pages+0x8b/0x390 [ 2862.621863][T28482] ? __kmalloc_node+0x4d/0x60 03:37:24 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9d2000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2862.626525][T28482] iov_iter_get_pages_alloc+0x89b/0xc50 [ 2862.632055][T28482] default_file_splice_read+0x10e/0x8d0 [ 2862.637597][T28482] ? fsnotify+0x1318/0x13d0 [ 2862.642101][T28482] ? security_file_permission+0x23c/0x350 [ 2862.647816][T28482] ? rw_verify_area+0x1c2/0x360 [ 2862.652658][T28482] ? __ia32_sys_tee+0xb0/0xb0 [ 2862.657326][T28482] splice_direct_to_actor+0x39c/0xac0 [ 2862.662685][T28482] ? do_splice_direct+0x330/0x330 [ 2862.667708][T28482] do_splice_direct+0x200/0x330 [ 2862.672556][T28482] ? security_file_permission+0x110/0x350 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb101, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2862.678358][T28482] do_sendfile+0x7e4/0xfd0 [ 2862.682772][T28482] __x64_sys_sendfile64+0xfc/0x1b0 [ 2862.687879][T28482] do_syscall_64+0xfe/0x140 [ 2862.692371][T28482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2862.698249][T28482] RIP: 0033:0x4598e9 [ 2862.702138][T28482] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2862.721730][T28482] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 2 (fault-call:4 fault-nth:44): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x7fdb1a1c6000}]) [ 2862.721739][T28482] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2862.721743][T28482] RDX: 00000000200001c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 2862.721747][T28482] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2862.721752][T28482] R10: 000000010a000d02 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2862.721757][T28482] R13: 00000000004c709e R14: 00000000004dc750 R15: 0000000000000006 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xdc05, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x717000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:24 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9e3000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x7ffffffff000}]) 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x760000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe803, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0x2, 0x10a000d02) 03:37:24 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9f4000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x960000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0x7, 0x10a000d02) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x960000000000}]) 03:37:24 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf401, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xe07000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:24 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa05000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x601c1adb7f0000}]) 03:37:24 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x7ffff000) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf05000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfc00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x60cc5555550000}]) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d03) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d04) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa0a500, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfeffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d05) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x70710000000000}]) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d06) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff01, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa0b600, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x80ce5555550000}]) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d07) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d08) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xe0700000000000}]) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff03, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa16000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d09) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xf0500000000000}]) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff07, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa27000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0a) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xf0ffffff7f0000}]) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff0f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0b) 03:37:25 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa38000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfeffffffffffff}]) 03:37:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:25 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0c) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff1f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa49000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x100000000000000}]) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0d) 03:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff3f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa5a000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0e) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x200000000000000}]) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa6b000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff7f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d0f) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x300000000000000}]) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa7c000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d10) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa8d000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x400000000000000}]) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) dup2(0xffffffffffffffff, r1) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x14, 0x6) 03:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1f000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x500000000000000}]) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa9e000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0xc0000) write$P9_RCLUNK(r3, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000200)=0x1e) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil) 03:37:26 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:26 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xaaf000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:26 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x700000000000000}]) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = accept4$rose(r3, &(0x7f0000000280)=@short={0xb, @dev, @netrom, 0x1, @null}, &(0x7f00000002c0)=0x1c, 0x80000) ioctl(r4, 0x4, &(0x7f0000000380)="a99708162b9011ad7e3931cdade892504db1090f19565f3b5690a52f78a6e66d949e658ae328898513e12d3e8ac3f1db9f8b4592fd752ef8ed23855906f45a36cd07cbab408af9a4be1bc90518cd2114fd5165910fd1e2649861c547a5b911a4ceacf2f78d5960fb061787ce85bfe6f9f99ffb267963b583a99c9296d1e0c0c35d0940feb9c688f6687c74d88ede00feb609c9f177bb8a890a315d848cef18578ef54e74d54c136fcfb09c547a81c394bdb95a0f3a3ad9ddcfd761cdd6e81e062bacdf94168a45fc") setresuid(0x0, r2, 0x0) setuid(r2) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(r6, r5, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000240)={0x5, {0x8, 0x4, 0x2, 0xf7d}}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r7}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r7, 0x2}, 0x8) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xac0000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x800000000000000}]) 03:37:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x85000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x8229, 0x3, 0x88a2, 0xd81, 0x6}, 0x14) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xf00000000000000}]) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xad1000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101781, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x1, 0x5}) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xeffdffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x1f00000000000000}]) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xae2000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x404000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000300)={0x0, 0x2, 0x2, &(0x7f00000002c0)=0x9}) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80000, 0x2d0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r7, 0x0) restart_syscall() r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e20, @rand_addr=0x60707f8a}, {0x1, @broadcast}, 0x7a, {0x2, 0x4e20, @loopback}, 'lo\x00'}) openat$cgroup_ro(r7, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) r9 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000440), 0x4) 03:37:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x3900000000000000}]) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xaf3000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfcfdffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x4000000000000000}]) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb04000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfefdffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x8000000000000000}]) 03:37:27 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb0a600, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:27 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xff600000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xeffdffffffffffff}]) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb0b700, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffdffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfcfdffffffffffff}]) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb15000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfefdffffffffffff}]) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb26000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffdfc, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffdffffffffffff}]) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xffffffff00000000}]) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb37000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffdfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xffffffffff600000}]) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb48000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffdff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:28 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb59000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffffffffffdef}]) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffe00, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:28 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x5000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb6a000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffffffffffdfc}]) 03:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x6000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffffffffffdfe}]) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb7b000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x10000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffffffffffdff}]) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb8c000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x8000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0xfffffffffffffe00}]) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb9d000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x555556282000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x2}]) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x5555562a4000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbae000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:29 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xa000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:29 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:29 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbbf000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x3}]) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x760000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbd0000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x4}]) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7f3762f7a000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbe1000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x5}]) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x7ffffffff000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x7}]) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x960000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc0a700, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x8}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x20285655550000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc0b800, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x402a5655550000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd0a800, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x39}]) 03:37:30 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x70710000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:30 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x20000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:30 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd0b900, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfe}]) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xa0f762377f0000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2c010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe0a900, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x300}]) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xe0700000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe0ba00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x500}]) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x30000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xf0aa00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf0500000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x700}]) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf00}]) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xf0bb00, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf0ffffff7f0000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x1f00}]) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfeffffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x40000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:31 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x3900}]) 03:37:31 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:31 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x44010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x4000}]) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4feeff7f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x60ff}]) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x7600}]) 03:37:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x60000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x6000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x9600}]) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7befff7f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xeffd}]) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfcfd}]) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x8000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x800000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfdef}]) 03:37:32 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x9000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:32 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffee4f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xf00000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfdfc}]) 03:37:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffef7b, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfdfe}]) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffefff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfdff}]) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xac050000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfe00}]) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x8500000000000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb0010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfefd}]) 03:37:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xeffdffffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:33 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb1010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffd}]) 03:37:33 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:33 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfcfdffffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x400000}]) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xdc050000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe0ffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfefdffffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x11000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x50f000}]) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x12000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe8030000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffdffffffffffff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x707100}]) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x20000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf4010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x70e000}]) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfc000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xffffffffff600000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x717000}]) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x25000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x760000}]) 03:37:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:34 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfdffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:34 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3f000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffffffffdfc, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfe80ffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x960000}]) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x40000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfec0ffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xe07000}]) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffffffffdff, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5c000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf05000}]) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe7ffffff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfeffff}]) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfdfdffff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x1000000}]) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff030000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfecaedfe, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x2000000}]) 03:37:35 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff070000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000340)={r3, &(0x7f0000000280)=""/146}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r5, r4, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) 03:37:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfeedcafe, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:35 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x3000000}]) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x280882, 0x15) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff0f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xff1f0100, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x4000000}]) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r4, r3, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff1f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfffffdfd, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x5000000}]) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x515773f87f6140fc, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000000000, 0x3ab, 0x0, 0x200, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3f, 0x400002) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={r6, 0x1, 0x7a18, 0x5}, &(0x7f00000003c0)=0x10) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x1) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000200)=""/244, &(0x7f0000000080)=0xf4) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x7000000}]) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xffffffe7, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff3f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xac0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x8000000}]) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x52, 0xfff}, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000280)={0x3, 0x10000, 0xffffffffffffbb75, 0xffffffff, 0x81, 0x40}) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000002c0)=0x1, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @dev}, &(0x7f0000000100)=0xc) r6 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x301000) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x11, 0x7f, 0x0, 0x4, 0x100, r4, 0xffffffff, [], r5, r6, 0x1, 0x1}, 0x3c) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x85, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf000000}]) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xbd0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff600000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x9a46) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:36 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x1f000000}]) 03:37:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfe, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:36 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff7f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000400)={0x0, 0x5, 0x40, 0xff}) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80000000, 0x80) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000200)={0x0, {0x3, 0x2e, 0x347, 0x5, 0xfffffffffffffffb, 0x9}}) r4 = socket$inet6(0x10, 0x3, 0x0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000280)={0x800, "9f2dce7270ce2a7457b5f61eaac0ad367edd5cefba57d687b487bce684b26eca", 0xd, 0x200, 0x9, 0x200, 0x1, 0x3, 0x2, 0x5}) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "d65471deddb1aada", "bedd10e45ab1102c9d1d6af76cf763d5", "23a48f14", "6202ce7653a50d1c"}, 0x28) sendfile(0xffffffffffffffff, r2, &(0x7f00000001c0)=0xc000bfd, 0x6) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f00000003c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x3, {0xa, 0x4e24, 0x401, @empty, 0x401}, r7}}, 0x38) 03:37:36 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10ad0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x39000000}]) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffefff7f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x10be0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x40000000}]) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl(r2, 0x6, &(0x7f0000000280)="261c1fca39606c2780dd477dc50a7bc61b95c5de8faa0f313d77b2d12f8247b46c5c8c75af2b66df18f5a9ac9592246fa7733df942a4c81d0e36041e0e71e711319b3eb2c1f639c31cceba1f05c92dd2587f54") r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000200)={0x0, "1b219ffe163debc9d25466ffa222e6d429c7c00f4dce0e00000000000000def5", 0x800, 0x20000005, 0x7, 0x1, 0x4}) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x30402) write(r1, &(0x7f0000000100)="4ebfa0e6de9b8124713c823c2b4754bee9c512730da0c177f1ca0c7a600554b7fa98eaa27ce35310a2d3f8d27ecfe1d628036884c380b4b2ee", 0x39) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0xc000efd, 0x10a000d02) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x209d0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xeffdffff}]) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x700, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0100, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400e00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x10000, 0x1c000, 0xfe003632854a66ee, 0x0, 0x4, 0xfffffffffffffff9, 0x6, 0x1}, &(0x7f0000000200)=0x20) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000280)={0x0, {0x3f, 0xd0, 0x3ff, 0x6}}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)={0xd5c6}) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0xf0, 0x4) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x20ae0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfcfdffff}]) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf00, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9745d4acf6702742, 0xf9) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0300, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x309e0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) keyctl$join(0x1, 0x0) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfefdffff}]) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1f00, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0700, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:37 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x30af0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xff600000}]) 03:37:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:37 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:37 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x409f0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000340)) r3 = syz_open_procfs(r1, &(0x7f0000000080)='comm\x00') ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x7) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioprio_set$uid(0x8101a8f2bcf6ed51, r4, 0x6) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r6, r5, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x60ff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffdffff}]) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r4 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x4, 0x3, 0x80}, 0x3, 0x81, 'id0\x00', 'timer1\x00', 0x0, 0x8, 0x9d, 0xff, 0x8}) sendfile(r4, r3, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x40b00000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff1f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7600, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffdef}]) 03:37:38 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000080)={0x7, 'syz0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x50a00000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8500, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff3f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffdfc}]) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000280)=""/249) r3 = openat$cgroup_int(r0, &(0x7f0000000200)='Z\xde\xfc\xaal\x84\xa3\xeb\xcf\x9f\xd9\x95G\xf50xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x9600, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffdfe}]) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb6f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xeffd, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff7f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x60a10000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000200)="a273e9a990de4e11ae1055beb0a7d42b", 0x10) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffdff}]) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "9723c89c66ea368973acd92eaf0c0215"}, 0x11, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfcfd, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:38 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff80fe, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffe00}]) 03:37:38 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x60b20000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x84\x90L\xbe\xba\xa6\xcbjH\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:38 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000200)=""/115, &(0x7f0000000080)=0x73) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x10000000000}]) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffc0fe, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfdef, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x70a20000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfdfc, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x400000000000}]) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x13, 0x900) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cp\xc7\xcf\x1b\x93\xda\xd4r\x03dwall\x00\x00\x00\x00\x009\xa5\xa4\xbb\x19u\x91\x7fU~\xf6\x95I8\x88\xf3+o\xfe\xbd\xa7\xf9\x8d\xd9\xf6\xc1\xba\xa1\x8d\xc7)\'Fq\xc4\x15\xc7\x86a=R)\xe8Cl;\xfb\x11\xe0O\xc7O\x02\xc7\xa6\xe4@\x91K._\xc4i\x8d\xca.1D\xc7-\xffI?\xe1%\xce\xce:\x84l\xa2o\xec!W\xaa\xb3\xfd\xfb\x02\xd7\xab\x83\xc8\xa3\xc4\x06a\xe4\x8c\x1ai\x06\x15\xec\x0e\xceB\x03Y\"\xfbX\xdd\xa7\xec\x11\xb7\t9b\x8b\xe1\xe5\xef\xc5\xbeF\xffE\x00?\xaci\b\x87s\xfdt#iw\v\xa3:\n\xec\xdeQ\xd8\x9a\xc1.\x06\x80[(^t\xfc\xb8\xeaL\xb2\xd3\xf9\xd0\x93\x1fie\xec4\xed\x14\xa63\xc0P\xce\x0fp>\xb6\xf2\xe1pB\xed\xd6f?\xbfQ\xec\x01iu\xabX\xfal\xd0\xbd\xab\x06\xed)\x0f\xdb]\xa9ZBP\xccR\x9c\b4\xeb9\xfb\x10', 0x2, 0x0) sendfile(r5, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x70b30000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x80) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000240)={0x9, 0x7, 0x80, 0x80}) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={0x9}, 0x8, 0x80800) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfdfe, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff01, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x555555cc6000}]) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x80a30000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = semget$private(0x0, 0x1, 0x308) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000200)=""/4096) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x555555ce8000}]) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfdff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff03, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x80b40000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d03, 0x10001]}) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000200)={0xdc, "d27f16344021412508898e67d44decbc5bad2b479abd2fa5b4bf1820e5152df80ae52b181a18c91a359596dc81ab3229031321302047c0cea752c00dbecb9524cd23e9862257893434e12f49f96fde2187de9b29113fec641b24b312a31f61a7e2b272a3b29fde47345a9a4728b38f2b5e5a67975e512648d1d55387731af9072384cae92e1667435f5b56c33d4d5814fd956a78822a28afcbf1e53b637c10c0bee7c2cd1e3f7808b6696dadd0b0815ac94750fa82540c1e7e0d74980479131c35c5ddeee9572340a5f7b14bc840ae4dfc3465e560b8dd5581fd7f8b"}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fstatfs(r1, &(0x7f0000000080)=""/40) r5 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r6 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r6, 0x0) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000100)=0x3) semget(0x2, 0x1, 0x17a) r7 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r7, r5, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x90a40000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff07, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfe00, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x60ffffffffff}]) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x90b50000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfefd, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:39 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:39 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x18d281) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000640)={0x34, 0x0, &(0x7f0000000600)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x8}, [@map={0x18, 0x5, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x5, 0x497a0f9e605646d3, 0x9, 0x2, 0x8}, @generic={0x9, 0x72b, 0x1000, 0x4, 0x12f20000}, @call={0x85, 0x0, 0x0, 0x55}, @ldst={0x3, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff}, @map={0x18, 0xa, 0x1, 0x0, 0x1}, @alu={0x7, 0x4, 0x0, 0x2, 0xa, 0x19, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x54, 0x0, &(0x7f0000000100), 0x40f00, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0x7ff, 0x3ff}, 0x10}, 0x70) dup2(r2, r5) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0xf000, 0x4000, 0x3, 0xd8e, 0x101}) r6 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r6, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_G_JPEGCOMP(r8, 0x808c563d, &(0x7f0000000680)) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0xfffffffffffffffc}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000400)={r9, @in={{0x2, 0x4e22, @local}}}, 0x84) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) r11 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x7fff, 0x80e80) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f00000005c0)={0x4, r11, 0x1}) 03:37:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x760000000000}]) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffd, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa0a50000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff1f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x7fdb1a1c6000}]) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa0b60000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x7ffffffff000}]) 03:37:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff3f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x50f000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb0a60000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x960000000000}]) 03:37:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff7f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x707100, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x601c1adb7f0000}]) 03:37:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffe0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb0b70000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x60cc5555550000}]) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x70e000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc0a70000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:40 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffffd, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x717000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:40 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x70710000000000}]) 03:37:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0xffffffffffffffff, r4, 0x80000000, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="8595000205000000fe"], &(0x7f0000000200)='GPLz', 0x5, 0xff7b, &(0x7f00000006c0)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=r6, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd43, 0x0, r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0xd, &(0x7f0000000100)='cgroup.procs\x00', r6}, 0x30) ptrace$getenv(0x4201, r7, 0xe6b, &(0x7f00000002c0)) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r9 = accept4$inet6(r8, &(0x7f0000000540)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000005c0)=0x1c, 0x800) setsockopt$inet6_MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000600)={0x400000000000, 0x1, 0x8, 0x4, 0x5}, 0xc) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x3, 0x422000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000480)={0x7, 0x100000000, 0x4, 0x1, 0x45e}) r12 = socket(0xa, 0x2, 0x6) bind$netlink(r12, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bind$unix(r10, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_init_net_socket$ax25(0x3, 0x99aa18622d7d6a7c, 0x7) 03:37:40 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc0b80000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5ef976ef, 0x240) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x3, 0xff, 0x5000000000000, 0x3, 0x3, 0xaba1]}, &(0x7f0000000200)=0x10) 03:37:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x760000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x80ce5555550000}]) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd0a80000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xe0700000000000}]) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x960000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf0500000000000}]) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000080)={0x800000000000000, 0x10000, @value=0x8}) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd0b90000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xe07000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40001, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000200)=0xc) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe0a90000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2080, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf05000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:41 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf0ffffff7f0000}]) 03:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d00) 03:37:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe0ba0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfeffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x7, 0x100000000, 0x6, 0x24, 0x0, 0x4, 0x20020, 0x6, 0x9, 0x100, 0x1, 0x6, 0x4, 0x51f, 0x5, 0x0, 0x0, 0x8, 0x361, 0x1f, 0xa00000000, 0xee32, 0x7fff, 0x200, 0xffffffff, 0x7ff, 0x7, 0x0, 0x7fff, 0x1000, 0x7f0, 0x3, 0x8, 0x7fff, 0xfffffffffffff49e, 0x8, 0x0, 0xe7ac, 0x0, @perf_bp={&(0x7f0000000080), 0x10}, 0x120, 0x1, 0x4, 0x4, 0x9, 0x80000000, 0x8}, r0, 0x3, r3, 0x4) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000100)="f9564786", 0x4}, {&(0x7f00000002c0)="4e6c59db63a22687d1797262e00874390269b1bacad9301d3949fdcd8f299a5e23ed0aae0fcd2fc0c82ed8dabec7ec665efb683f541d8ee3495e9e58512cff599b07", 0x42}, {&(0x7f0000000340)="78fa072cac07bfbf15bf5559c6e217aa493ed2f13a811e873575dce08236a83d71fa53dbaa8532bc740c4beff8076f2cc9d93336271d05cd29c7", 0x3a}, {&(0x7f0000000380)="9356014d4b5afcf606c8c7a9eea90e7fbba62abb44dc826e", 0x18}], 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xc0000000000000) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x970}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30a}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55517ce4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x180a52d42b8d1997) syz_open_dev$vivid(&(0x7f0000000200)='/dev/video#\x00', 0x2, 0x2) 03:37:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfeffffffffffff}]) 03:37:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xf0aa0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="cc6d5835284589aed6d05da1b3717a66b897586d0c7380f55cd5b1b13809cee4165fcb79ce8d8f6f676ffef51735576fa1fa66f31005a5b1a020228b0fb3d55bbcacd830aa467767d287295218f2cfcb1fa2f1dc05d23bb2ed7a56a11a4ca1e258e7f895f09939614d23f5ed206f1fb0cd126d19df7e002059", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r4}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x14, "c616ccfe0c71132f227d6365bb38b0c380d5bfab"}, &(0x7f0000000200)=0x1c) 03:37:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x100000000000000}]) 03:37:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xf0bb0000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10308, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0xbc, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000200)=""/188}, &(0x7f0000000340)=0x78) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x200000000000000}]) 03:37:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:42 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x8000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x3000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000080)={0x1, 0x80000001, 0xd94f}) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:42 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x100000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x300000000000000}]) 03:37:42 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x400000000000000}]) 03:37:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x200000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x500000000000000}]) 03:37:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xe) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000300)={0x0, 0xffffffffffffff04, 0x3, [], &(0x7f0000000100)=0x1}) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup\x81&\x99.pro%\aNx\x04\xfa[\xbct\f\xd1\b\x1bF{\xcau\xf9f2\xe6VJ\x1b-\v\xb4I\x9e8\xe0z\xe6R.\xe0L\xd1\n\x95\xb5b\xa2\x1e0\x8a\xa67\xbe\xb7\xd9 \x15\x9c\xb3\xcb\x13s\xd3YX\x82\xcb\xd8i\xa3\xc2\xd5\x8a\xf9\x1d\xbe\xd9\xbd\x8e\xddDk\xc2t\xa6\x88\xec\xf4kp\xb2Izx\x84\x01\xbc\xd0\x1c{8\xfd\r\xc0\xf3\x8d,\xf5\"\xe2`30\xc7\xabz#b\x9cy2\x9e\x96\\\x85\x97\xc5\xfd^gG\xe6\x19B\v\xfa\xb6\x9cY\xe4\vT5\xbcXe\xe5\xbb\x90\b\x16bU\xb0\x86\n\x1b\t}\x02\x8a\xb3\xf0\x9bs=\xfcL\x90I\x877\xa5N\xd7\xf8=FE\xe4\x1d\xde\x8d\xa5t\xb7\xf6&0\x04@M\x8c\xcb\xe0qu\xfc\xc1\xdb\x94\x8a\xfb\xf3\xf6\xaehZn@K\xd62\xc5p\xdd\xff\xf9\f\xb5_\xaf\f\x97WpXm\x98\x84!i\'\xefU|\xa2\x96\xdc\xfd\xbbNg]\x95', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffe, 0x10a000d02) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000080)="1658483325c2b296ddfb944120e2df00dc1ef34a98ceed648c27e253a9567977850c61a839ea9cae94844eaf1152e628042f12cea5e854fd78bf6d37e4236d264db4aba0f2677537cb03ed6ff5afb5b71faa1bed7e158f8f3a3dab17990ab524282aab551289a42cbb38") 03:37:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x5000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x1c880) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000200)={{0xddb, 0x2}, 'port0\x00', 0x44, 0x80000, 0x2bd8, 0x8, 0x4, 0x200, 0x1, 0x0, 0x2, 0x1}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x700000000000000}]) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x300000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x800000000000000}]) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x400000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x500000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 2: syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0xc0320c2c07545b52) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$RTC_WIE_ON(r4, 0x700f) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000080)=[0x5, 0x6]) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xf00000000000000}]) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x600000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00\xf0BK\xd6\xcc\x9a\xf9\xbd~\xc9\x94\xf80\x02\xaf\x8cX\x98\xba\x7f\xdf\x8d\x02\xefk\xf5\xaa\xf3\x83\x1c\x96\t\x00\x00e\x89\xbeP\xe7\xeb\xe0\x98%6\xfa\\\xed@\xafj\x82?\xce\x97a;\xbc\x88\xbbi\x9d\xaa9\x00\x00\x00\x00\x00\x00[~\x00\x00\x00\x00\x83\x0eV\x03O\x11\x1c2\xbc\xabBY\xc0*E\x14\x1c>q\xe2\t\xa4%Z\x0f\x8f\x0eD\xa7[BP\xd6\\\xbb\x8e\x02K\xea\xa9\v\x15\xc7]\x90\xdc\xc9\xde\x86\xf3l\xea\xcb\xe9\x0f2il\xb1\x93\xa3\xf9\xa0\x8c\xd79$\xe1e\xf5\x94\xbd\x8e,\x1c\xccv<\xa6\x9c\x0fhj\x10\x19\x97\xde)q\x85o\xa8DU\xcf\xd3\xb5\xe7\xa5\xf9o\x1c0O:\xe4\xadNg\v\xc6\x1ds\xbau\xcbM\xba\xbe\x18\xff\x91HE\xee\xc8\xb8oc\x9bh!\xbd\x04\xf9\xbc\t\x89\xc2>\x00\xb4\xaekG\xca\xfb\xac\r\x06\t\x90\xf58\xf7\xcae\xbe\xe5\xa4\x04m\x8dJO\x82\xf2\xf1]\xfa\xf3lj\"\xf0&\x14<\x90u|\xce\x13\xc0\a@Z\xca6X\xe5\x98\xbe\xffrh\xf1\x7f\xff\xf8U\xfc\xe5\xe86\x1bT\x8a\x94o\x9f[Q\xd1\x9a3/\xae\x98\v\xe5S\x9d\x985\xa0\x84\xc5\xb5i\xa1a\xf4\xb1\x87\xf9n\xdd\xf1>\xaf%\xa3\x1a', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x1f00000000000000}]) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x700000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1f000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x3900000000000000}]) 03:37:43 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:43 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x800000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x4000000000000000}]) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="f596d5e54ade3cddd633ee43624af8a43c2d41e10bd7aa39b029e48882b517caddfac739451c4c58e9831a73d8d1a4544781f003479602b475c7c50e0f4c40b30e29280aac1125815d72a205ef0f1bbccef03c6525075f6be013c7e190065b1365218235ba71ac82f37d650f3fda87234cbe29868bab00"/129, 0x81, r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='logon\x00', &(0x7f0000000100)='cgroup.procs\x00') r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x900000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0x8000000000000000}]) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000200)=0x1, 0x4) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xeffdffffffffffff}]) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x85000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x60ffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xa00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x3, 0x2) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r5) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x800000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xba9b}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xffffffff}}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@obj_role={'obj_role', 0x3d, 'cpuset.mem_hardwall\x00'}}]}}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x10001) r6 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r7, r6, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000000, 0x3, 0x0, 0x6, 0x8d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000200)={{0x2, 0x4e22, @multicast1}, {0x0, @dev={[], 0x10}}, 0x20, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 'veth1_to_hsr\x00'}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xeffdffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfcfdffffffffffff}]) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffffff000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xb00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfefdffffffffffff}]) 03:37:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d03, 0x10001]}) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000080)) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfcfdffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:44 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffdffffffffffff}]) 03:37:44 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xc00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfefdffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/102, 0x66) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0xaa, 0x4) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xffffffff00000000}]) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3a20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40008000}, 0x50f9e6fc020e73ba) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xff600000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000100)=0x6, 0x4) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xffffffffff600000}]) 03:37:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffdffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf4d, 0xa000) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000100)=0x1) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffffffffffdef}]) 03:37:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffdef, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1000000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffffffffffdfc}]) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2ce7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffffffffffdfe}]) 03:37:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1100000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffdfc, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000200)={0x5, "d922fb0ec5370fd6e9285c6c93736f8ccd6be5eff5f2719b2fb9429bcb276506", 0x1, 0x1}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x64000) syncfs(r3) r4 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r4, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:45 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffffffffffdff}]) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x1200000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffdfe, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:45 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) write$FUSE_ENTRY(r3, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x3, 0x2, 0x9, 0x6, 0x4, 0x1, {0x6, 0x66, 0x3ff, 0xc64d, 0x5, 0x15e9f3c7, 0x7, 0x1, 0xb0a5, 0x0, 0x1, r5, r6, 0x8, 0x101}}}, 0x90) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x0, 0x0, 0xfffffffffffffe00}]) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbef, 0xffffffffffffffff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0xc, 0x9, 0x9, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r3, 0x3, 0x80}, &(0x7f0000000240)=0x8) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffdff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2000000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60bc379d259e5229, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @bt={0x8, 0x100000000, 0x6, 0x10001, 0xffffffff, 0x3ff, 0x10, 0xd}}) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffe00, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x2500000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) tee(r3, r2, 0xe3ff, 0xb) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x490200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r4}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000003c0)={r4, 0x4}, &(0x7f0000000400)=0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socketpair(0x18, 0x1c610506c1c47def, 0x1, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000dc0)=0xec) open(&(0x7f0000000200)='./file0\x00', 0x60801, 0x105) ioctl$TUNSETOWNER(r1, 0x400454cc, r8) r9 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x101000, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x6, 0x6, &(0x7f0000000840)=[{&(0x7f00000004c0)="05f6f9ef1dbda8271d0d1135468cbc3f76e2a5362203af05c81bd427087f66c456ec1a001daaf0b3ef6963bed17aedd16a6e9ce04b98f6ceff5a5ee8eeabfe8974c49e314ba324e91f8fc102a2b4a6dc9c476c510f96c317b10670e65c60eaedffddc38c84538e9c6404bf922e3ce65742e9", 0x72, 0x2}, {&(0x7f0000000540)="cc51245b9bfecc7f62af9b55c37d66f53d0d93a3270050950e87d612fb957eed43717d2187157e4fe182158917cc9ffc64e215964e1b7faaade4fe8f2f4b14101b", 0x41, 0x10000}, {&(0x7f00000005c0)="84aefaa44efedd01d49a122e3b7d0145b0827c3b3cdcca9966c0cb6c4e776e35cb08836ff92261a52a66ade69637846efa3c4576be7e3740369c89b56bb10a72199afa76d98cba7f687a3e37e661239b52edc5f18366379970319cb2f065bd4cf89aa6b83efffdbc9f4ec8967ece636bb820cc306ff8fe740fbf1eaf9974836c55fc03b1d8a5af7127f12400e368031613d918555def1268f36fbd1a8ecb7c0cfc9ec2ce326cd42fd49c6f", 0xab, 0x3}, {&(0x7f0000000680)="92c592d78794827531be781f9e21c545eeba2672c1338df436f04a39c1724e46a48ccad802fb1d8738dd28e57e683fd6de48f884136f7ee5324a5628dcf9231f1578d84fc9143915eaf4b85da8f5da64737f981c7066f753ba97fa7e0c403a7b90a36c3014106ee7a36f36fd0cbc4f3a0bba5d9aafab4307a85aa882fe0f404bf46474afa7bb73e104d1b816047bd88c38b9eb17edd3d513322b4b9b9d9d50e73ae13f5c82b68dce26f4b4cc6559f50aa2f979b0070cab1487077fb3047aad6978f35850d46699cfb53a0c5244fb63687b5b8ebb58901cfc7f575dcc", 0xdc, 0xffffffffffffffe1}, {&(0x7f0000000780)="2197479606d961f333d0813f726a0047af802bfd917070b22fff4dc8974e40fb375403347d2ea66386f1cd46b4fc3b4566fc620229e6bc7f6d5e3cbcba81d0aa2238f3bf640fd7f3bef16b8eab5a99049dd12d14796f51d078d69af6f9fff4facbdecf1f4a33ec687e76adb1dddd", 0x6e, 0x6}, {&(0x7f0000000800)="a264213604cec9c1646e94c1935287165c2ea895fef8f698aa3ea8b396e8f3054584e2cf4bcf89a7a10b2dcccb1c26a98a0514985718", 0x36, 0x2}], 0x9, &(0x7f0000000900)={[], [{@dont_hash='dont_hash'}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@smackfsroot={'smackfsroot', 0x3d, 'selfem0eth0)\xb6loem0]em0lo$cgroupbdev[$'}}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r12}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r12}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000000340)={r12, 0xfffffffffffff784}, 0x8) sendfile(r10, r9, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x3f00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0x9000, 0x2006, 0x2, 0x100000], 0x2, 0x40, 0x1f}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x10000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4000000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) io_submit(r1, 0xb008f, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7fffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x5c00000000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x3, 0x40000, 0x0, 0x0, 0x0, 0x1a886, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x83c6, 0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84400) ioctl$KDSKBLED(r3, 0x4b65, 0x7) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fstatfs(r3, &(0x7f0000000140)=""/238) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x1ff) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf0ffffff7f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x555556282000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) accept(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x0, @dev}, &(0x7f00000001c0)=0x80) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000080)='\x00\x00\x00\a\b\x00\x00\x00\x00\xdf\xff\x00', 0xc, 0x60800) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:46 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xe7ffffffffffffff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="6885d6c6b9894240f052aa4d8d745a4f37ae350d5ca2c6b8016292712dab0a6c09609720fcf0c0654be5c9fa95e26fb4ff2aaa647dfa0495f10b6ff51f", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r3}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}}, [0x7, 0x800, 0x87, 0x9, 0x7, 0x8, 0x9, 0x10001, 0x5, 0x400, 0xe97, 0x7, 0x3, 0x1, 0x5]}, &(0x7f0000000100)=0x100) r4 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000300)={0x20071026, r4}, &(0x7f0000000380)={0x8, 0x8, 0xd, 0x3b, 0x63e1e036, 0x2}) r5 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) sendfile(r5, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x5555562a4000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:46 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/\xe4ev/audio#\x00', 0x0, 0x100) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:47 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfdfdffff00000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x60ffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x100000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') sendfile(r3, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000140)={0x0, 0x10001, 0x3017, 0x3}) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfdfdffffffffffff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x760000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1ffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffffffffffff, 0xc93, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)='+\x00', 0xfffffffffffffff8) keyctl$link(0x8, r3, 0xfffffffffffffffa) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x2}]) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200000) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7f3762f7a000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfecaedfe00000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x200000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000080)=r3, 0x1) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x1) uselib(&(0x7f0000000200)='./file0\x00') ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x81) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getenv(0x4201, r4, 0x8, &(0x7f0000000000)) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x82) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xff1f010000000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x7ffffffff000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x300000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xffffffff00000000, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc000ffc, 0x10a000d02) 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x960000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x101000) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x1590c0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x335}]) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:47 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3ffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) sync_file_range(r3, 0x2f, 0x3e, 0x7) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) write$tun(r3, &(0x7f0000000200)={@void, @val={0x6, 0x0, 0x8001, 0x7, 0x6, 0x40}, @llc={@snap={0x54, 0x0, 'k', "54887b", 0x8863, "e0112d260d2d4084e14c8cbffe7584783c2c11bd11987f9fe12508300aa63be89afea7e32dd05b3c8505e14eade959739ee2bdbcdb85000eb84b96a6593cb61c8ee54defef0bdc892a817e5649840ecf037123df60badabe3ccfcab85fc3bd12e7"}}}, 0x73) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x20285655550000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:47 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xfffffffffffffdfd, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x0, 0x1000, 0x1, 0x0, [0x0]}}, 0x29) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:47 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x400000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x8c341a093aa52363, 0x0, &(0x7f0000000200)=""/248, &(0x7f0000000040)=""/48, &(0x7f0000000300)=""/225, 0x2000}) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000080)=0x80000001) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x402a5655550000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xffffffffffffffe7, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="c0ebe635acba087eb95df3642f702c5af13bef93668e828d64b4fd7eb337a5c76f81b0e06f2cbfb7bb11f3f37f36bb2b71d0215716125983e9b89ee34472a740c9d2e2f672f99ca905c63d10f288477fc99abbe53d2277d0d7ac09ffd7c3ab311bdd42305c5a97d5b3c5d45cf3cf60880e48725447239d31f24c39167d84773893bbbd48807af702cb619d1bb819f8df4d9d24b09c71f4900cf49b", 0x9b, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="f596d5e54ade3cddd633ee43624af8a43c2d41e10bd7aa39b029e48882b517caddfac739451c4c58e9831a73d8d1a4544781f003479602b475c7c50e0f4c40b30e29280aac1125815d72a205ef0f1bbccef03c6525075f6be013c7e190065b1365218235ba71ac82f37d650f3fda87234cbe29868bab00"/129, 0x81, r4) keyctl$reject(0x13, r3, 0x0, 0x5, r4) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x500000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x855dfdd241fafe05}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x400) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000100)={0x27, 0x8000, 0x7, 0x5, 0x800, 0x40}) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x70710000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xffffffffffffffff, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x600000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)="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", 0xfc}, 0x68) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x6141, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xa0f762377f0000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000100)={0x5785c863, 0x4, 0x9}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r4, r3, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r4}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r4, 0x2, 0x20, 0x8}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e23, 0x0, @empty, 0x9}}, 0xfffffffffffffffa, 0x0, 0x7, 0x6, 0x1}, &(0x7f0000000240)=0x98) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) pkey_alloc(0x0, 0x1) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x700000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x3, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xe0700000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="030400002d00600000000000fff57b016d2763bd56373780398d537500e50600591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x280800, 0x0) connect$unix(r5, &(0x7f0000000200)=@abs={0x3, 0x0, 0x4e20}, 0x6e) r6 = openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r6, r4, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7ffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x70b851bd9b782dc1, 0x7, r2, &(0x7f0000000080)="a20ac7c77360e00d406df2bddf199f953fc63b0bdf67d55828f8db1a603abe21640e9ac4c67ae9c72d044f66a1b9d7e85e", 0x31, 0xffffffffffffff9a}, &(0x7f0000000180)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) read$alg(r3, &(0x7f0000000200)=""/6, 0x6) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf0500000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000003c0)={0x1, @output={0x3800, 0x2, {0x497, 0x5}, 0x0, 0x10001}}) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000500)={0xc, @pix={0x8, 0x4, 0x59555956, 0x8, 0x0, 0x2, 0xb, 0x2, 0x0, 0x4, 0x0, 0x3}}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000140)) fsetxattr$security_smack_transmute(r1, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01080000", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r6}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r7}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r7}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000280)={r6, 0x3, 0x5, 0x3f, 0x5, 0x6, 0x1, 0x81, {r7, @in6={{0xa, 0x4e22, 0x8a, @mcast2, 0x62}}, 0xffffffffc42bde32, 0x7, 0x800, 0x100000000, 0xfffffffffffffff7}}, &(0x7f0000000380)=0xb0) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x800000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf0ffffff7f0000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x5, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:48 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0x3, @default, r1}) mlockall(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xffff}, 0x10000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='net/stat\x00') read$FUSE(r4, &(0x7f00000002c0), 0x1000) r5 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0x9) syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x6, 0x40000) sendfile(r5, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:48 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xa00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000580)=0x1, 0x2) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000840)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r6, 0x3}}, 0x18) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r1, 0x4, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3f800000000000, r3, &(0x7f0000000000)="02891483fcff14497f1b143ffb9cbfd144531e5573115f0bdd902a8b5ec085baac3961d6d9af3c637916fc3edc6a1bbc3e4900464c281c6bbe607b296baec528fc589b205e490a715381cc712f9da949c31f05ffd7813ae2233b5bc8ca7ad40f1c024a75247e4f7cdd1b82e207486c6d7470f064b4ac00a6476b41c3a9eaa33ac146f24f16fb8e413ff758252dffeecf9c396283e4763df86711cc9b3ca7623fa5663f574265caf79738d57380c72c7384b948d7845e6aebb4837b1f", 0xbc, 0x6, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1, r4, &(0x7f0000000180)="a2c8a5c53b69ac7cd4a381e8a8687bc7f79cd37c6b2b76ff25980b419ff67dfab8ee6bad30c8da8b5a208664e73afd1b4803816c85299a2442c1132fd2cfddb32812ea4cacf26525103d278fde74fbc36eb4725a81a7e868cbfa696372cf29c1205a654a0716d0989b2292bc44e5b7a867e34198916f0de3b2e09d574e43ddf01a06ba4a266fe5a607171d82f4ab8de93b8fc6f257cff0abec3d4be0c4fb13ded4f6b2", 0xa3, 0x8}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffa, r4, &(0x7f0000000380)="e36240cefbf01e2bf37fa3b7ca1dcb608b586407a6bb99054dd8bfd5d15feb65a486e5adb3338bf93d929735dfa87bfdfc0fc3034fe2bd67e696168410bb5add209e502f4d692ce5004e6e6c593ca5e428dddc43e808f59307707879de9312077739fd3614dc456044ca7b7f1de6b50c96f4d663130fd6667daf3de023deee7d6f9058b380a8f7c056525e4a2ffdf7205e53db1e10298313551fb1fa90cf4a3c25eee60dd3135a9108b7eba669334c5860ea9d1b5fd0430c7aec7bb92c1aded85987a2a310eaa9dda22cc6327093948b5af3a4f10003f64cc3b403fa8d", 0xdd, 0x8, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000480)="f623caf77ee75bd160d780adb70e9680f57042fb9d8fbdefd8908a85684d4089554f99acb78d556a9d9e711ac912445817b07be2cc5bc0c5854afbd216cb8559f8e1f9a3010fc6284eb29e87bdf0c2f206fad432130e54283deaaa87d12b970c4f28b0fe7720e0b402f488c3ca8da4976158b6bacb300eaea4d5ccdadec2d5b38daf3c55967e58efb679e341eef4adbf21999eb7ae3f5939999ca4a587062f38ed05c4001b80e44c922f8f2ac233e33838c6031c8bba893f3fd0902d4ff6e8082aca5218d908c990981e98d40d011e1455", 0xd1, 0xfff, 0x0, 0x0, r2}]) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x6, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfeffffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) writev(r0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf91337d740760421}, 0x5400, 0x0, 0x2000000000000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x8}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x40000, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='~O\xfb1\xa3\x10\xe1cpuset.mem_ha\xea@\x9e\x04\x92\xb4\x8c\xf2\xd1\x9a\xc4\x04kK\x10]\x1d\a\x03y/\xf6)\xc0\xb6+\xad?\x80\x89B\xf8\t?\xe8\xb1)\xe3\x0f~\xeb\xadtj\xedW\xc5\xb2\x93\x9e5{\x93\xf5\xa3:\xc0\xbb\x81`\xec\x1e~\xc8\x1cG\x97\x97\xe6l\x11\xca\xba\x03\x99\xe4Z\xe2\xab\x17\x8bo\xae:_<\xec\xb6`\xda&z\x00\x1f\x0f\xdb5\xf9\xfd\x1a)\xc6\xfb\xd7\x86b\xd2B#C\xb9\xbc\xcd\xd0\x13k[\xac\x14U2\x99\x19G\x8b\xb2\xbe;\x9f\xa0@\xaa\x85`x\xd8\xbc\x01/\xf3\xfc\xd78\x88\xa0\x87\x97\xcd\"\xca6o\xeb\xdd\x06Nk:\x02_\x84:\xd0\xbb6\v\xb0C\x12\x18\xf2\xf2\xb9\x10Z\xec\xacI,o\xe4N\"\xb0\xb4e\xfb\xe1bpS\xe8|\xf33\xa0DP~\xcd\xba\x02\xf1\x18\x1a\x12R\xb3.M\x15\xa5N\xccc\x9d.\x81]\x83\xfb\xb0\x18\x9d:^t\xc5=\xb4\xf5\x80\xd3\xb1\xf3$\xef\xf6\xb1\xbe', 0x2, 0x0) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)=0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x18300, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f00000004c0)=0x80000001) getresuid(&(0x7f0000000600)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000440)={0x8, 0x2, r5, 0x0, r7, 0x0, 0x0, 0x7}) sendfile(r3, r2, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = socket$inet6(0x10, 0x4, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000180)=0x8) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x7, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x8, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8, 0x30b181) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x3c60, 0x4) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xd, r1, 0x400, &(0x7f0000000200)="18fa55e48351da526a03fe191f9b99b148c037afbcfaa10d72b2aa40f3b724fa8c1e0ad46e155b58398e5684a6434d6e86514f110b2303933013701b461c592b28cf8f5a22022d676f84204c9c53fbd170c2ded5c2cfa425c01ddd5d2967b5c6cabf4fbad20a34731b766087ec0d57ed928dd9d8d06bea5a9ea1d8166c2a78dae4f2de9a2965d3c78d45d8560bd2f4d7cbddf227de7ea02848200720cd46cc5aaeb04081681fe4ab1f94695e570a015741f8443f796a0bf337d00dccd3533dd84818b65fcbe86b0b8ac9341df80cb8cac2b5136f0f") r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_int(r0, &(0x7f00000006c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snapshot\x00', 0x7da5dcce73c4331, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x33000082}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x41050) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000300)="6f0745082c2b22930afb5b32c54fa9edbb35d639a6229afc518eeee296902b209671f4bfd0ccf6858daacfb3278c3e2fabae6aa0532adbe5b976934fa345290531dffd843cdb5e9e93f6d4328ad525ccdab294d872201eb861a9b38066fec60777a5721611cb7cb9267dba4227a50b2404faf4b7a1fb41041fe9e1ae653f253d8d47b7d980fc36d0fab74d644f3cdf2d90f2034f30605d4efcf14bf602c0d318b10220b7ca8c03d42322f03a304451c563d036304ded0e0b7be0d62f7489987d2f73a330d60d441216cf2a50916b5f88c320c11ed4a173221b229b87199847b53baddae0295977af3d") sendfile(r4, r3, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340), 0x8) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x401}, &(0x7f0000000400)=0x8) r8 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r8, 0x0) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r12 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r12, 0x0) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r11, &(0x7f00000004c0)={r12, 0xffffffffffffffff, 0x2}) write$cgroup_int(r8, &(0x7f0000000480)=0x1000, 0x12) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x9, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)={0x81, 0xacea6d0388fdca64}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x48102, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140), &(0x7f0000000180)=""/63, 0x3f}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0xc, 0x0, r0, 0x0}]) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r2, r3, 0xa}, 0x10) r4 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_h\x02\x00dwall\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1f00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xa, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x9c}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @local}}, 0x7, 0x7b8a, 0x7f, 0x0, 0x6}, &(0x7f0000000280)=0x98) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x1fffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:49 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xb, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:49 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2000000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xc, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x185, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1, 0x0, 0x2b1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r5) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x6, @rand_addr="3db46136a31f521d54160183ba08f6d8", 0x6}], 0x1c) setregid(0x0, r7) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x4}, [{0x2, 0x7, r4}], {}, [{0x8, 0x4, r5}, {0x8, 0x3, r6}, {0x8, 0xffd4d8a942120327}, {0x8, 0x6, 0xee00}, {0x8, 0x0, r7}, {0x8, 0xc6650aaa86a719b8, 0xee01}, {0x8, 0x5, r10}], {0x10, 0x3}, {0x20, 0x1}}, 0x64, 0x2) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x2c01000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x800000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xd, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3000000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xf00000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xe, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3f00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1f00000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x10, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001600)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000014c0)=0xfffffe15) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r5) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r7) getgroups(0x5, &(0x7f00000002c0)=[r5, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]) r9 = getgid() r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fstat(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r12) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x4200) setsockopt$inet_dccp_buf(r14, 0x21, 0xd, &(0x7f00000004c0)="f955757ccf25903b17794a89aeb3b46716d79313f7098709247eb385e5484fe704ffb30ed64050d37e693e80901e1c468b81ac9b88f89520dacc10232596407a661d76be8090c40f82005dba9b734f8ff469d49ea56610730c202b1872b764dedda6d71e8460f23a6955a42fd96a0fe491a29603b5baeabe353f683553bb5dbd108fe21f6f1dcc78b91aa082ad093388a4d0b41c2b9571b62a2116c395107d7a7617520fdda0c7e57a97df616b272746848f58d533658e37fddbc38880f3d0902087b2a7ce82c9b53a7e11191abdc68f5e279199718dcf48af928b298fee024a8ce4bd407c302a1fc5c659d5bf728b0c277c3d761487f49ca108a3c00185d9b77547fb79633a4cc051072e9ec9a12c5d6afa3ac8c8a19dadd869906df3e0fadfcf25a349ecefff1f429dfe511d0db6b20ece19cff17462cc0aaad7d79f0be568922a637557b5ed19b5034b8a6218a18ab830a2b5178efebab236783b586b07e9831c2b2c690a64c7cf3759a463ff93c6a25849349280ac0d20dd2fe2b6616fd16a58a979adb41a94125864e15e9db358f5672c7dec820734aea77e33e0c48c4c77dbb215a18807c87c51a8bf917c1efd4c9f33355856d62a63723e66e137f75818ad5c3eac2f96750fba0453de317bbdb1fc356e75385fcb1374f0695fc69f68560d04898539f0841aa5e043c76abbd8e89900066d27742150b053c48337f158b9b7d7d1a81a5460b6a3de9f3016823481a2fd3166547e28a8378d13fb6ef2c8137038005ea8f6a59ef32e85c1569ce9bf9b22f04f3bb4797ce8e5c33800336b0b6410bfeda5a8d72adf0ddd10b59c91bc7080e860232ce91a118cfcc2c4509ae02eac72daa7c91533fdbf27ee0dd31ec116302236f114884683bd3fedb2e698c556661f74e2542a775e5dbf01d2a8fa5316f3327242d4f561227c89789f181a766b25ac0db0928a350b621aa72f5380b64c79577bb2fb13e9a8691a77f55bfca323beb7964b913f8007a218d1f11b89fbafb012f896eeccb477f0570e3cee8b4d931ca58c42b018e5b4f79e73934f43390b29301ef6f01aa53068755445e431f03ba8dea6350deeb82f12bfecab7e76e8118d0b363751513c792b5e9200a7a2bb344accb43009b9a6ba51a7d0c1fe51f0a40aaa8d2ef1a637291dbd73c3a029ce7ddb9e207a5b7a40d5bea436c30c5ae848da2547e1414adfcd9f0f62e96d11d9b8eae423ace37df149af559dee22ba951af675147755a27fc46bb308e9eda24364601c123610562544d4da4ca365f567df265894d7af5ed44f36fdcae73b3a25b68b4ae8605b8af8acaddea11929d04a18203d3b0c6b45c1ae47bb86ae19d69de178e362df79ca4b434ccc1a0bbbfe54ed5750384258b11cafe9587941c386e1a5295ec7132b002519594ef4c294e3f27910092894775fbf64e7d762ffe0c61eeb21cbb826bf6c6b4ef0faf2734231d0237001357d5f7060f696f3f6e40496234550393bcdad610c41cc0a8f0dbe599ff1a2c00413fb1d2e9624b16e702a555ff52e8fe47db20b4c176de4272e9c89c3ce8349c6959bab2b939a41dc271cc612c019833f9b42f8edbe6cd025e51eeeb4d6e95038a1d58cb57f5cabc490b7352bce1a551e0a1df495ae492c09a5d3ac3d6655af57c6af8c3f0a080cda7f0f705a779f14fd3caed93de22c47b36778f7aaa59fec6d1549769b85a870a2f2b409fff78bfae504219e4280d536c85accdbedcd04aed47668c04e0882397f00a48154bb0ccc328c6cd0107a6feb2b223c169cd5d89ba19b098c23a1a3d1ee0cdc0a4f18261ebaba1fad6b227f8f07b680961398439c7db339a915d56868ef4d6fe6548edb064dc6bce077030e67e4126dff46d45749d0299962d9fc98db467e990becbb972f02b52ce1d125359744beb3636188254d86d498583cb58dc12a0c608cc46bad2a7ed38453db3d5387ed5a9d04d79fcb50bb91ed7f72191cffd0cd87da22fea39e80425b7b4606272c6cc2e1a7da3578a8830fb1541db26bbcf0aacea1291905762ab341ef62fdaf3ed0e7daf7b8349ce6f63f878ea7ddf18f31207952b0958ac29951923bbf4bda465ec4ac4a24f66d9f723aa7a162ae33dd20b5fd0f3f4de916e4e4cd8d0422e3cfdde4f60b617a13a0a3e2eb411f467739d2665c61cd281fc0fbfd250238d07f45eb17dd27236f55612a2500e05bb2dd053d208d1d788b7ba57cf77e85ec61a18273ab4bc3d3acde1349a677d990615b88a8a8984fa56f321e5dfc29bf7b324b8d9edb628c84fdc4bfc47a15ec45b9fd98972485d24f8253dd73454104a62caf7f346d3d30b0356de2a7de44e54a7231496bf1f1c04927d9061d68f3f9c03e23ac0d8e2627cbc5bea8b27c6089126ab7969c9718409c09c55d25361bfd6c8b9793eb8c339170ad62cb0bc55e6c83fc3f8b66ecadedb7d2b8dc813837744c13ad17744f0f2d289ae6c3646edd48bb1cf69ed616fad8183f4b8ba98f2e3d4facda3d83f3623a7594fd41dd93710d980c2fbe4eec545083008f10dd52bb29234b8d2ba04b5e07076d158dd54573c187e14022379f21dd1fae693a664cc4426131e9a65f0afb7aeb7d3a501ce5b7cc8d6f9b2183182da07fe07811a0b5768853ff4d86abe4bf35247d0ad4ba66884d601e04399a7be6b1a4ab1b7f79e327810ec449044e17bb986b921fd190adef56d90f959fcda35492bf8b3cbaa864bebce859d9155bd8f13795a170aa2fb7cbccf5591a6a2ba69a13e363f5c15ede5d32ae4702fc5450fa79c9c1564c31be8e57b2f94dc2a04b19f8fd1dd7e09e8f193aaad6832de603f1858d8322736e6eb8a98d69137ee4fc29322ccc386705c0ea244ee2496261b7bdd50e91e7cf9a5be44cf0bb68cbe751958b547a0b27f41f83d30b484bffa529e30d8520e6855064e1620614dabe4b199d0e9c912fafde6880330c62279fe7e4ea45d38c4ddc750ded26f1950f095c5c1a3bc8d5941e34ea73bbef703e78067a248f1b93811cf38bf795cecb391fed07468c5e443e05d1e069c11de064f05178a20920fa0c46a479c48333ebca8725dc353423e7389cc80f32dbb87b92094a1967273e9e9e8560203e4f1d43e282bef42796a6c7c0cea6597646ff41e6b9468d321f10a822b93c73caa2ecabdf9921da2349fb1d9fca9272c235846178812fde7cc92d6aff7fbee27463acdb20ee1fd7c43aac678940dc616878e8b115200d0b23f5f8eb74eae36549fc8e0678e5f979f85aded3ee0d05b55850d7884e53571be30539b74616ec538c06cf4ad4b1ec53179bdf3dfd68be87d92d76b42c4f0e5a47c6a88355941ebcb03b4f0201fdb6e2bc03841e17f76ba44b3dd2ccd292fcbe978fd0c61672b2a6f70bc81e2f8d655bcaa88faaa45e6fafb41be15cf6da6a4b0f4dfa73d1134b44a1f0a25e029b907255c2b88a35729268bc25b41d912991205620b25e3755817fdbc04a539d162178b9e708b7b03f3bd6a8924e6aca8d677d294b14b19c7a342fa6d665037a81342c3fd7ca2c279c9d64f4d86735b02eb0dc728edc1aee307881c99c441900462583703c546924a8e47d9e5cbd86f17cc7100e59dc1d11b9f7a72d5ed2031c40c7a81f0658edadd3c84098f8439002cd36f4f2c21c351f20cb940d0a4a244aef9f7114e0231097e5a5068e36dd5378bab5ddd8a41e01b16bd7763166968933104b378d7492e0ea5a5408e0ff1e986562b573b7ca946cedb2534ff13bf83b97bae3924aec0adbee0b9136790254131ed4b649684fc8762ff4c35011bb30bb1b42f40759acdf2a23b07ccb78ad52cafee97f7ab8284e0666aa80808faebac326ed86ab5c1ff5467c6c3ff43bca3188cca3904607d57a89d3a4ca326b775d878ab794ae0a878f52b76d5b9df0c4b7c9f3ccf9d73660d2d772cb1661e728c431bcd50ae511967614b6b73fab5c8118d7224b5f8dabaedaf3ef85c822ccbca09f09af70eea7b4219cecb8136eee2c9fb8bc62cefac72fae7aa7e94693e384a4232923a7593deedfbbffb1938eca916cc3a67acd1b3b414b229056c81a693b12fd4197917918850ca8418dcd3fef1a18acaa401c6f2d855f07cacdc09e056f06977e5fdcaece969e8379f368aba0c9c4478fefd5c79783a350f1db5f1d3c494d28c50a28cee4488dc6deed7c9c7e88705c0b299d3bcd012f35be416c2d07c7b054c7b4cc3c7d3d4766fed24fcbbd627a8d5522ac1e3b2ce60cb92f12360004e9601632fe5aee977f1ee843537f4d4cd45462f403a4fc04fb616602b2fc8e9322b965833e4e99efeb07490533d2879b45565b4ef66106c3f4ad6938361b6ba7d5b5ed44c31874b3668b322a5b71b51b276b2c702d9a3abb66bd1720e7b94553301a39f18e0dd1925cd616444d3b6b4ab95451da001ae81a08ceec78335c2b0eab6d09ccfe3d578fab70cb75d3677726c1037909a89fd3f4a31d623935fa9dc11d34ed72e83b7685720dda930d589749ff0965b553ce70eacbbea3458875b6eaee0e362e60e9a8ba943a3697e1ed541a9dc5e27ae8017303493e31b664ad021412a36d56612ab05fe2198f134a4d2c266016b67d28830712a9351851224007b69d114739b4f60a4607d4174a658c3854170735cd7b67aab70daf12ab93653a7e08ef9656fb5c50dc2e1e12e2ce2aaae15d21a3e5fef677e7f551b2ca85c281425f6c43e1f95280fb0a711aa82c72e59c30a2597d8acaedef3d392ffd5cc7e812a3b223c11f3722ca0d1d2b72bed77efc1d24e633c8c56da369cea12da63564307b752a5cc012b05e2ebf852b2390de43e6ceb8685aaaec32839af59398a02418c6cab3eaf85054f4918fd575a723273d79da96bb6cb06b25001af62126f1dc3b6c292d0c0e91bd50a6cb7037d3520723ae948904499b2bf4dd2491feb24a286617df5d73f400877fac8bccfef553c81ac1bce489c58eaf1067ade650b24fbc32bedf75932bf619a696222880fdc209cbfe2c001d004c7aad97f9af7768a2d6867cdd125d9b60af377dec9d8f4711edabda13193392c95e7f11ed607f0fd6f25b3525d56f217b33be4ef42401964324fbcfb48ff000357e6707c3a12cdf2c76cffd46d457d878616d0d257c837caa14bc6705a626651b3b1d2c741fdd6f4d6aa1b582a8258261b458abb3d4d5ff2dd0aa86d7c320bdc6d5a50c97f7bc468f37b3f9d3127c81cf5e52bdb6c551044dbb4b83f23be084320bbab2a8b0bc2fec775757b3cb25c93e42c8fb175e445c923b9690be042d26f7abc51f9243a393fe61b390b7618841a12bd764a89a64652971ea6a91e80513c7f42b9c0fc501f99314e54fae2ecdc53b14221d4140f4a94998bc3b2394c9629ce1e5643a68b1f6b3adf7da355b6107a9070ee8cd909065bcbc734b5f57fa5f0e63f976aea2013c4a26ff4e476a7a5d42294098a101aacc3cfc5371eca2fdf3298edcf3664646429ef9c20d17ed44e70a7b863b1f0e06b918818ed6321350bf82306f1c20d010e8b7281dacfd5ba283b5f76a3c3e56ed08192ec8c25967a61bf949aaaa5d7d5997816f2f16cab9bd723ec2e0162640242f2c2c685652509d476ebe9b8cedb42119ed605efda6b45b17a7fd19d8dd1b6f94ade8947b3ee793ea37e1ab979c440479c1c2b70cba1ac53fd755da85a5bd673371424781481fbb322ed3af725a3c3205894137b51d7ce05568bb86bb72846d2420d08ec0e56a9b7d3160143c146367e5868505e56830a25b1fed87b0d4713b03fdd65b8c6439a5fd339de53379cb43db8e23d452a9d24bfae68d10", 0x1000) setregid(0x0, r13) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r15) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010004000000000002000100ea9676a9909efd6be890afb06ebaad5cb9af1821d6620331c531ed6be13408579cbd66c3fb7464ee98c889224fb8989fcf5f149cbc7c3fe4a5bab9f2f1a5c9a3b7532051a5fb29af2baa2816a9dbccc1097030cc2da9c764a4cc197653c4298df7bb8abcff4f9e17246369f59f908c5e6bd0dbd88b157c62727c6204f66b253b1a94c4a08a90", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="040001000000000008000100", @ANYRES32=r8, @ANYBLOB="080035da", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800127a", @ANYRES32=r13, @ANYBLOB="08000c9d", @ANYRES32=r15, @ANYBLOB="10000f00000000002000010000000000"], 0x64, 0x3) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r16, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x3fffffffffffffff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x110, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9d2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x71259dfe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffbff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1cf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdc8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x820) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4000000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x300, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8500000000000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0xfffffffffffffffd, &(0x7f0000000140)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:50 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4401000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x8100, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:50 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x40000000000, 0x48040) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa6e02ec3c4ddd22b, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xeffdffffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x4feeff7f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xffffff1f, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfcfdffffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x2000000000000074, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x6000000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfefdffffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0xffffc90000000000, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:51 executing program 5: close(0xffffffffffffffff) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffdffffffffffff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7befff7f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_setup(0x3, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x7f00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xffffffffff600000, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xac05000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:51 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x20000000000, 0xe8840) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) write$nbd(r3, &(0x7f0000000140)={0x67446698, 0x0, 0x3, 0x3, 0x2, "1a78c88cacdbf80a5fd8ef23b9054cd999a5c8eda21676b99f871f07a932dff71a8da4fa79c0da38460181272a6d37579824db9bcd2b98347d327e18569a3013d5fe0def4020f8fc1b5edb8ee8884f0c14abaabd3ec95da611a67523345ec8c17e743aa6834bbb75a35c856218a0dbd9f428fed5240ff91ad2b243f7fe2e3d13ffd2afa4b30dd684aa4d3c5305ac99972198e26aadf6102fd5b4f7287333e9c3cb4ea500520d2d3cd93cf2"}, 0xbb) 03:37:51 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:51 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb001000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffffffffdfc, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xb101000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x40000, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001600)={0x40, 0x4, 0x1}, 0x10) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x10000, 0x0) pipe(&(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x35, &(0x7f0000000240)=0x9d, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d03, 0x10001]}) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000200)) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000180)) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffffffffdff, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xdc05000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbac9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000041}, 0x40) io_submit(r1, 0x2000024b, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffec5, 0x0, 0x0, 0x2}]) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r2, 0x1e093411, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r4 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000080)) 03:37:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe0ffffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r3 = dup2(r1, r2) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000080)=0x8) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xe803000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:52 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x8000, 0x4) 03:37:52 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xf401000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfc00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfdffffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfe80ffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1a, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r12) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r13) getgroups(0x1, &(0x7f0000000500)=[r13]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r15) r16 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0xffffffffffffff17}, 0x0) fstat(r16, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r20 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r20, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32=r19, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="020000004932c974faf0627ca11e56ff0ff1b971d501e0593b43723005ce11beccd5423139f32e176b43e34fbecbc71428953dd717aa813bd3a12dc2cf8e6e5f53e152ec752113d294015d9a30a5dadd7604da184d5e40fa8de55edab95528b39024ab7785a49acee4d310faac193eacbfb39c55c05db14376760ddb6c3821a41d232d7b1a5054958779", @ANYRES32=r11, @ANYBLOB="040001000000000008000400", @ANYRES16, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=r15, @ANYBLOB="08000500", @ANYRES32=r17, @ANYBLOB="08000200", @ANYRES32=r18, @ANYBLOB="1a2f4f523b46ebc2ef01efafd1f00000"], 0x13, 0x1) r21 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r21, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r30 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r30, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r30, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) write$evdev(r21, &(0x7f0000000240)=[{{r22, r23/1000+30000}, 0x15, 0xffff, 0x1ff}, {{}, 0x4, 0x8, 0xffffffffffffffff}, {{}, 0x17, 0x81, 0x8}, {{}, 0x3, 0xf565, 0x80000000}, {{0x0, 0x7530}, 0x12, 0xfa4, 0x401}, {{r24, r25/1000+10000}, 0x15, 0x100000001, 0x1}, {{r26, r27/1000+10000}, 0x0, 0x7ff, 0x8d}, {{0x0, 0x7530}, 0x1, 0x0, 0x4a3c}, {{}, 0x3, 0x80, 0x9}, {{r28, r29/1000+30000}, 0x11, 0xff, 0x2}], 0xf0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'gretap0\x00', 0x542d0827fd2ba3e6}) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) syncfs(r1) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xfec0ffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff00000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) write$P9_RRENAME(r2, &(0x7f0000000180)={0x7, 0x15, 0x2}, 0x7) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x19c) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffc52}]) renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00') 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x85, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff01000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfe, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:53 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff03000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:53 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x300, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff07000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff0f000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x500, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff1f000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fremovexattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="6f73322e5b25707070306b657972696e671d6d653573756d656d3121736563757269747900d14a17ee7de5d7eff41cb499bdfe769e5c8118be3ef04fc72461f67e6689dcb895e47c19766b74d88f68aef9ca6ecf829d62a45a1f2a4f01f888881599f7282400c77a4d5596d9405d059b7eb376846c3a6c5343776dd5008cb0981507000000000000000000"]) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = perf_event_open(&(0x7f00000002c0)={0xe, 0x70, 0x1, 0x8, 0xa529, 0x3ff, 0x0, 0x1, 0x800, 0x1d, 0x3, 0xffffffffffffffc0, 0x2, 0x1, 0x80, 0x53, 0x8001, 0x100, 0x9a, 0x7f, 0x10001, 0x8, 0x1, 0x10000, 0xfff, 0x5, 0xf3, 0x101000000000, 0x8, 0x5, 0x8, 0xa3a, 0x8, 0x8, 0x7f, 0x4, 0x9, 0x800, 0x0, 0x3ff, 0x4, @perf_config_ext={0x2, 0x80000000}, 0x20130, 0x8, 0x7d, 0x4, 0x1f, 0x8001, 0x1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r6 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r6, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r8, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r11 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r11, 0x0) r12 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r12, 0x0) r13 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r13, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000001840)={0x4bae21ffe772cfb9, r13}) r15 = socket$inet_dccp(0x2, 0x6, 0x0) r16 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r17 = fcntl$dupfd(r16, 0x0, r0) r18 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r18, 0x0) r19 = accept$nfc_llcp(r18, &(0x7f0000001b00), &(0x7f0000001b80)=0x60) io_submit(r4, 0x9, &(0x7f0000001c40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3521, r5, &(0x7f0000000380)="d1b41cc3e848a7463b2bedbb76748ab0a9b2840bd3386eecdd5fd8ad250bdecfdc04a4a56909a457a0407f363eb907f0a5667eafa926c8cfc2c3f3c58034b34ee998e6f709eeeed6f3af5f0e1ddaf798b0f06aa360ea8d4c8060d7d848d69703179db8e391a1f4de3f65ac2ef01f61f03efc92c117625b75ce2996d021f197e2e91909ec2f94fe43b5b2094e36f67ff2d176530b92d34f12120d5239fc0674dd455136f403d464c90d82aeff67bae5b42883118f1366a4d1f94f1cf3a422dcc4ae4d1931e50062d68ae9ba42f32588de2d02211b7a07bddaefb73620a842fe7097", 0xe1, 0x7ff}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f00000004c0)="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", 0x1000, 0x7, 0x0, 0x3, r6}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000001500)="b929a40dcb4e1b3773be11776ecf67c53a955fc994ce677af91a8e21c02b", 0x1e, 0x0, 0x0, 0xfc91f46875807e1a, r8}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x9, r9, &(0x7f0000001580)="2f093d9a4dd6c5441cf48609b9a72d36dc31b50aea7d9eaff37e0d372f9dd8972cec0a553a578b3ffa6cd8f1f5a2a6481bf7a8a690f56c0db699838a2afce4896a5c845044ba93a8f22538d8b17a0a69751a23a58f0e6755c9e1cc45462c1c1d4585", 0x62, 0x0, 0x0, 0x91d1914497dd782d, r3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x4, r10, &(0x7f0000001640)="92c0d8b28206169a857556057172972dd16b88c1e790ae92ff131051353cee77b5789f82a8ffc84dd94c7ffbc8adcc3a18cc034252af3b412eab27f6f554f59167a79b92a416adcd7bf8364a90dc7c262fa6c22364c41dd6f75ca1dff87fcd6d39e8a6bea7ff53958e17cbdb811a756dbdf29771b8232ac95fd96d1fdc56aa8438d4b39ecab85f62", 0x88, 0x5a5, 0x0, 0x1, r11}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0xd479, r3, &(0x7f0000001740)="3021b23a2e7221ada3d197a32b9844dfa1bea8741c905c876fcd0116a04c09d617b7c70b82c28d2e7f4dec9f9060d8d50a1c1b08a585b4f77e8ccc3c110276e0447767d142a884d978bb9135083d35079d356d10181236d4ec27b007bbcef67322888a22777c35fd2b13669ad70bb8c19cfbbcc6a2b7d6f18f6b645085567a61485e267bbfa66337", 0x88, 0x8, 0x0, 0x3, r12}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x3, 0x2, r14, &(0x7f0000001880)="b715d68bd7937879b1870741661cafa7ad72c2d2ff84252fa03632ec23c37b59db11a7087a7ce7563a0d3513a1d402a34750eb45d43aa4449b42b95d8420622f51f6fc46a98a8a332e525d2407157b93ebd481bcda1cf769b2b6f78407ea25bfbcf5ce1d46a5f5190a01baa2e198446e4b876e5a47895e5908b9ad0c1a5f4d3db0998a9bb2d03ffee704dca841704bb28e616f8f3e0192accca69308f345795c94130501f03af0d40f768a1a7bf711a5a6fb3c330b474329210630a9f2af9ad6b30a6f17c2e7d3f5e92edfacd8bb0f7a5447e66d6fad63fdd549ac666c48e168c2c8273d4e0cbefb8395a18a2c133f21b335b0", 0xf3, 0x1}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x5, 0x2, r15, &(0x7f00000019c0)="bc5f3fdb496bbd167687221889fc8ed10feca1602e441a9a5772cb90b0c603a1812281f6655125903ee84bcfb05b0d24ba74d475a188ad76914aa9336cc3877dda5530d6a5dcc825c007b3c6d1d776597ba55abfb34dbd20c010d1b55da5f34345e3016d4354de4fe3e34f3501c04557e2783e1229a18bede7230e6d7b33aeacff30a24e11abcb0b45c1051d08e25db49e593fbefc806bf95207412a84b923abbd276e99170ec5afd3b89a787c70ca9e370fb8cf854cd1387238bc6cc8c700fa14ffd6ed9001501871dccb1d5fe969fa08da6d3424fa38df03f56654fa0fea0bfd8525ce14e0fa05557627a40dbb195bd5", 0xf1, 0x0, 0x0, 0x0, r17}, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x6, 0x62d9f9b6, r19, &(0x7f0000001bc0)="1a0f2160bae26fe8b9f3445b", 0xc, 0x9, 0x0, 0x1, r3}]) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x700, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff3f000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf00, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x102b21ed, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xff7f000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1f00, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1ff, r0, 0x0}]) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffefff7f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:54 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r0}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r0}, &(0x7f0000001ac0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r0, @in={{0x2, 0x4e22, @rand_addr=0x6}}}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x5}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x60ff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff000000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7600, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000080)={0x0, 0x9}) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff010000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8500, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff030000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r4}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r4}, &(0x7f0000001ac0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x4, 0x203, 0x6, 0x7ff, 0x9}, &(0x7f0000000240)=0x98) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000380)=""/4096, &(0x7f0000000080)=0x1000) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x9600, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff070000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff0f0000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xeffd, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 5: close(0xffffffffffffffff) io_setup(0xff, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:55 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xff, 0x3, 0xd6, 0x100000001, 0x1]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xef0, 0x1, 0xd8, 0xffffffffffffff3f]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x200}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) io_setup(0x1000000000000003, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r4) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_submit(r5, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x12f}]) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r3, 0x0}]) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfcfd, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:55 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff1f0000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfdef, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x4f61) close(r0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi={0x0, 0x0, 0x47524247}}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000140)={0x6, "f8e13e43fc10038aed9f6c1758acad90aac2784dc63309660a3ce6a3f0e40377", 0x20, 0xff, 0x4, 0x1, 0x1}) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:55 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff3f0000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="40197200000000000000000120000000", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x80400) close(r2) io_setup(0x1000000000000003, &(0x7f0000000140)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x10001, 0x39b4e4) open(&(0x7f0000000080)='./file0\x00', 0x8c93e73870a06a10, 0x12a) r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x2080) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) io_setup(0x400, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfdfc, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffff7f0000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0000000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfdfe, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0100000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfdff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xb) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfe00, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0300000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}]) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = accept$ax25(r2, &(0x7f0000000380)={{}, [@netrom, @rose, @remote, @rose, @default, @remote, @remote, @netrom]}, &(0x7f0000000400)=0x48) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r9, 0x0) r10 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r11 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r11, 0x0) r12 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r13 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r13, 0x0) io_submit(r4, 0x8, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xb8365a5f1c7c34f4, 0x20, 0xffffffffffffffff, &(0x7f0000000140)="41204d327dfecaabd08fed33f5eea72aed4dd4f44a2abbdd94e0d6ac09566c05a08f83fcc7bccf54ec9c15e09d6ea8ec68af4fdc5d5400fdc16ddcc0cae5be4d22d4c9fd03f68f718742bf2e51664b32f5cbfa0b13bc34fd338b3c7b3ce3d6b1420429ee323ea6d15a836b0384d08d936ccb049c8b484e0cda8d7ab1c9bebe", 0x7f, 0x80000000, 0x0, 0x0, r5}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x20, r6, &(0x7f00000001c0)="3a896c6ba071e15d0e32775b56e5b42305d295ddb66382de363bd84ab3486e61648991824db11f99385a", 0x2a, 0x1, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x9, r1, &(0x7f0000000240)="033b9e4a63ba35587ccc2905a56af7b43dc2b3c2c46de9113b05ab9488c90ac098680cf04565e89c10f4f64addf19be5277348ae6b39141851f2f2b74c521422f47d83bc5f1b84148fb1a33d8f0c1b385632107b8a132b061d2381851dc4e0e0f111f581b6b5bb28741ae30acd17cc0728013b88aa674a93e5d9bf933770df2ecc22609d27d7b1aa4fe8bc4dc3c887bc40213261ccc086fa836cd29f53cf0406bb0bfeab19dc9dd7c50b5d066b38173b", 0xb0, 0x80, 0x0, 0x2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x6, 0x80000000, r7, &(0x7f0000000440)="d91c2a60c920c4a9fa2d57d3d7d02a38a5f626b411b5c8c4f614452cf5a898e48d1284d5c42574ba1e6c32415e7c27ca0ba8643f2d7831b15803c70a1e114783cb9f8e51cc86fb192a3cc40d509e6eda3619eeae4de46480e7a6e7f96a95eb0cf861e5cfbe2b0c59b11134162f1605ea3297eb9d34438a1160d64a97ab8378507675173ad8212135a5db89b655282d34b0e0c7f9cb6e29b272307414a2dbf1233289b39f3505c937049a833fea355f109c939390152bc95623ee413371b5ff5fbfde8f8c49121d26abd4b271f02b26afc57566907d0f71db40b4464f4522ea8a58c9f8b4c12c3771887642dd5b8913f9a44bb3b5cafb2b6598523f42aa7a9304319153e42f7d07db597d0348f1cf83652545bd9c41262ff72056833d87fbd6fcce82ac8a37efeb039d40c88d9b570d2276106036f55e5ecf358f8922fb6b24e5f03878fe257b2c6ab25037f4afb3f7a562e958412a90f83379cfaaf6e1f17d57ab1b0f274eed112f819d552c00993111bdfb9d841922e642b22ddd5e1cd481fd9f705a9f5ff8b073229bdbf52c344c82110edd232b1d860ad2b5cf80013219c91ad8530fa737a73ecbc32267cbee2d05452706365b94204d4b944b267c79417b49f2c6a30ba03ef55d4011c3b98e7adf3fb0ef850e00c8d94e1fee957cbe43f2b7ed76a2182777bb6f258e05e37c93c9b824eb5952e904e81bd85eff2b1f529ab6e56de61696bbb25f1bbe11e1fe49980aec9c5190485aa5b31f88614f5c089ba176ba776e2a5b54ed17b115e17a142ba37401c646df908f94193a8de557d3dfccddbc7046d1fb4f840364a3d526d4317b309e38f2083ce29cee30dc3e8b6cd1c28d492161ef3af260d1a381c70c2a224ed2d020dc16b20744c6ca4ad5997dbf2442d162aa8edc05afe46f3cda449e8da503b0871791aa0977e9a6fa0674b818219f5fa9aa2637b04696c31f1f6f0d50e30886a1f30cb78fe4b2bd8cfcb7fb26672bf6c46268eed15e7fab7a3d826474123590fbe795b29ecba7d8bd4631dff05556ebc7a630356db4d8d543beaaf3f4d37ee7421042dae9ece33930e1d59fc6526cc3215e1b2108829e1749348a30ee2e49758311dfecdfa1a04f2fc6e15e09769a79e664ae6e05796591798c750ccd1107063787df059c093367f638cb056df59c29c3f37d501905d7f69616f850782b8092866b723694a1c3460f1d692a05c2ce15cdb5fae49560a03721abc1f091177f298b4890e65b48e40e2a7d9d08f8a5fa5c0710c81a50470c5366a2e3bbf3d08478c6c0085d129438076aa7fe298ec51e02d60243fb5c59aede55adfe191a027ae08a3aa259b17ff18da5109cc7b86bf230d48f043c392d3adebd262ec9b92105af10e748aba0ff3cdec74fbe7f04e46dd4f0f49709d43aa79d05f293b4f0ff327a16e52c3a07238359d776d8730dcc278e8f7ab880a5ad0f4a051e0fdae5ed59a31fb57f686c9ccec494c2760579e1f5ed80234fd5491fb36308be40c19eb9662087e62c87bd2568fb0d38cf68c3ba87a91f5ffe9b75c297394b73cb95be91e1f57badf7666cf164d721b66993065d9867a81c272595af60d4270e670135f25f20a516109f97b5e801877eb35d9107d1f698b5a3e4d473fafaf0a592c8ac6da7c1a2e7a057af69829939bd76c288d08df5bf97bc57e116f9dbdc907c2fa5bf6456f4df3e26984b898a1ce019cfdca74b9b427a7595b982237254b13bbf158b3c130ceb410b81fff784b457a3eeeefcf367599ec44d5a846e78b80bee4c250895f4ec819ea080bee0a1a479aaacd6905fdc243c1ddd819ee7a378468328561653c8829b314765576a9c47bd1a354210e31e0588a351c7ec4749011627ea18ae71f0d416d5eea0f1f871aa3a9d3116f5a52ec6b81c9a3b95fbabb9b72bc33c42a2cab96239e88858fcc71b201391e82a55025497ce00e80a08ad0cace657c250d21b78880906c736ff909a086d7077d06b458453841519fd46628efd8a816e990e087d78bb40ed08dbf132bbaaffbe48976bb52038ba5d865f19b0310eeeee0862136132ce50f9a45c09f845bb82f274d5310befc3d4863883aa36ded1abe75bd1d6e3d260d0dd9e914deff2ba336410e74324d50692538e535d27971296bf7275b92862fcd6e1928bd920b7357c12430a6bf7307cfbfa2f9c364fa293c4ae5071e917c795ce5d722b8cb4140e3c944947275787d86a749f3628c27587d35747c0f3054e33435004ca0e98c0962bcf858261e46c1faa28478efd633eee8d31496fbb13f3f224bebfeed222922b399063d0314472e2de9597a301e62afbf87f41ce74b8d3003b9cb7cf9d7082b15f38b73e533fc85d52267b9a084edbca0b29def0f32cb1db413b81f9539a5d664e3cf6422e687c14300285422664fe5169909f3d1318ac86a4abc15d81cf19c5154c876f0b30885864005a7884175f46f07452947b471c8e5b896f3a0a29e93b63b3b8526a8b87b73543d89981f281bb66a10cd28a2bc52db5fbd6278d1b9d5a9b664c683451e4b9ddeddb6d67699ce7da3c7699ff4a3656154684bab91669726f6cfaecb3638d5c4f5080e47f3defd424c7d05d53139993596a6c24ea7f656375d04aaf1992c99b8dc7bf7c831a860cbb3364796fe3820da06808e932770deac51e902694f830d073c2a5626719a5ba814fe32c52cd76b948350033eabf015f3d09625fd4fd5b25c827e400d0b3986dca0eaaa7126915b6fe441eec4442ec0ce000ce0cb6ac494b16d6362db20bc521a290dec0fc90a1649c88fe4c5d4678903a94e5a192aae6ac6fafb46f692db67187651ea2e894398f1f9a00ea138c84cfbec1e09818cfcc31a858d0d1c807b36ba9fcc2c1d0e247c7a53d1ec9cb3d9d8079ae387787aa647f8a3c5bf0d8be298b48a4c95fc9672035b38249e466ac251fda4e12a8a5ee0d0add4dc92ef098e81459cb3dd1d086c45e3aeee1cdd472f7233835af148129192ce6e7beca4b8292fc22e84503d77b8e9f7d1f53989d3b4f031fff3ed0719f607d07d0053e38d40ad299168f7a3e5b8dfe2de6ed32177c28e24fcb970b83d9a5e12ee76b29f55f46d5b685c9566422309f75ccf2f398914ac33c4f900c8c7e89c0de45d21c4f82317a3d29708a1fa99e6d0ad6c5094f4536feb205600f056e7280fa332b00338742700f7c625a5966ab2149267e51dfecdf15aa3ea372e2b0f28cb69a340839ee5690f99cb1d4c4caaa0e6d2951236b266d02a7a03ff0294df777c92a7f452dca8f061118eb4b8f3330092b4c9addbff2833ed7cf14d58f51bf84360dfacdfbc6f316942ce28df0c17d69944c87d358dad34bc8121ea75d573df9a2128762c0562d5ec545073a3f4656cf27bd0f4be5e8dc2e626e507a55bc356b8d588dba023a222a4096993d1aa7f675c48b8abf55a2477a3e940242decbb8dd4faecb6d7006504caa1f28ea1f1d6cff4b9b0b56a95bc3bba50035e3e92ebebd673448760d1f9d06f7a1c9fff00e8c2a28e72e04935d6df698ce500482507a1230b0392c22f5ffb74e9631b3dc7b28bab5fa6715bf34e7807a72dc3657b58b73492d264e057759a92355e5b6dcf867f0d0d587794a25fb3791c8a967810d15c1e5a457042e31470f9285603c80cbb193ffc877dd8ca65ac99af7ba7df676e09fb8dfbb040a75640aa3f672fc69c9e1df1e36f70e5a8095b2d775c4fb5cbdf325c2641e4fdb0b457d488ad4ee8aa41fe337c1db53a05ed7a60cfdbc8ee5a4c5e00c83ade80a0e7425d22cce19e175f1e9eed63cf4672759fd78523e3f2b28b2d3c38eba7b573eb7a1467b65d2c9a32af2cc307b9fdf682a88815a33aa14394953e70a6557d83c57e6a3ea040d5f77ce3cddbacde6b15d22bd0536713a9f508c94fb2e2567d99e30070c27488e60104fa8f81de250a84bd84e83e5a1b58c825d57a221235d7505099e0543c840598754003f3c20bfdf4f3b96f9b461723566b84536a2f1d7fc7b9f39610152c811207b2097aaada6496530fa15f29466aaf34bacc72bc8ab64ce176a45fd5113e4a19729c636319af0ea8b0e49476855ad5b56987a533e30fcb1118f4f884a89c506cb614f13888a75490dec1e887afe3c811be90eb706091d2f65e9bff8494cc116adf02da6606ddb8e4c4bf5e6015e6ba1f928f6e8a438ba5a3ded295bdf2f01a89246204b6112552b8a7fb36423c22a079ccc0553933cf60dc6efcd899573f06a087111f7554b3fb56aba54f36459c994e35b946b75cf20d48762539f738ce295c6511f86ed7b0920186e9b0f6a275a18ed9e56c48b5257f897826eacd0c1d3f981a8f3ae78ccb838c1ae9e3b26b16f1845bc3588b22edf7d563337c2b45180c191e12c65a785356a723807b105d5198c32abd0d0d7d09c491c7e9047a570e2d3ae01a62e4187df4c4e91dc2134a9c96f15e157ed8536124a94af642ffd454e144c266d01cc8956f7e9a257f8f0cb96dbc7b005a618b7bbbd58a0727ec4fbc9ed141bb1869492af78f800e0797640c2a2b565d0e8ab6be33f99f04268e36b274c80185eeef6ffb9500d1562ee563becf5ce54ab3f9b3d1e9ba9d2098753ad664aead48de1a6349bceb4d2ec8a177a18b64b15f4bee06059b4da3de7230c45cfbb7dd132d15fdcf679d200b492de9eb4946989dfda0145b9c1c15fea00e233ca840bbacfd2636bba818119dda256e4fa1d4c69b358055008101e6499a34885293d542376026e648b013b5b69a8fd54a20d558c1052cc802365717e5f504065e569342bc9b220801b7498a06432fc32f33f2b5123ca8bb68de9ea54d4a4628e311d70541d77ad65864de08d64c5a132ab075a82c95fd9c805f5314aa3aac102eb12fb5f5bb34c621cebb86e9306e56fef159adb477931f961c6e23efd318d5ae25acc7c9c01829c566e4ee238abbe91c77de5fb6b9d1ff3b1cadf5c9dac771c42b7561d6833c911862c88c75a84858f2e8133f98b93ebc46300b773ca36d6d990c5a778bb552cbbeea600d023e88177e7c9e374bad60a1a373466fb5b94c1df4746da89d441ed5670444075c30dc30c3a6750110d630f5a7880704fa27215474f038e5d6009a3450673ca7357fdfd111a0c98e98eecd18e3913648efbdc34dfe9685e7512feced6a13cd30d8dca779b7ed3088bef54057878b3f7064c34f3d02b74e81eff9b9744ef4e98898ffb56d1a676daa5ddd0a68ce3dc811750191722f43ce886e771e50e32772e38fca980db8f1ebdcc2f3283e9ac396a48b53877c7429e17400a88011145af58be5f31db56c9f73c2369223895e6ea1eb21136f00ca513a452fd382675eb9b6c37548e780ef80a685bc380eb84cfdfccfa461e7f4f7d439de57f20269a3d5c0097ed4076997b462b776067c00ffb879742380754a9c468e14263b1d6c36b4449c9eab2cfadd5159b86c86f7e0cf11a164afc17bb2957253bddf2b497aa282c535ddab9ec2dfe9b18831c4069fdf9e0b0b1976443cccd98decabbeec8c8070b131920d97be97352f13d4f13438897629cbd0e70fe41208a8dd85d53bfbff9faccd4a8a319eded78de9b7605eca0540eb2312cd7817f0efb9951a84b35318d1e38eac04d6dba2f49c9f9d9b4f20973a4f68e883d0f6544c34a867e50b29f5d44d9ce7bb26b6a066def3a0b963f8ffa30042c63c2bf0c74394b599b1687bee3c7778278b3699c13ff966eb2d6002c6b1ce60fe215906320f369c30f10e30770874d5f002b8e6e65171fe45eb11a8761209afdc97b9b59f447c2c779e303167d4a6ad0edf6", 0x1000, 0xfff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0xe, 0x20, r8, &(0x7f0000001480)="c7cc5c98a6d3f99c129ce26fb0542eb68926f9593e27d3ee2fbe9563a614dd8e30ff623b0242c3a9257dd48b62223a76494bacd9c9e6d8bbba4d15b114426a322bba3ae68c10fe58746e633c8dd3ff532baa2e3d76fecdced835fa8298f2f1a633020f71ea1af1c4137d2f5aecc065bc0eb6fce75ee95f7ee80976b0942b56cd88b8b3fd56c8116ab1b692645f6cc42d5642d6362baeecebefdc96bb9acbf5f3", 0xa0, 0x7, 0x0, 0x1, r9}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0x1ff, r10, &(0x7f0000002040)="2d333f2953d2ddd0dde0dbd36098d9f5c8d9c5f5e8bb93730c9aef356fcd77959e7e271ba5f4ea0fbadcfa3450d2d01303145925008913a9d967aa96ef866322f3c7d91feabc81ac5285eca16b7f2073377a357968abf3747b830a0543a152c634c27f4e0241ce07092041a8fbb43fb3f65374098fa33ad98069f142320490c66779b5f2d160f42e2c4a2207f93945d8527e8221ef364baa8f8d310eeca3080092cf222bfa6c7541bd66dddc5a28f04333c9a07fead9dada98bb8411d152676b9a0c47cc85fec8dcc5192531524f295e95e0b1aaf13f7ab1d31a592babb9375757c0955e623a64a34784d3575f1e1c193e6cc2ca6cf391897995fa54640050b513902dae9f39ba6d4f0f0fa4a2aae8bdc8c1ed39fd1e44e993aa76a6d1c6ce7d3eef456022161a3376ebea3d00d452530eb58b6bfc32c040051f5d75df0e4fcbce292640cf9be922fd2d92300fa0dc3b8c5a495246238b7e9c666eac34e7994b80bf75e06a56391059088ad1e213f69a2ca01bde0f3c581a3de2e1744d7b6c23fcbcb1dbf6695819b839050fa055b2dc9dbab47bda9790b2fb03a78a9ab23ca1c18e18a16872de5ed526c690517b03efd8913a55b47cdf1d204e02a5081362b48abc23ebe1adc2891086bb4f2f37fe4c05773a2e5acf4ff11ca948252ef29d2e804bf2cf8814cf66c13f2b3b699ac10a074f556075d4e2d17211967c31c3c7c0e46e41cd104b745ae937af2cc39adad1d7d5f9c1531c1af63f4158ccff3e7454d52a945977ac8f4bd0c414e1e5806b3f97d60111606454d79cc352f765b0660047db8f655bbade3076d9e2c01463137af0c0f5c04bc42f808d0b6914cadb13096fcb839c2524f4685e773ace440edc612446b55d9cfdca45aa483df99f5aa8941954bcc1d3fa4c13f7381632461e8e6f3756e1b1640a13318062d0f5960378a6a476d99e375c44e238e7a4130aba25741bf608804c5be65ae2df2b0932a44237b158e03d968284e83e62f7fe5947c75808ffc6b38f1c8743f202c9ee53c0fd65c5bb690b8e4ffd7c3c3fb1415f74caf0ac026ce205d4bf5ef3f34e17df719b53d92a7b50ccea159f3750edf1a42207fa8a85ee2ba6ea250c166e48817e2b0575de1fa27ec01bf8e00f6473aa1c289c093486d48598f15e63662aefc09b1dd7c3002d35634bc4089b5c701bb11682caa56c09a5fb59ec4358c5712d47c16518270a1e6f95f906317e909cb00bbeb299dccb5d0581bb690d8812d51e0c94138b1b516aa7d774b631403095863ecef1adb64aa4bfb8f3933b513254adf64095e95d995e96b14c4e2c105f1392df95723f0400eec91fc2c3dae049a693d9faa306a63491d772d7856c3f626cb10e1c283f6ed8cd36ef7aef9dc2cb20d74479c66ac314b9dabd1ce7353f7cf7116943069d9a1f7a3644a31f02f980e4c94bf49b168b7ec4a3d554e4339585b983a093e36173e5137f2fccac0835ee3af5f60507d792b6ae70d0d969743693d2bd77b97c770aec184dfd4e100d158a5889a29cb9561c5527565d9a685820a39166585b5c27df13558dab372e967aacf3ec4d75dd42af13add7b647ce472d8f759df1e19b36f0fd04dfc3b114fd70c0e869af4932066f065fb67d2e4ab5dd4c27b7048c005322f2527c073cc88ece04828decef35f1f592d90a1a73d2c4b12a1514c2595310d91e8f1ee2757ccfb91cc8275dbba97caecf848bef44b62b39588374d8e7d7052bece9ee746fa1cb16889f665068c5bd58c3948f0aeac60294fae2521e620835a119f66b3fc72f19b6a24ceca76dbbad4111f9196da0e7023ae024f7d306190f32828745f0313b3e1575b1c2b544d51b12ccc55115b251944798e5394f3dcc5fdf917d6100ec60ac67385cc01138b6e23dc65524dc4c4b8c4a543b9ae91667a9031ec2095c3259c74b13f1a945caf6b000098ea55a954ccdcecb9ae4916f7cd7cc3401d97ea16ddb5e9bd8f71b1de711150f9f83a0dfaaf50cd5339385d8e63c3bf5dbe54f6e8cae1b073be8522163c4534f28b5c8cb4464ea3e1f34a36ebada5eff38d56307b72a8a22585cd527717a1bf88e2418e8a7fa6056ccd4e60f5586470bd5054659513f3e0f778f09eb72f3569593c1632aa1e1fbab0fde3442167c07fd824d829e251835e9a8d893b44c66cf00afa7b88ef44078ca352c821aacbfad30db18db307bc84be174fef2770cbf44c35af91c759d7ba08126bfdfde8344f4e003b5cb054f1360676f2ab215a89074996c3a7de822a0295f4ac60318d55101b7fc9ac7fb4e450c2e1d878e852cf328c7c2975e4065ef4c0597913c292b69951488be72069d82bb09c090e998460e8e7ba5d2b3e715a36e305950b09894f1fd2d5d9cd1b0edbf7f655fd5303e2e0291624c397fb7c6ad51ad6d9443af4943d7a9ddd3edf661bf11dd2b6ca980b169ed0cd6ee1c314ee4ba00c0493e715e62781fd751d62de618bb48c07c1d1816c48ca6c25234910f2f8b66c77b1b0a3e95e5a8129afd2cb96fe67e39fbcd69340b0fe1079dc05562d7424afd6a31e7c426855e1f911d345dae5c40f292e82c965a8f32bbca5d925cb521ce554ce6c97c37ac2db2ce69bd41b30340e87728a59cdc07886f0d9f9207e40d42ba8d8cba4a49a96b04ab02ad01d942764cf233bfc51763fad06a3aaffe89253125f18da8945e76af0db2c8997f7a64fdc74dd612453e365b669e70c39be51ba1420fceb5f826a00bdca5bf13947ddccbf06b88677ad2b8535139e81d3c3714baff48ec97e83121536ca86bd97e12c04357b35f395f4a4c664e376839c3308aacc1bddc26577d9defe655908a0cad8092f7dc662582737217a278318122f2edefdc4654045452ba688b11c1c03f2b37c74e199d7fce91e40e5eda664290a3ae05b2dc698844930a48b76ba47780ecfa9aa7d392a362df1e1382377ac42fbd052914d8a23db2dd6664380123aed29bc4985e5f3758bcd2cd3fef15f90a9f3c5f121f1cba3e22a3d98ad6f2abc5aa3ccdb51a4d41d9211a4a5913bc39f6ed7aa478a2cf0ce07e73473e13ac9bb577496a992f17689968d921d0a82928661420fc8bbda72c5a56391e391031a3c0d6fb4c8acbf42476466dbf0c465a8de1b3bedc2692f4835eb87c89b4ed19353762496531418dcd188b10f9e4eacae9d0c9cb1758d494dd8aa3f55fd524c13e06bc7f394b3dab562335e5f943c2993da62d7bddd9e2a774fb1780a0cfb374281e40a1584cc40c858306e5b406a10bc9886e91d8a55c91c9e7c2a53ac1e14bd0c802a280da725c5c1af1319fe137d49df35c3aedbae4e545f005dafef665596461dcea06c5a632f1b9013f8428b76c9232de5d018b14796975eda27bdfdaed41b27a85bb980eed86ee4a3185e12796470e9dec87cb204c3506ffa67869eb30f097a54aba960a8afba23a0ea50308703ff86b9918c0e615e1e4d11406d39f11e7691a1861e403e64dc8365ec18d46b0c4aba4e43e061858af6fc0efd8c3b848088fbbf6342818c6b348761b775a1e28c833c0887a8b22cf35627701bf0696b364684b2dc9dfa5aba622c8d950c5749584daebd7207b5a0b614f49d5f1d5e981add1230947ce446b0eefcdcfd4f2099b916455545c5795b0a46db4283921ae0ce5489a2ed43058bbcb28310e0b89f94a8594f88d4f42974e83b4988f218636c75ea9a0dccde4964b0bc86377f1a16e96da8654cad9e30cfa36450bbba8103a792dd25d15254fa5b1f83707d2b0daba412fd255288b6e757875ca8155793c4ccb0ec7fb97872e9fb2ef97e51ebafba066f51f54aa73cf6eadc8ae80a173de042c1f11932f31761f1d6e9eb79e54f6e9981c87a6792b8001bd256f6b10e8987ff2766ee8719a58545931d0890a49ec7ff23ff6095f6ed7f724a632bcbe598a07bade407d2b22aaa38a689e3b98d26830bf19788848b98787d105fd5be71361f718565bd53862eb6f7f82a7bc08e23730776261900030dac3c8c9c76b5784c20c3ed3f4aebb869ee563c9307dae0c24eb97ddae13b286a9c435456f1e91e4304a3851421331d88cedee71b89a91d2e31f736d8c257eb6b08c0b4722490447a41596b51b28ac179eef917e3d2bc0c1491b03019b6436ba81e16e98badd429391258b093275d603fdcbd19266fc2136b110e9bf6a02e8516b13e4a2f471e4141f5405c7d20a5b7019025f66c9ee05ca2a4a975ffd6f94bb45f088935c40337e2ee32b4b960d6212396d88ab6fa1f1f1102ec700135b6f3dbaa4895f31760274341c708ae440c4f57962f3c7e14062c162fb47b249d996eb08c0846f39b2426c727918293391ea2cbc6dd4993c5b1d745a11bcc4fa3f143f7a431fef439695cc9b7f38061e57c52948a076113fe3e2b1a3ead472947c2847a96d1bc640323db5a3d74fff28dcdd912c556a570e496f5758c5cf123d1934ac33984e3dbb8e8b67bb64cc4590956d4cfb1b9bfa14f21df65040a7fb0b708403ac4f94fe336564e17056014c9cca3966133cad97cac9e9cb8ddcaa1f01bfc4199a4c4e852bf61ea76d786e935f47cfcde8b71fad066b638683b62f8c1b9ce43e7c1439a57284961504a4776abd1394e461f7e8c09a2ef00d387013fda0be98d087b2e2522dc51b2d3ddb3c8efbabe29ddc6d9321454f30fd149b1290de8fb39464262aa24882b340c68e1a5845780b0d0a262e2226d80638560b959fcfadbd6a2e799244054c44b5f44c882aac6cda6c94d475ef794de0814c8ebf2e107dc69d216c46a9cdfd3d6db95dc815f0bf9fd2ea33d5b901d905a5e562f1c88871956418fd5a68b3f55cd04e711c2ae8757c201cb31af5f9c371c39732c72dd591c64710c3e462666b76df038f149ca9c6f622e81019c57ce17189cd0733af604e50e22a49811cb65cae1916c52dec333398500689be071fbdc902c7e1e5fab8defd7f59f3fe41f70ab2079b196b4ab4c7b3832e0e9276d13346e03108a513cef3ce15c6d090a39ddcc28232c379457377c2969c5944494f4ffccc3d269ba791e4fc4eb1c11088922a6450511a62e49a3affcd97c48df4904d4dde8b5eee18c8da3451fd92b98a635957351b81562cac32c0f7d7b62502e5f63d54e3bc4d9b861caa94111e34a6667bc1159ebc18a36ed4733fff143428e930bf9f69001011ee86aaa8926fa20f6b4446771efd8b255a729e51d2ed9796c4d06ab6e10a35176afcb5f7643ba25d8c8e900c43cf39e5859bba0ee886d42445491d1acad701a819d20e9f8f03d659f7b99614601c075c8b3de07d3795a1906525b307dfe5d76a0667e0cbe955c67995ab24846794267690262bf99bf4ed123414010248431577ba38ca60d2c30cc5dc3614b636325442dd075ae15174675b6d86a84f5fdde37b0437905de2eade703f6df76944acb9faee61b1e506d06f16f3f5b0e70780a67e817f787ce1d06a00782762518202c8ab2c5cbf9549e65254b9546790a52e7ff7ea450248a9ba0952c800237a30204b494769b98602a53f7af69778d6b0b14cf7322269d8662ab77cab9d70852e8459558afa93b4cec192c9e8727d9c82b49c5bd317ddcccb65329ce308855f036a35e283446949cbd92a1bab6d10dc9b02fd49634c38db7b2f2fa22282b7d77792ecf167b8a5f8d365bdd833fc5e7c7752e490cd20a2f97a92fe5486c2f50278fb10c0e08388fc7e044bbf3d066ebcb72ec2fc08566d3bbc8057537eabf404915cdfbf3db15bb370eb8888a74ebfe1be6ae2b4912eea852bd3901db71ba0be158cca17ae9d8897e6a0f1fe2d086fbe", 0x1000, 0x2, 0x0, 0x2, r11}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0xf, 0x1f, r12, &(0x7f00000015c0)="fe2883dd", 0x4, 0x7, 0x0, 0x2, r13}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff9, r9, &(0x7f0000001640)="d0699f8bcd60e2ebb234", 0xa, 0x0, 0x0, 0x0, r11}]) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000001700)=0x100000001, 0x4) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfefd, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:56 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:56 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0700000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f458e1ede7176e3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9c, 0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0xb7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4d6d6a280930a600000ffa8430291", 0x1b}], 0x1}, 0x40004895) r4 = fcntl$dupfd(r3, 0xb76a90e1c777abb, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={r5, 0x2400000000}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r7 = accept4(r6, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000280)=0x80, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @netrom}, [@netrom, @netrom, @netrom, @bcast, @netrom, @netrom, @rose, @bcast]}, &(0x7f0000000340)=0x48) 03:37:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffd, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 2: removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'osx.', '^\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff0f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x3, "cb7d9290cf2de637"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x82103) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x7) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x6) io_setup(0x1000000000000003, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f00000001c0)={0x4, 0x3, 0xc5, 0x13}, 0x10) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:37:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xdb26b0b2ce583354, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x10000) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) sendto$unix(r3, &(0x7f0000000200)="aaf5b82ad6a2fe3ff5020633bfeb50151d2d52332af7a92e1d5db07c5c9e6f506bc3b593cbc4fd9edaf1e13ebed35d4d7e2b8ba4e33288efcba14908b9bb6642b77484fe64c987dc41ecdb5335bb9333ad9cbc4fc6541c74a5f56e19524b694e63b1fb8257e4f30a1caee192dc1399cba9957a5636e5d3dae572f6b281ab55aead4068c86a2729e48e9a22c5e80adcfe7101e5c56385de6b282fdfec6a0b3053d432c3051110090f74ba6b371da74fad0db14bad3962ae8c8f204b9cd9407db6d4f9f7a46dddc8e0c806764d", 0xcc, 0x40060080, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r4, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000100)) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff1f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xecd2dbb48c185586, &(0x7f0000000400)={@broadcast, @initdev, 0x0}, &(0x7f0000000440)=0xc) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newroute={0x34, 0x18, 0x400, 0x70bd2b, 0x25dfdbfd, {0x2, 0x20, 0x14, 0x7, 0xad24aff5d6704378, 0xb4839d48aba05894, 0xc8, 0x6, 0x1000}, [@RTA_SRC={0x8, 0x2, @remote}, @RTA_OIF={0x8, 0x4, r2}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x90) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80080, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuseD\xad\xa3]\xfb3a\xd9,\xe4\x0f\xed\x87\x15t/6#0\x9ez\xee\x06\x8f+\xc6\x7f0s\xf9\xe9\xb5\xe5~\xed\xcd\xe3\xbc\xe2Q\xd5\t\x04\xef\xbf\"\xc5\xa6G,\x82\xbf\x894\nh\xc8,;\xcc9<\xcb\xc6\xeb!X\x11\xa3\xab\xda\x82m\xafh\xc0\x1d\xdb\x822\x8a\xad\x937\x1f\xfd\xac;\x7fr\x8eE\xea\x03$\xce\xa2\xe0\x16r\xad\xaa\xd6\xd6\xf3P\xab\xb8f\xbb\xea/4\xd6\x81Tu\x00\xa1n\x17\xb0\xf5!\xf8\xda\x13\x87\x16\xa2\xceb^\xfd\xb1)\xf8\xf3\x846v\x05R\x0e\xb9I:g(\xf9rq\xdb\xe2\'\x8f\xec\x8c\xdfaas\'\xb6g\xa1\xc1)\"T<\xff\xebM\xf6\\\x1fh\xda3\xb8\xd6\xcc\x81si\xeez\x00\x00\x01\xcd[\xd6k\xf3z\xfcB\xb7\xdf\xa8\x87A\xc2\xcf\x87\xc67\x93\xcco\xf6I\x7fV\t*\xbb\xdd\x86\x9c\xf4cF\x9d\n\x9fn\x90\"\xbf\'6\xc4\xdf\x91\xd1\x1cr\x1cv\xa8\xd7$\x15\x9e\xa1{\xc4\xb9\xc2\xef\xa4\x83\xa2~\x7f\xccl\x15\xf6\x9c\x05\x00#\x13\x9aL@\xa4\xdf\x8d\x10U\x90\xcc\"\xb2\xe4X\b\xc8\xef?\x01\xab\xc2\xc9\xf2L\xbdOuI\xe0p\x05\x90\xa8\xd8\x19\x98\xff\x82\xcd\b\x90\xc4\x8a\xfcI\xf2\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\x01\xdf\x92i\'\xfeGu\xb6\x82?K\xa9|w\xc3\x8fS\xec\xd8e\x14\xa7\x1c{1\xf7z!\xbf|D\xf1\xd9\xc4\xc2\xc3\x9d\x19\xb0\xcc;8\xe1\x93/\xad]\xdbz\x1d\xc7\x8a\xcfa\x05q\xf6\x1a\xc7\xc6\xb6*\x0eQ\xc7l=r\x93U!\xc4O\xd3\xd4\xc7G\x98\xb9\x1f#\xe2\xfd\xd5H\x9c\xb1\x7fs\x02\n\xdc\xcf\x91\xd6*\x97\xa4\x92d\xecZ\xd2\xef\x00'/457, 0x2, 0x0) sendfile(r4, r3, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x50f000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200003, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/245) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x2}]) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x81, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000380)={0x10000, 0x5, 0x5, 0x0, 0x0, [{r5, 0x0, 0x9}, {r1, 0x0, 0x9}, {r6, 0x0, 0x7}, {r7, 0x0, 0x4}, {r8, 0x0, 0x4}]}) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff3f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d03, 0x10001]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d03, 0x10001]}) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x184) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000240)) 03:37:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x707100, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x4, 0x109400) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x10001, 0x4) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffff7f00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x229a32fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x70e000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff00000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:57 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:57 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff01000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x717000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x7, 0x1}, 0x3c) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:57 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101400, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x760000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff03000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x960000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff07000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000340)='/dev/au`io#\x00', 0x0, 0x48040) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) chown(&(0x7f0000000140)='./file0\x00', 0xee01, r1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r2) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000fc7000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x100008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="f98a96d20efa154026231fd8859e59bdfc0154a23c03ebb0bc9c040000000000000069838507832aef51f056db3a4fc748eea226d4f1f7f0bb33e145c3363742543d4f2764d09646a99c6331830f5ef723a2e1f80b555841c1552847bda2ed51b8fef003f57ca2b523566fb651191649811e4bec067094d92cc8dfaac5d7a1a5fb88b1344976bcfbc52b5fc15299a344b07cef3a9c9e7cf0d208c7c41af5a8bcaab0d799df39be5f72ea90109c7e3567ce1bd888c1dda081222555652d5ec03a66b02da33637b195ead9af358432821401ea10f72a9195c0f50273d7ae7aae973997fadd"], 0x14}}, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x6, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x1, {0xf84d, 0x6, "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", 0x8d, 0xc2, 0x3ff, 0x97e, 0x6, 0x101, 0x3}, r9}}, 0x128) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x92210062}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[]}, 0x1, 0x0, 0x0, 0xbc640c793e3eda07}, 0x4000) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff0f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xe07000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000240)={0x2, &(0x7f0000000140)=""/108, &(0x7f0000000200)=[{0xfe00000, 0x3c, 0x3, &(0x7f0000000080)=""/60}, {0x3, 0x25, 0x7fff, &(0x7f00000001c0)=""/37}]}) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl(r0, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff1f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x101002) write$evdev(r0, 0x0, 0x0) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf05000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfeffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) fcntl$setown(r1, 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) unlinkat(r5, &(0x7f0000000140)='./file0\x00', 0x0) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff3f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:58 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffff7f000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 03:37:58 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$unix(r1, &(0x7f0000000140)=@file={0x1}, 0x6e) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2897.401723][ T7256] device nr0 entered promiscuous mode 03:37:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x43, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="af0cf517814025b6e2591ee7d001514498", 0x11, 0x800000000}, {&(0x7f00000001c0)="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", 0xfd, 0x9}, {&(0x7f0000000380)="7c3c4961351f8ea1a279708e85ee23823fe31833cad41bda7f7e8f6765f8eed79e5593a076daeaff129f62c7b4e55a5df1ae860039dafcbcca98243eeba898edfe95351174129aa10f645804e484c73cf5c7822d7aee11e6da96ca779fc7c986ed9183ebe80f2b443c8690672fb84831f3b3ae2248a0c53c25adf8bbb23b61d6503c8984e4cc0bc68a76bfde08c9a26d74da0ddc0ce6b0d323c0dd210839bb05b89adc63400864e4c76fef53497501876ee70c79749056a66e0c6304a4ffc287fa59fcb9a009c16d4654204887ea444ce1117ce96d00", 0xd6, 0x8}, {&(0x7f00000002c0)="481dc5391e8ae6", 0x7, 0x282}, {&(0x7f0000000480)="5b2b1c3654c58c0a71282f5de6e0df7ec2de5d1769592e24175b1dc117102e8d29d95eaa171a7907c8e22e8bd34a0a7b824ae9f4eced90f6abce130145856d64de9a95bc501d0b9059b006ee24a6286ee66d6ea1ba7c17bb1b2273adf24226bbaae93196d0e77a6ab5", 0x69, 0x40}, {&(0x7f0000000500)="7d7b1dbdc31fe0b82c34f53c7bd3d6236b9f72ba3b87e518eed2d612d971e658fb9118d7b2a1387ff935f91466793caa8d3133b86afd01ace909aab9ac6a35a3db2f1c2e6e7f85e97985cc6936cb0b25989577a311662e2f646ef35d7b58e55b35c0df", 0x63}], 0x2000000, &(0x7f0000000800)={[{@shortname_lower='shortname=lower'}], [{@measure='measure'}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x63, 0x31, 0x8f, 0xa1, 0x63, 0x37, 0x62], 0x2d, [0x0, 0x31, 0xab, 0x66], 0x2d, [0x66, 0x65, 0x39, 0x36], 0x2d, [0x0, 0x38, 0x66, 0x38], 0x2d, [0x36, 0x62, 0x81, 0x61, 0x34, 0x66, 0x37, 0x38]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit='audit'}, {@fowner_gt={'fowner>', r2}}, {@audit='audit'}, {@uid_lt={'uid<', r3}}]}) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff000000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2897.550205][ T7456] FAT-fs (loop5): Unrecognized mount option "measure" or missing value 03:37:59 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f000004ffe0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) timer_create(0x4000000000000003, &(0x7f000004c000)={0x0, 0x19, 0x0, @thr={0x0, 0x0}}, &(0x7f000004cffc)) timer_settime(0x0, 0x1, &(0x7f0000666fe0)={{0x0, 0x1c9c380}, {0x0, 0x7}}, 0x0) 03:37:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff010000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x40, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) close(0xffffffffffffffff) io_setup(0x1000000000000003, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0xffffffffffffffae}]) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x0, 0x100, 0x5, 0x8, 0x4}) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:37:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff030000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:37:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:37:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x5000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff070000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:37:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:37:59 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:37:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) io_setup(0x1000000000000003, &(0x7f00000000c0)) r1 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = accept$packet(r1, 0x0, &(0x7f0000001580)) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)="7449b93851b06dcf8f3a7958360999df980a57a218e08d54e58ef4d87cf569b3b3a9a4374bac7ca60c7a880a7a3472f66a5329c5df761f5c268a7e12bbcbe5a7e7acb0850c8f8a0b04ce3d38fb1668fbe15c73007d93975f2f5a5c4a769199d7eed308c54dd9eba0c7f5728e0ea915c20a4a3ae7753a929149a54841c8a8df125ca343a00a14d4af4b0b6d4b70dd71e79910cceb164f86e4812f2a899f5c20a471cf8908f9"}, {&(0x7f0000001680)="427c7014e17e70c7d338bf8795f8c26188996eae9e47f8899edd5bceb5466934ae942ee118e717b030d8da7f212dde7c516fa040a071dd7de393e83930ba0142010d36d1db22f87d955c6b8678f14bca2bf3d7fff8a91eaf4396cff8e5a765eefd120067a8fa3d0042286c791a1b0be9272a070949c6132b31a49299f3c282d6bfbd786aec0204288ce07a5b8b"}, {&(0x7f0000001740)="acafae12643a89ce53392a3bd00d8b913efe315b82fd03befea0d9c826eabfa1e11c820746c6a07f31228bb02dc94222a99e9376bfef42d969a724289fb3ec57f6540867c916da0143f192303431c2e420494d8e947c2eee6d62bc6983eb4a25cacdadac0b61640256aa50718ec95d4878be2a4030bc0dd21b0a"}], 0x0, 0x0, 0x3a3}, 0x80) r4 = accept(r2, &(0x7f0000000140)=@xdp, &(0x7f0000000080)=0x80) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000001c0)=0x3f, &(0x7f0000000200)=0x2) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r7, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_setup(0x7, &(0x7f0000001540)=0x0) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000001800)=""/68) io_submit(r9, 0x3, &(0x7f0000001500)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe9d1, r6, &(0x7f0000000240)="9c362d28bdb1cf5234319a8da83002732765b45d66001a058a74851e22b2a3849ac2915858386d503d88f5c2c447a8333769b3f8780f5e62b7ce5471d19af05ff792c016eea549dc74b14dbe0275536cb9c8db6287618ff0045d5f2b1223d3d042cd6367b991f5ca96c974fe6194e55827e27918f3b5326767346a3a8a5c89b26f587eed0278c0e05355137d37af", 0x8e, 0x70, 0x0, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000380)="bb4285cceaa7370b87ed29cc2bbdbf59076bcb0ade21f1a8963c3841333f604f52d5672b1000faf857b5ec07907b48c3e4c86a1f5ce8ca31bb50b5e2ed713b82ab8dcf679a9e3013dd6ae64225f5df13d0b10f6681a2ed045cde22388e98b763cac93449b9a772c7d3c3fcf6a08bdafe20a096a95c95925cfffbcf30e141c8d058e140e4997137e18638a2620c988b5d656791b5436ccafc0bb4ed9287cea100b8074a3aa82c986bdb1730a622b1d6351f533f6b2ff0ee55b2968e689635b7be7321a3686b4d1a7fa3fb9dc5b65193a004d3afa8c18d34b983554a2ff7fa612460a4e3fa239085c10ef6ff942a155e1353b158a18967ccd678e27634293024e526df20930f3135c5e647a2886513cbe5705fc21965222e033d6f5210c245ddec35b7f435826a5709277f8955975aed5f0e0398c834e358e98df13946b643ed261bd0f1fef90f80888ad2fea59dd048966deb1ed472f1997bba235b441fd24290cc5bf6e93343a5d125b15c48f2f72c992afab2067ef51d9be621d7f14656f0ee51cc1d6749626c5cf116c64dab8acf3fe1aeafa0e4bc4d54c8095066af4cb180195098b3549bbf252d1ec828b0975d3d36e63008eb787ecc9d75a4d8d72524fe9ad3b1a56c4af679ca37b5b11b39b95281057afca1d89e580799bd610c5e85cb0ab7cb28b81fefeb88d8c71bc9e75a59b721bad1a06c6df9735bb4020a7e8217dc2e13df031957d033d70d8958fc0067b28946d92504fbcc8f5b46031c4a6cf2c8ea77b6cf978a9537a7aadc6d4cf74c45b4a5f7ae424aaa5e3bfcc005aef579ab7152c2a9e389d102d282e4e7a3dc648acde7a9e4798c888f5fca31fc935004d9f3b8087baafc2068e3ef8702de2b4afb9866d50a24eb3b0d5df3908853477e6e9125c30778ee7550d228686c8e19d5b6bceb7a4f139327ada6f8b4bfe70d7bcdb016493f14d02bbeaf4b755c8f60813229b61a55419f1b04505757c168fa28076a30eab05e3f5290996c4564b223459e307d0e3bffa7f575996896f2e30a1133c1e9146dd8ba2591aafbcaf998bcea329c6c0f94831bfba0766a4fea6be71361025b63fe39d84810a302d6b3e0b3a26a1b9a43d0f26e0967c140a3be10bb748955f2b1263f839ec82c21fc54b0eb70c67892394303510dea82d6a1d7cf7158f128aec887330458a05dcf27d663c1482a0313db2a75b901b47807ac140c880343aa60f6da1a3e73cf31e73045c779c1639b0c1e2baaad3a90bbf4b2ccdfcb6101f0cde840612e12bb97b38aea75b25582075a5aa760627b668919dfac59b435a5a8bbe589cf9b1dfaab4c9684077d7a67ec84883ad8908a4e1af36b479e1f2ddd2912e95efb12c5cd61984a4eed012422b971aedfcdf92673688ab29b54a07511bc97c670a85c980b3be71421c223ebbfe262cdd0ba2d822ee111aa17ab19d53bcb4fc0aa54a8491a699e1be648a91ef9910a47db7d0575bdb57cdafcd8df4d751cc1078dc66b38411c725bdd77623d790351938ac5978b37858d2d5bd97bf52891a04b5833efdae5b29da08932282879acfa4f35f42c77b45460d9a5597b9e773ee317f48246edd9c1015fa814733b8c8a8486fbd6e6cdcf1635047ab1ba41abdb52dcb6b53fe4e23a9861fec42c1015a7e77c2a8a0c8c4eb858b938dfee5ec7d5ca033d3032644ee96d018288be3f038c529f5e16582b7cc5dd4829d50c576d1ff4003337f9f96e3da1f64973e91bc543ff1d0e49372022c1f1219d956c70b5477d7927ce4249f89cd0f641b5295731fd36e7d903d0093f03f0a7fb2e3ef09bd62ba1e2a0e5eb3179576d3a782c4cfef1e6a4024a70ac9971c05f83e070b0892a7cbaa51bcf960e2afae08c1f1d7d7df22afc0735bbe0d2a9b3653fe78895ff6317bf6c44ea2835335087c617c4ae9194a035ce742f8f505001880c71458a2ad510f8880e3d3d1bb62b13ba59fbe6b91281b309638cadaf1965c06f6488fc917f3cabc57e74aefaf01389b4662180b93d1495df07c32a66b8dc7030701c1e38c46f6faf2ee2acea1de02e1dfa271962dab0f479f632e6dd5595810d0b8b01ea63832db99d89275c64f52210a2966ff27a3e20aae07289b562f06ed514d5ea0c932c3f7f3c5cf2b7d64bdb9650ebee770fa124d98949a9d2127b7c50f6ebce00ece2c0b77521cab48b9975af79a9a5dc205f667a732b330625e49e0c5aa50a7511db44a0140f3e0e32bb0f4c8504926afad85c889e4143fe98dc96342d942f3a15b99aa463cec61cbabed42762d248786130e87999c7180a46de6832dfedff7ae1554b8a77bd49f9ee6be8d0b58f3f1b351dec758e83faf3979027eb99a671027a190f7a759ccdca21754337d2a10200e213c6705d0aac34871e6e63305c49125a896dc9cfe2a8dc045965a2599996cb3214a564dca696004af7868898999f5745f2a576bfe30ba8dfb53e958046188b6ee97e039f6b583e916870d3cae4414b4556f4d5e9c454c44dc4ef320225ea92f40f57ca8bc9aaaa0f8f84bb85aeb3c44113de540cee98923f13fe050e35ee5b538c41d70fa09e8f91d4c34abbd016c5d120929e736d9a71a71b2e12f5756b4e752ee98ed73532ff005359a5b9f5badae774002acbe83ae0ce8f1e4b5e85c62d71fd929e746c0dca0d61ba0366536e1fa40313895f85f99261b318e05f2becf160855796fa2456bbba4defc84166196998f0c30744259124ed781d46091723632d77214435566f777d87b52ac068a06518a17f0b5a863fdf850fe48628deeedeb39058e2f85f32f8de8c65d6e7e3c46cdb2a9cb3a11ac24d2c5eb2df837e52b1d8f9fb09026d92250e9f25a21e7dd798c719affd784e6549511b1cd6f54b9e7f5fda36fc98142b0ca0bdf45f4f205daf0164bf86ad38b3c88a3eac7ee39f108e74358cd586f2cbed28c1200991102052df8045de6136fd0285b4e465e02bc39003f1ca7210fd22fd6215f143e7e081fe7ab5ae26ebc9ec084adbeaaa90a86dca7c0c4e8a7474ba4c5b4be014372d86b31032b408bf3f219964821033ad0b2f8e7e0b7d87b5928b1e7600c0728669a1fecda5256ca638328877c99a75cdd3d11342f479624988232a0184ac4bdb3952391cc71c8512fc73293651af17fd08e00296001b19d2739086bded41c3732859cf33ff1acfa041582064c65d1b6626fff98ac7a02b379c0d59de53494c85f481cdcbe87371a5d037b49b51d6f844217dbaab8e8a0c072582ec67bf7f4c333f5df908cca405de41f02f6606604ef8e5ec90c3a7c89c2c4339fec010c6451882f656801aac4cb9929baaa36657a150a99c8e3c5e84e549ba758f6af587af4a227608e7f8c7b43764c170c15148f368d272760ed27f3aef9673fc98ce976f58436caedd5b615a780c07fa5f5a50ef4a2589d9405109c3a85dcfb36e27cccb04c3d001ae10a9f0f44f043339a512b5e7f1b8172cb734fca1d93832dcd06e546a87aeb988421e444a8468f2ba1fd00bd1a267c336af6590f120c7808af055156b6c278505aa8a7a9ecb05f13ad6cea1ef601aba558b9515f3f7fd126e538e9e827f9097ea4dcfe450c9c1fad1fc9a5363a958ae44ec2ca8c71547b43c507c9660e587955c2b99e593470407fb4b45a72b211d118960af9c64113acebcccdc4731bc52c7bb605b6ab6ef91655c72ef4ac46a33cf4f7b24afb94bb7a949c909751e274264a7eb5bfc34ae03c6ab87cc7cfbe8a1d5e31df45fc86271622eb6b19714c68174dace582c72a35ffe3a444d7a0e69d1e1e46930e84d43fa2fbb8063e2006a78685a85306afaa55f5467538dadf6c754d3f27982b9ee174c66492be8f99569f033ccdbdd1fc68de1820ec67afffcd7512ac5d6cc93b805d0c43d9a340738575677f6ebb725d013b92b029b2302209afaa59083313f0d2aea7cf1fa48540a915ee75f7bf73c4d257f74dc09c85b725493d28c63af196d73f3c27e7e47768db6e3757660713fa53a3e7d06eb677a9f41e71d9677446b5823cdc2f53d0fb9d084f05110a32f4fdebd319e9419e8436e31b6dc8f5b8b9207c3486fb8a6be743f4537ffb7c2edca7ff10052fa20c14d979ce2edf232f86321b69b6a852ad3ffbc58e1aaa28723d3a1b991d7698e04aa7c0056441ba36a8570aba21f0e018965fd05c052fc90b6e97ae8ed9e961221b48b9cf8b4c6de6b7a256f35c949ef02d7d06dd03ccbb92eb91eaf880db8911e51cc07dfff054b15cdb63a8a7951a536d34368862f852630449fc0ff301e8e8a7e2cc23196c9ffae60829fc62752cf6728c6f19ca9b63973268e125d232204af3046c3a88b9f9478981585585c454b5d33e3200d1b15aaa7fa9dd566aee24e8a1918f4791925dcf1635f6cbbc96e5c01d2e6c7c6edc820f2e3375e140798c3defe19ea3e46dca5b92346dbd0a0f223b86ac2ffc9a0295f40dc5bc8be1a6c52f9211e98f47cebe46bb4dfc7a53ca276b721331e313e188c178baa26be97b5cbd2ff21d96a6b0b522488e4db874ea445d63667cfc811a4770d20740110fe91fe4b4dd031d50fce20406f3531913767a08840dbcd01a0a022db9f282835e050156bfec07143b45ac019f71c8f12b6c3692833174d7cbace5d7887711538c4be9e20453d154a6a99b50e7d889af0bbb182708ae9a42a8b1cfa6aa906e2f32e7be07d5df01bc48e2339f3613edb79a64f0bfd459a37f674667db33e26f6086622c04a5a0b354ad3f1e13e60ff6e9aa3481756c3706f6c6f05dc01c1761897be65925e216de06d5670fa5fff0d21db0602e118e99077d19ec1d3e10648c650acaabb7f2abf55d15504d978ad504f8b3d99b4c886d8010d6add5d2311ef1e45ac280af056621b3cc8b65df770af78e9b4d4c584a283122b7a0f3ba10245167a1c688c8845671dab586d300915e4bd71c9a44f738b9308308dd2bbeac06036848b5829ee1fddbebbf4d39885fd56c392bb0b24152757a21ce63b7d94bbb0ae677b45c814a5346e92985d38e2e832133447c648041e4afd6746fb4f9f8965763886cdd336fc27e259f16a87748f183bac3c1d7db84dcbc057904852f21111c6e931386e5cca4d7a37fbc07b4a6a78b070590c59948ec39164d0f92126de21ff9fb932d3968385a105366fb33d84603d40ea8dccba25120a8a2390e420ee126a45fd0ab1115fac38027132396cf78ca12296f707ef624bcc70e700abd31583b6fd6e8c24cde17b511b3246cec0827dabe7b30829ddd71e290804e8a9402fcec4808277b2c49d8cc258071fc85ee7de15b76d3f20f74b4430bed4b7ad0c65dda2d7dd1b9e71912387841c713d70c988067227020f4a213e0efcd480ea243023155b4886dd243601c10d27386005789738fc0bc11bfe7b74fd7f370f6a5956ea4311c5451196d44f1f0d35663bbfd5bbf6ae9f27561312ca2883f91345279cb84e1cfd52897b78bf0e75b15162490fa0247dac9b60a17317c93405593803bb7fb0752ff82d9ed2a30dfbfd86089fae7811ba503ca35d7f28af2d2130da5d4366546bbbca0a2aaa40d799ae5c83465fc98b11940808f7ab97a2ad68eee67793ed950745564261fa97969f62c83e0cd2831d5a4685e2e73e50e7c1200f4890379b15694c46674b4bb88b7f79fe48a94d50a9ca8263909b54155e6019db01cfa7ae2fc26129be4bb6a11685c2ad2f5a5cb469e07191e425499231f26179944e60e7cdb29b32f366ad3c7bd7b331785ad3a90dc92f0d0b80a7482c3b1d63d9634b8f115464974a6166981f55ec67187f3d145b0cb615b89d2adc80ad", 0x1000, 0x80, 0x0, 0x3, r7}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, &(0x7f00000013c0)="ca5b7c589acd8ff0900991520b884150a9a2496bd8ea7614860fbfd82dd0b653aa5afd06a3348959bf545b5dced7110b2e1572e2d7a6dc704137d856b82d18a1dd3017d517b4c90eca891636412f3c2c4cae8a4a6f391a7578b04092b8501fd965136b568c12f43a0730ec81e747f64cbc87518effa74652b3850e5b051825e2e136511a82a13fc0f087916f113fa5a3b30dc2933dfb16a71cb1b27799663979627ea1dbe87c2defb1a141d5ee848201366782ddede3b8ec560250ff956b84be70ff043ef32afd18ff9e939c6e718d18814990e5ab00664b6e44c7600afaee97e9", 0xe1, 0x4, 0x0, 0x1}]) 03:37:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:37:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:37:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:37:59 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff0f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) prctl$PR_SET_FP_MODE(0x2d, 0x4d2fa09f8360ebef) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x355d, 0x9, 0x2}, 0x6) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff1f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x0, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x80000) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x101, &(0x7f0000000040)=0x4) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff3f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1f000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x100000001, 0x5, &(0x7f0000000140)}) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xfffffffffffffffc, 0x650900) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) io_setup(0x0, &(0x7f0000000080)) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff600000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x100, 0x7dce7a62, 0x3052034c, 0x210, 0xd, 0x7, 0x80, 0x40, 0x80000001, 0x6, 0x8, 0x9}) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffff7f0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:00 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff0000, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x85000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:00 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) 03:38:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff0100, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xeffdffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4}]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x2100) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000100)) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff0300, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfcfdffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/ca0\x032N\x00', 0x200, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000200)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000140)={0x7, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}]}) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff0700, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfefdffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r2 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, r3, 0x800) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff0f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xff600000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10100, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x102) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0xfa04, 0x4) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff1f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffdffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000f96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffffffffffff) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}) membarrier(0x24, 0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r3, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x88003}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000007f000000cdc4cf1b6b588aad8dee321fc76c7eaeb5dd222a11df4fae494871ce4df16930a36fbdfce5df", @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000000) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff3f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:01 executing program 2: set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:01 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffff7f00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffdef, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:01 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0x7f, 0x2, 0xffff}, 0x20, 0xffff, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x4, 0x80000001, 0x9}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) prctl$PR_GET_SECUREBITS(0x1b) 03:38:02 executing program 2: set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 2: set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff00, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffdfc, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)="3ba02c43a91c6ab9e8767b8e57d3423debf1894467459f890b762034ed276a4b421be518805c0e15ad7adb8bf8fd3e2bfe962faacab347bac8e0f48dba7cce69fc71fa49e409319e540e04c19c747104d35ac56428bb3b01c5865f3cccb7041a16f525725683d49c53fb0a9524a31beca84ed1688a83332a595418f34cd776b8e3afbb9c50cd72b71d29caf1453d284253c5ac68", 0x94}, 0x68) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 2: mkdir(0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff01, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:02 executing program 2: mkdir(0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffdfe, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) setfsgid(r2) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 2: mkdir(0x0, 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff03, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000140)={0x9, [0xfb, 0xfffffffffffffff9, 0x7, 0x569, 0x8c99, 0x10001, 0x1ff, 0x3, 0xfffffffffffffffc, 0x9, 0x7, 0x9, 0x1ff, 0xfffffffffffffff8, 0x0, 0x7, 0x80000000, 0x4, 0xfb82, 0x80000001, 0x4, 0x1e, 0x4000000000000, 0x3ff, 0x3ff, 0x6, 0x1f, 0xec, 0x6, 0x3, 0x40, 0x2, 0x3a6b, 0x8001, 0x8, 0x3f, 0x206, 0x9, 0x2, 0x1, 0x1, 0x6, 0x80000000, 0x3, 0x4, 0x9, 0x200, 0x7fffffff], 0x6}) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffdff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x0, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x100}, 0x8) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x8000) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffffe00, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff07, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x0, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff0f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x0, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0x1008) 03:38:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:02 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff1f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x10000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000380)="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") 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0xffffffffffffff3f, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x40000) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x1, 0x0, "0424c7cddf00221de0854815197197f892b59959c129b77f0beb58a9cc212dd0389020f6f9c525df433adf337bf59ede34d1e8f202d8b6c6008e7c7fd56de19ad8735caa5cec8065ec2d99e45e370407"}, 0xd8) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xa}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x555556282000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x9, 0x100000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0xc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0x10, &(0x7f0000000080)={&(0x7f0000000140)=""/194, 0xc2, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x5555562a4000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x144}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x60ffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x12f}]) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r7, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r10, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000700)={{0x2c, @rand_addr=0x4, 0x4e23, 0x4, 'sh\x00', 0x14, 0x8, 0x14}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x4e21, 0x2, 0x5, 0xdf5, 0x36a7}}, 0x44) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r4, 0x6, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000140)="8b851d9002c5aa825d0dcf36aacc04b2fca9bc9ec475593fb91d2a944e2864e9bce43186385a235e88852c865581b07387e1a29c0e218ac93500d83abe5b647442e3eca869421f72bce27f25bb893e8d028c79b9ebad13dd54c57a9ede563e50423188b24fc9761cdd352607bb86c656ed1b876bf4a2bebbabc0194848ed30086d1133c23ac7219f9f05d0a554a47c633d2ec2b39a76a7349a8cfc445d0375dd4447f75e4766b77022317cca6145afbf89c273eefa605b5e7ddbf70deb1cf158fb89204039133be11ae12c8dbc5c4d5ecc0ca4f797ddc9647e81401cdb", 0xdd, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa, 0x7, 0xffffffffffffffff, &(0x7f0000000240)="7efa4fa1d44fc933c090f0cdc1e9918ac6120456e3e31367d1ab0df395a2c1053d7e538d42d14ebc506da8c11b57dea5f62bb0e3d0deefc21c728da43c15d191c6e7848313fe1efedf810235e64d35c9", 0x50, 0x7, 0x0, 0x1, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8, r6, &(0x7f0000000380)="d0562f3b03aa81b3315081bcf8999fe1d0179323ef0b4535ddc708b8b84bba21d3d8f64e3725c300e713707c39e467e63df30f9ffdf80e62ec55a215e67633b6746e2fd81d0c4e370eb56ec3c473bd14fc091d50c533dd4b5c347ea40c2d2d397c107989378b6b89be7d7a8e3e7c7754596be042e414d6da1a8a0723e5ab841a8fad64e354f4e7dc6cb39724ca0258eb3315469569403eeceabee0d02e1dbdbeefa52a9941c2f9d293fd6583680ad450c8ff84ceb2ec360ba5ed25f226ecab5f3aa4cb85fe1c88b43b", 0xc9, 0x1000, 0x0, 0x2, r7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000480)="418253e9a838c443bb5c730773d42190efd7a9f454c4790e388fbba723fb106331c778ec58a284c2d8cb9f1a894374921b3c8ab6e54cefc6ad3c67a477625179c8aefa764c68dbc235e4f256280a5a2c9bdfd7ec1c23030365a8524ed87d1dd69b800a4161605bad1b656665d24d617d33d5efea0079bf50f19dda4a463235632ee8a946bd3cd61b26dc3a2df8", 0x8d, 0x9, 0x0, 0x0, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0xb08, r8, &(0x7f0000000580)="4875fc492af208f1f080bad7d91fb242c7162e950e407ddd80b2f06a3e64bd8e5bb6a5730cd1a9b17e685b6c4391c1321064ee98eeca397063d772004217e689d9a3597b474dd078495bb2086e6a1b014344b9c564b01fc60d0e1e1be02c567c55dd506b124791f3052361ce173c6a7a89d1376e19d5c3", 0x77}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x80, r9, &(0x7f0000000640)="ae6e3c92de522261494e1a", 0xb, 0xdb, 0x0, 0x3}]) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x760000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:03 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x2c0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2902.205632][T13489] IPVS: set_ctl: invalid protocol: 44 0.0.0.4:20003 [ 2902.232454][T13489] IPVS: set_ctl: invalid protocol: 44 0.0.0.4:20003 03:38:03 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7f3762f7a000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = syz_open_dev$usb(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYBLOB="682915563c27d7e1ea01002e00000000", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001800)={0x6, 0x0, 0xb5f, 0x8001, r8}, &(0x7f0000001ac0)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r9) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) io_submit(r10, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x12f}]) r11 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x2a75, 0x81) r12 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snapshot\x00', 0x40040, 0x0) r14 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r15 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r10, 0x5, &(0x7f00000008c0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7, r11, &(0x7f00000005c0)="b8f9a3401243d3b41d6b3c599acf9a65d630", 0x12, 0x1, 0x0, 0xaa5609a1121dc03}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x6, r12, &(0x7f0000000640)="49ff514a25c2df6964cd2374e8dc88d4d328937fe33c2dcda208b213", 0x1c, 0x4, 0x0, 0x2, r13}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x8000, r14, &(0x7f0000000700)="c54414a887", 0x5, 0x1f, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000000780)="edcaeb045731d33fbf", 0x9, 0x0, 0x0, 0x3, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x8, r15, &(0x7f0000000800)="4557de73245513fd9bdc7aa1f9ca73f266c84a9cf959ac697efe5b1fbd48c39d116194590500c2670eb3af3c7f60a05e1e38346759131023622573cdf9a607bf036fc4a9b76cbf2516de2fb228c5916bbff6e20025b94cb6c7d141a2064796816872e7a2edc11ac90b8dec89439fdd6704efc99b04", 0x75, 0xffffffff, 0x0, 0x0, r0}]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={r8, @in6={{0xa, 0x4e23, 0x5, @local, 0x1f}}, 0xd7f, 0x3, 0x401, 0x800, 0x1}, 0x98) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3e007097, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x51c3, @loopback, 0x3}}, [0x400, 0x5, 0x7fffffff, 0x101, 0x1, 0x1f, 0x100000001, 0x1ff, 0xffffffffffffffe1, 0x2, 0xbdc, 0x4431, 0xb1, 0x1]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000002c0)={r16, 0x8}, &(0x7f0000000300)=0x8) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0}]) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0xc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x7ffffffff000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x144}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x40981) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="5478235c90f3061c289e599d8cbfd9cd89b9b6bdc318b53d51eb12882dc24b872ec3047dc5d9c7577d3e6b4466a576146157c49308104e00c0df16df41fa8cd8bf76d547643d27baa2ad642e36964e65bef1bb98fc0e9da50e") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x12f}]) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setopts(0x4206, r3, 0xfffffffffffffffc, 0x43cb1bbcbbbccb4b) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x960000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40) write$binfmt_aout(r2, &(0x7f0000000380)={{0xcc, 0x0, 0x2, 0x191, 0xbc, 0x401, 0x65, 0x5}, "024f1c5b197f585f0d4d4e88b93167298920bc165b4a4432e7f0b54e6f688a8c6831056e94319be1789441000ff2f234a85f3c1b75d89eb9ccc356d7774a907f623af283083cc6b50df11ee0328b4efb469f575f77c961cce689913e190a5ad0e9d211b4d49ea31b473d12d16fae18594d9b61da74cd32ab9620e6d02b59fece1f6ade71", [[], []]}, 0x2a4) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x2c0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x8e5}, 0x1c) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20285655550000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x402a5655550000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:04 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x88740, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x2, 0x0, 0x5}}, 0x28) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) dup3(r1, r3, 0xc0000) close(0xffffffffffffffff) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x28000, 'syz1\x00', @default, 0x1, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r4) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x12f}]) 03:38:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:04 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x70710000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:04 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x28) 03:38:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xa0f762377f0000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xe0700000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0xf71, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000140)={0x1, r3, 0x6, 0x80}) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2db}]) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf0500000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) 03:38:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfeffffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:05 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) 03:38:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff961605cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc84}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff96}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004814}, 0x6aa9efcadb77f677) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xc7ce0000000000) 03:38:05 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 5: r0 = syz_open_dev$usb(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/216) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000040)="1b00000018007f5300fe01b2a4a280930a600000ffa84302910000", 0x1b}], 0x1}, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x200000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x300000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000140)={0x1, 0x2}) syz_open_dev$audion(&(0x7f0000000340)='/Xe\x00\xa7\x80C9\xb1G7\xa1', 0x2, 0x4e5800) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xf0, 0x2, 0x2ae, "638f718a0f8045960434b9dd451e6331", "2c27df809911dd388e5eaff82b823ba025b5a0f54e86be019fa3ce6f090adedd8b4d9904304dd00f406a70f294eccd0a33b0988939d6c1573ef1397fa32c4cc3e2d4cf1ffb073331a2822bc6131a3482c7438c736161e778da44eba3643374d37d4ea95314f2d0e285834b7f16b5cdcf854852ee620da0a2e924aaeb48e3b1ad39d7650af84c252783b44758681e6157a97b4dfdac34463a773859503aa35a00ed1a5077d7c0bab1a5fb738cfb38225af78f6050a2ea89fa36c37adee5d4e2e46faa2999581cf229bc03e4b956ae3af104147c26aba75dd6a328a9"}, 0xf0, 0x3) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x60}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 5: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x196, 0x132}}, 0xffffffffffffffff, 0x35c, 0x91, 0x1}, 0x20) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x500000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200)=0x9, 0x4) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}, 0x0) mmap(&(0x7f0000087000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) fcntl$setlease(r2, 0x400, 0x0) 03:38:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 03:38:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:06 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:06 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12c}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2905.280322][T17339] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/7' not defined. 03:38:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 03:38:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x800000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x144}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 03:38:07 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff29, 0x0, @ipv4={[0x3580], [], @multicast2}, @remote, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @remote}}}}}}}, 0x0) 03:38:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xf00000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:07 executing program 2: ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x969, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0df3f47fdbc870b, @perf_config_ext, 0x0, 0x41ca79f2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\a\x06`\x00\x06\x00z\x03', 0xffb}) 03:38:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)=0x7ff, 0xffffffffffffff72) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = getpid() fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xfffffffffffffffe, 0xd4e0, r3}) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x8, {0x7, 0x1f, 0xd152, 0x2000, 0x3, 0x6, 0x7, 0x3ff}}, 0x50) timer_create(0x1, &(0x7f0000000080)={0x0, 0xd, 0x1, @tid=r3}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000240)={{r6, r7+10000000}, {0x77359400}}, &(0x7f0000000300)) write(r4, &(0x7f0000000140)="f3fbd2e58ffbc7bba0679c67fdcd14c4ac2ca59d13f3dea78d6eed67dd8f4381b16d21d186082ea9033a58f1f07f15bacab07e295bf99c00efb43b36dda8b3c81e83786c1021f6feed", 0x49) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) poll(&(0x7f0000000200)=[{r4}, {r1}, {0xffffffffffffffff, 0x420}, {r4, 0x1060}, {r4}, {}], 0x6, 0xfffffffffffffffb) r8 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) r9 = syz_open_pts(r0, 0x0) read(r9, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000180)) 03:38:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1f00000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2905.704075][T17857] device bond0 entered promiscuous mode [ 2905.738488][T17857] device bond_slave_0 entered promiscuous mode 03:38:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b1}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2905.773043][T17857] device bond_slave_1 entered promiscuous mode 03:38:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2905.827074][T17857] 8021q: adding VLAN 0 to HW filter on device bond0 03:38:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:07 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f4}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:07 executing program 2: ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) dup(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x969, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0df3f47fdbc870b, @perf_config_ext, 0x0, 0x41ca79f2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00\x05H\a\x06`\x00\x06\x00z\x03', 0xffb}) 03:38:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:07 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2906.037669][T18266] device bond0 left promiscuous mode [ 2906.043263][T18266] device bond_slave_0 left promiscuous mode [ 2906.061361][T18266] device bond_slave_1 left promiscuous mode [ 2906.092520][T18266] device bond0 entered promiscuous mode [ 2906.124261][T18266] device bond_slave_0 entered promiscuous mode [ 2906.130993][T18266] device bond_slave_1 entered promiscuous mode [ 2906.142129][T18266] 8021q: adding VLAN 0 to HW filter on device bond0 03:38:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x8e5}, 0x1c) 03:38:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:08 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x300}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x60}}}, 0xb8}}, 0x0) 03:38:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:08 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e8}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:08 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x60ff, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:08 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8500000000000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:08 executing program 2 (fault-call:6 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:08 executing program 5 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2}}}}]}, 0x58}}, 0x0) 03:38:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xeffdffffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:08 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x500}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:08 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2906.879616][T18925] FAULT_INJECTION: forcing a failure. [ 2906.879616][T18925] name failslab, interval 1, probability 0, space 0, times 0 [ 2906.914406][T18927] FAULT_INJECTION: forcing a failure. [ 2906.914406][T18927] name failslab, interval 1, probability 0, space 0, times 0 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2906.950403][T18925] CPU: 1 PID: 18925 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2906.958341][T18925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2906.968408][T18925] Call Trace: [ 2906.971715][T18925] dump_stack+0x1d8/0x2f8 [ 2906.976148][T18925] should_fail+0x555/0x770 [ 2906.980606][T18925] __should_failslab+0x11a/0x160 [ 2906.985555][T18925] ? kernfs_fop_write+0x140/0x4f0 [ 2906.990587][T18925] should_failslab+0x9/0x20 [ 2906.995109][T18925] __kmalloc+0x7a/0x340 [ 2906.999282][T18925] kernfs_fop_write+0x140/0x4f0 [ 2906.999294][T18925] ? trace_lock_acquire+0x159/0x1d0 [ 2906.999307][T18925] ? kernfs_fop_read+0x580/0x580 [ 2907.014621][T18925] __vfs_write+0xb8/0x740 [ 2907.014634][T18925] ? check_preemption_disabled+0x47/0x2a0 [ 2907.014649][T18925] ? __sb_start_write+0x403/0x4c0 [ 2907.014658][T18925] vfs_write+0x275/0x590 [ 2907.014671][T18925] ksys_write+0x117/0x220 [ 2907.038732][T18925] __x64_sys_write+0x7b/0x90 [ 2907.043341][T18925] do_syscall_64+0xfe/0x140 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2907.047862][T18925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2907.053763][T18925] RIP: 0033:0x4598e9 [ 2907.057666][T18925] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2907.077275][T18925] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2907.085709][T18925] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2907.093706][T18925] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 2907.093711][T18925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2907.093717][T18925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2907.093722][T18925] R13: 00000000004c9a63 R14: 00000000004e1160 R15: 0000000000000005 [ 2907.098652][T18927] CPU: 1 PID: 18927 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0 [ 2907.125641][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2907.125647][T18927] Call Trace: [ 2907.125667][T18927] dump_stack+0x1d8/0x2f8 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2907.125684][T18927] should_fail+0x555/0x770 [ 2907.125700][T18927] __should_failslab+0x11a/0x160 [ 2907.125714][T18927] should_failslab+0x9/0x20 [ 2907.165131][T18927] kmem_cache_alloc_node+0x65/0x280 [ 2907.170338][T18927] ? __alloc_skb+0x9f/0x500 [ 2907.175187][T18927] __alloc_skb+0x9f/0x500 [ 2907.179523][T18927] netlink_sendmsg+0x756/0xc50 [ 2907.184298][T18927] ? netlink_getsockopt+0x9f0/0x9f0 [ 2907.189505][T18927] ___sys_sendmsg+0x60d/0x910 [ 2907.194198][T18927] ? rcu_lock_release+0xd/0x30 [ 2907.198979][T18927] ? rcu_lock_release+0x26/0x30 [ 2907.203832][T18927] ? __fget+0x4e6/0x510 [ 2907.207989][T18927] ? __fdget+0x17c/0x200 [ 2907.212214][T18927] __x64_sys_sendmsg+0x17c/0x200 [ 2907.217157][T18927] do_syscall_64+0xfe/0x140 [ 2907.221656][T18927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2907.227543][T18927] RIP: 0033:0x4598e9 [ 2907.231460][T18927] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:38:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2907.251150][T18927] RSP: 002b:00007fdb1a1e6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2907.259566][T18927] RAX: ffffffffffffffda RBX: 00007fdb1a1e6c90 RCX: 00000000004598e9 [ 2907.267537][T18927] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 2907.275502][T18927] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2907.283473][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb1a1e76d4 [ 2907.291446][T18927] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000007 03:38:08 executing program 2 (fault-call:6 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:09 executing program 5 (fault-call:5 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2}}}}]}, 0x58}}, 0x0) 03:38:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5ac}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfcfdffffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:09 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2907.438856][T19462] FAULT_INJECTION: forcing a failure. [ 2907.438856][T19462] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.458042][T19462] CPU: 1 PID: 19462 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0 [ 2907.465956][T19489] FAULT_INJECTION: forcing a failure. [ 2907.465956][T19489] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.478611][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2907.488660][T19462] Call Trace: [ 2907.491946][T19462] dump_stack+0x1d8/0x2f8 [ 2907.496263][T19462] should_fail+0x555/0x770 [ 2907.500676][T19462] __should_failslab+0x11a/0x160 [ 2907.505601][T19462] should_failslab+0x9/0x20 [ 2907.510097][T19462] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 2907.515801][T19462] ? __kmalloc_node_track_caller+0x3c/0x60 [ 2907.521590][T19462] __kmalloc_node_track_caller+0x3c/0x60 [ 2907.527205][T19462] ? netlink_sendmsg+0x756/0xc50 [ 2907.532125][T19462] __alloc_skb+0xe8/0x500 [ 2907.536437][T19462] netlink_sendmsg+0x756/0xc50 [ 2907.541186][T19462] ? netlink_getsockopt+0x9f0/0x9f0 [ 2907.546364][T19462] ___sys_sendmsg+0x60d/0x910 [ 2907.551026][T19462] ? rcu_lock_release+0xd/0x30 [ 2907.555776][T19462] ? rcu_lock_release+0x26/0x30 [ 2907.560605][T19462] ? __fget+0x4e6/0x510 [ 2907.564749][T19462] ? __fdget+0x17c/0x200 [ 2907.568986][T19462] __x64_sys_sendmsg+0x17c/0x200 [ 2907.573923][T19462] do_syscall_64+0xfe/0x140 [ 2907.578408][T19462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2907.584281][T19462] RIP: 0033:0x4598e9 [ 2907.588180][T19462] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2907.607764][T19462] RSP: 002b:00007fdb1a1e6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2907.616158][T19462] RAX: ffffffffffffffda RBX: 00007fdb1a1e6c90 RCX: 00000000004598e9 [ 2907.624117][T19462] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 03:38:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2907.632157][T19462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2907.640111][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb1a1e76d4 [ 2907.648068][T19462] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000007 [ 2907.656036][T19489] CPU: 0 PID: 19489 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2907.663920][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2907.673953][T19489] Call Trace: [ 2907.673967][T19489] dump_stack+0x1d8/0x2f8 [ 2907.673979][T19489] should_fail+0x555/0x770 [ 2907.673991][T19489] __should_failslab+0x11a/0x160 [ 2907.674001][T19489] should_failslab+0x9/0x20 [ 2907.674009][T19489] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2907.674018][T19489] ? find_css_set+0xb86/0x19a0 [ 2907.674027][T19489] find_css_set+0xb86/0x19a0 [ 2907.674044][T19489] ? cgroup_attach_task+0x731/0xa10 [ 2907.674054][T19489] cgroup_migrate_prepare_dst+0x11b/0xc20 [ 2907.674066][T19489] cgroup_attach_task+0x73d/0xa10 [ 2907.674081][T19489] __cgroup1_procs_write+0x23d/0x310 [ 2907.674092][T19489] cgroup1_procs_write+0x2a/0x40 [ 2907.674099][T19489] ? cgroup_pidlist_stop+0xe0/0xe0 [ 2907.674105][T19489] cgroup_file_write+0x223/0x5f0 [ 2907.674116][T19489] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2907.751114][T19489] kernfs_fop_write+0x3e4/0x4f0 [ 2907.755950][T19489] ? kernfs_fop_read+0x580/0x580 [ 2907.760871][T19489] __vfs_write+0xb8/0x740 [ 2907.765180][T19489] ? check_preemption_disabled+0x47/0x2a0 [ 2907.770873][T19489] ? __sb_start_write+0x403/0x4c0 [ 2907.775899][T19489] vfs_write+0x275/0x590 [ 2907.780131][T19489] ksys_write+0x117/0x220 [ 2907.784444][T19489] __x64_sys_write+0x7b/0x90 [ 2907.789059][T19489] do_syscall_64+0xfe/0x140 [ 2907.793554][T19489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2907.799431][T19489] RIP: 0033:0x4598e9 [ 2907.803299][T19489] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2907.822882][T19489] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2907.831268][T19489] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 03:38:09 executing program 5 (fault-call:5 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2}}}}]}, 0x58}}, 0x0) 03:38:09 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5dc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2907.839215][T19489] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 2907.847162][T19489] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2907.855117][T19489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2907.863074][T19489] R13: 00000000004c9a63 R14: 00000000004e1160 R15: 0000000000000005 03:38:09 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:09 executing program 2 (fault-call:6 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfefdffffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2907.946794][T19675] FAULT_INJECTION: forcing a failure. [ 2907.946794][T19675] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.968311][T19675] CPU: 0 PID: 19675 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0 [ 2907.976230][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2907.986279][T19675] Call Trace: [ 2907.989578][T19675] dump_stack+0x1d8/0x2f8 [ 2907.993909][T19675] should_fail+0x555/0x770 [ 2907.998332][T19675] __should_failslab+0x11a/0x160 [ 2908.003268][T19675] should_failslab+0x9/0x20 [ 2908.007769][T19675] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 2908.013492][T19675] ? __kmalloc_node+0x3c/0x60 [ 2908.018159][T19675] ? trace_lock_release+0x135/0x1a0 [ 2908.018169][T19675] __kmalloc_node+0x3c/0x60 [ 2908.018179][T19675] qdisc_alloc+0xc7/0x8b0 [ 2908.018189][T19675] ? do_raw_read_unlock+0x42/0xf0 [ 2908.018200][T19675] qdisc_create+0x165/0x13e0 [ 2908.018215][T19675] tc_modify_qdisc+0x989/0x1ea0 [ 2908.018229][T19675] ? trace_lock_release+0x135/0x1a0 [ 2908.018242][T19675] ? rcu_lock_release+0x30/0x30 [ 2908.018253][T19675] rtnetlink_rcv_msg+0x889/0xd40 [ 2908.018266][T19675] ? do_syscall_64+0xfe/0x140 [ 2908.018276][T19675] ? __kasan_kmalloc+0x11c/0x1b0 [ 2908.027965][T19675] ? kasan_kmalloc+0x9/0x10 [ 2908.027976][T19675] ? __kmalloc_node_track_caller+0x4d/0x60 [ 2908.027986][T19675] ? __alloc_skb+0xe8/0x500 [ 2908.027994][T19675] ? netlink_sendmsg+0x756/0xc50 [ 2908.028010][T19675] ? ___sys_sendmsg+0x60d/0x910 [ 2908.086201][T19736] FAULT_INJECTION: forcing a failure. [ 2908.086201][T19736] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.090940][T19675] ? do_syscall_64+0xfe/0x140 [ 2908.090953][T19675] ? rcu_lock_release+0x9/0x30 [ 2908.090963][T19675] ? rcu_lock_release+0x9/0x30 [ 2908.090973][T19675] ? trace_lock_release+0x135/0x1a0 [ 2908.090985][T19675] ? rcu_lock_release+0x9/0x30 [ 2908.132483][T19675] netlink_rcv_skb+0x19e/0x3d0 [ 2908.137250][T19675] ? rtnetlink_bind+0x80/0x80 [ 2908.141913][T19675] rtnetlink_rcv+0x1c/0x20 [ 2908.146321][T19675] netlink_unicast+0x787/0x900 [ 2908.151073][T19675] netlink_sendmsg+0x993/0xc50 [ 2908.155841][T19675] ? netlink_getsockopt+0x9f0/0x9f0 [ 2908.161032][T19675] ___sys_sendmsg+0x60d/0x910 [ 2908.165703][T19675] ? rcu_lock_release+0xd/0x30 [ 2908.170471][T19675] ? rcu_lock_release+0x26/0x30 [ 2908.175305][T19675] ? __fget+0x4e6/0x510 [ 2908.179452][T19675] ? __fdget+0x17c/0x200 [ 2908.183680][T19675] __x64_sys_sendmsg+0x17c/0x200 [ 2908.188610][T19675] do_syscall_64+0xfe/0x140 [ 2908.193100][T19675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2908.198974][T19675] RIP: 0033:0x4598e9 [ 2908.202850][T19675] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2908.222618][T19675] RSP: 002b:00007fdb1a1e6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2908.231113][T19675] RAX: ffffffffffffffda RBX: 00007fdb1a1e6c90 RCX: 00000000004598e9 [ 2908.239077][T19675] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 2908.247043][T19675] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2908.255004][T19675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb1a1e76d4 [ 2908.262960][T19675] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000007 [ 2908.271073][T19736] CPU: 1 PID: 19736 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2908.278957][T19736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2908.289016][T19736] Call Trace: [ 2908.292288][T19736] dump_stack+0x1d8/0x2f8 [ 2908.296685][T19736] should_fail+0x555/0x770 [ 2908.301086][T19736] __should_failslab+0x11a/0x160 [ 2908.306023][T19736] should_failslab+0x9/0x20 [ 2908.310518][T19736] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2908.315785][T19736] ? find_css_set+0xc56/0x19a0 [ 2908.320526][T19736] find_css_set+0xc56/0x19a0 [ 2908.325093][T19736] ? cgroup_attach_task+0x731/0xa10 [ 2908.330962][T19736] cgroup_migrate_prepare_dst+0x11b/0xc20 [ 2908.336655][T19736] cgroup_attach_task+0x73d/0xa10 [ 2908.341706][T19736] __cgroup1_procs_write+0x23d/0x310 [ 2908.346962][T19736] cgroup1_procs_write+0x2a/0x40 [ 2908.351882][T19736] ? cgroup_pidlist_stop+0xe0/0xe0 [ 2908.357049][T19736] cgroup_file_write+0x223/0x5f0 [ 2908.361967][T19736] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2908.367056][T19736] kernfs_fop_write+0x3e4/0x4f0 [ 2908.371880][T19736] ? kernfs_fop_read+0x580/0x580 [ 2908.376790][T19736] __vfs_write+0xb8/0x740 [ 2908.381148][T19736] ? check_preemption_disabled+0x47/0x2a0 [ 2908.386865][T19736] ? __sb_start_write+0x403/0x4c0 [ 2908.391864][T19736] vfs_write+0x275/0x590 [ 2908.396080][T19736] ksys_write+0x117/0x220 [ 2908.400386][T19736] __x64_sys_write+0x7b/0x90 [ 2908.404948][T19736] do_syscall_64+0xfe/0x140 [ 2908.409427][T19736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2908.415324][T19736] RIP: 0033:0x4598e9 [ 2908.419285][T19736] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2908.438861][T19736] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:38:10 executing program 2 (fault-call:6 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 03:38:10 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x600}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) 03:38:10 executing program 5 (fault-call:5 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc2}}}}]}, 0x58}}, 0x0) [ 2908.447250][T19736] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2908.455197][T19736] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 2908.463141][T19736] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2908.471088][T19736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2908.479035][T19736] R13: 00000000004c9a63 R14: 00000000004e1160 R15: 0000000000000005 03:38:10 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 03:38:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) 03:38:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xfffdffffffffffff, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) [ 2908.610279][T19896] FAULT_INJECTION: forcing a failure. [ 2908.610279][T19896] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.629747][T19896] CPU: 1 PID: 19896 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2908.637668][T19896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2908.645310][T19898] FAULT_INJECTION: forcing a failure. [ 2908.645310][T19898] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.647714][T19896] Call Trace: [ 2908.663579][T19896] dump_stack+0x1d8/0x2f8 [ 2908.667906][T19896] should_fail+0x555/0x770 [ 2908.672311][T19896] __should_failslab+0x11a/0x160 [ 2908.677238][T19896] should_failslab+0x9/0x20 [ 2908.681724][T19896] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2908.686987][T19896] ? find_css_set+0xc56/0x19a0 [ 2908.691733][T19896] find_css_set+0xc56/0x19a0 [ 2908.696316][T19896] ? cgroup_attach_task+0x731/0xa10 [ 2908.701514][T19896] cgroup_migrate_prepare_dst+0x11b/0xc20 [ 2908.707238][T19896] cgroup_attach_task+0x73d/0xa10 [ 2908.712258][T19896] __cgroup1_procs_write+0x23d/0x310 [ 2908.717536][T19896] cgroup1_procs_write+0x2a/0x40 [ 2908.722479][T19896] ? cgroup_pidlist_stop+0xe0/0xe0 [ 2908.727579][T19896] cgroup_file_write+0x223/0x5f0 [ 2908.732508][T19896] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2908.737601][T19896] kernfs_fop_write+0x3e4/0x4f0 [ 2908.742439][T19896] ? kernfs_fop_read+0x580/0x580 [ 2908.747366][T19896] __vfs_write+0xb8/0x740 [ 2908.751680][T19896] ? check_preemption_disabled+0x47/0x2a0 [ 2908.757384][T19896] ? __sb_start_write+0x403/0x4c0 [ 2908.762390][T19896] vfs_write+0x275/0x590 [ 2908.766620][T19896] ksys_write+0x117/0x220 [ 2908.770935][T19896] __x64_sys_write+0x7b/0x90 [ 2908.775506][T19896] do_syscall_64+0xfe/0x140 [ 2908.779993][T19896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2908.785869][T19896] RIP: 0033:0x4598e9 [ 2908.789747][T19896] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2908.809368][T19896] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2908.817764][T19896] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2908.825717][T19896] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 2908.833667][T19896] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2908.841619][T19896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2908.849586][T19896] R13: 00000000004c9a63 R14: 00000000004e1160 R15: 0000000000000005 03:38:10 executing program 2 (fault-call:6 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 2908.857551][T19898] CPU: 0 PID: 19898 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0 [ 2908.865447][T19898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2908.875502][T19898] Call Trace: [ 2908.878799][T19898] dump_stack+0x1d8/0x2f8 [ 2908.883131][T19898] should_fail+0x555/0x770 [ 2908.887550][T19898] __should_failslab+0x11a/0x160 [ 2908.892516][T19898] should_failslab+0x9/0x20 [ 2908.897031][T19898] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2908.902314][T19898] ? tcf_block_get_ext+0x334/0x1d00 03:38:10 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x700}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="85", 0x1}], 0x104, &(0x7f0000000600)=[@init={0x18}], 0x18}], 0x1, 0x0) [ 2908.907512][T19898] ? trace_lock_release+0x135/0x1a0 [ 2908.912713][T19898] tcf_block_get_ext+0x334/0x1d00 [ 2908.917852][T19898] ? memset+0x31/0x40 [ 2908.921834][T19898] tcf_block_get+0xc0/0x130 [ 2908.926339][T19898] ? tcf_block_get+0x130/0x130 [ 2908.931105][T19898] sfb_init+0x34/0xa0 [ 2908.935166][T19898] ? sfb_peek+0x80/0x80 [ 2908.939310][T19898] qdisc_create+0x7e7/0x13e0 [ 2908.943887][T19898] tc_modify_qdisc+0x989/0x1ea0 [ 2908.943903][T19898] ? trace_lock_release+0x135/0x1a0 [ 2908.943916][T19898] ? rcu_lock_release+0x30/0x30 [ 2908.953956][T19898] rtnetlink_rcv_msg+0x889/0xd40 [ 2908.963730][T19898] ? do_syscall_64+0xfe/0x140 [ 2908.968411][T19898] ? __kasan_kmalloc+0x11c/0x1b0 [ 2908.973353][T19898] ? kasan_kmalloc+0x9/0x10 [ 2908.977851][T19898] ? __kmalloc_node_track_caller+0x4d/0x60 [ 2908.983644][T19898] ? __alloc_skb+0xe8/0x500 [ 2908.988127][T19898] ? netlink_sendmsg+0x756/0xc50 [ 2908.993039][T19898] ? ___sys_sendmsg+0x60d/0x910 [ 2908.997864][T19898] ? do_syscall_64+0xfe/0x140 [ 2909.002513][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.007261][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.012532][T19898] ? trace_lock_release+0x135/0x1a0 [ 2909.017711][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.022483][T19898] netlink_rcv_skb+0x19e/0x3d0 [ 2909.027261][T19898] ? rtnetlink_bind+0x80/0x80 [ 2909.031946][T19898] rtnetlink_rcv+0x1c/0x20 [ 2909.036361][T19898] netlink_unicast+0x787/0x900 [ 2909.041116][T19898] netlink_sendmsg+0x993/0xc50 [ 2909.045878][T19898] ? netlink_getsockopt+0x9f0/0x9f0 [ 2909.051075][T19898] ___sys_sendmsg+0x60d/0x910 [ 2909.055748][T19898] ? rcu_lock_release+0xd/0x30 [ 2909.060498][T19898] ? rcu_lock_release+0x26/0x30 [ 2909.065322][T19898] ? __fget+0x4e6/0x510 [ 2909.069455][T19898] ? __fdget+0x17c/0x200 [ 2909.073675][T19898] __x64_sys_sendmsg+0x17c/0x200 [ 2909.078591][T19898] do_syscall_64+0xfe/0x140 [ 2909.083081][T19898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2909.088956][T19898] RIP: 0033:0x4598e9 [ 2909.092829][T19898] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2909.112417][T19898] RSP: 002b:00007fdb1a1e6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2909.120838][T19898] RAX: ffffffffffffffda RBX: 00007fdb1a1e6c90 RCX: 00000000004598e9 [ 2909.128801][T19898] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 2909.136756][T19898] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2909.144798][T19898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb1a1e76d4 [ 2909.152761][T19898] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000007 [ 2909.172403][T19898] kasan: CONFIG_KASAN_INLINE enabled [ 2909.183578][T19898] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2909.199657][T19898] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2909.201704][T20134] FAULT_INJECTION: forcing a failure. [ 2909.201704][T20134] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.206621][T19898] CPU: 0 PID: 19898 Comm: syz-executor.5 Not tainted 5.3.0-rc8+ #0 [ 2909.206626][T19898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2909.206641][T19898] RIP: 0010:qdisc_put+0x24/0x90 [ 2909.206649][T19898] Code: 84 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 d1 6e 7a fb 49 8d 5e 10 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 75 40 8b 1b 89 de 83 e6 01 31 ff e8 47 72 7a fb 83 [ 2909.206654][T19898] RSP: 0018:ffff8880542a75b8 EFLAGS: 00010202 [ 2909.206660][T19898] RAX: 0000000000000002 RBX: 0000000000000010 RCX: dffffc0000000000 [ 2909.206665][T19898] RDX: ffffc900109ca000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2909.206670][T19898] RBP: ffff8880542a75c8 R08: dffffc0000000000 R09: ffff8880542a7598 [ 2909.206674][T19898] R10: ffffed100a854eb7 R11: 0000000000000000 R12: 00000000fffffff4 [ 2909.206679][T19898] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2909.206686][T19898] FS: 00007fdb1a1e7700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 2909.206692][T19898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2909.206697][T19898] CR2: 000000000151ae80 CR3: 0000000090412000 CR4: 00000000001406f0 [ 2909.206706][T19898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2909.206710][T19898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2909.206714][T19898] Call Trace: [ 2909.206725][T19898] sfb_destroy+0x65/0x70 [ 2909.206733][T19898] ? sfb_reset+0x180/0x180 [ 2909.206742][T19898] qdisc_create+0xff8/0x13e0 [ 2909.206757][T19898] tc_modify_qdisc+0x989/0x1ea0 [ 2909.206778][T19898] ? trace_lock_release+0x135/0x1a0 [ 2909.222476][T20134] CPU: 1 PID: 20134 Comm: syz-executor.2 Not tainted 5.3.0-rc8+ #0 [ 2909.227231][T19898] ? rcu_lock_release+0x30/0x30 [ 2909.237275][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2909.242103][T19898] rtnetlink_rcv_msg+0x889/0xd40 [ 2909.261674][T20134] Call Trace: [ 2909.267719][T19898] ? do_syscall_64+0xfe/0x140 [ 2909.275663][T20134] dump_stack+0x1d8/0x2f8 [ 2909.283607][T19898] ? __kasan_kmalloc+0x11c/0x1b0 [ 2909.291568][T20134] should_fail+0x555/0x770 [ 2909.299522][T19898] ? kasan_kmalloc+0x9/0x10 [ 2909.307475][T20134] __should_failslab+0x11a/0x160 [ 2909.316411][T19898] ? __kmalloc_node_track_caller+0x4d/0x60 [ 2909.322992][T20134] should_failslab+0x9/0x20 [ 2909.330944][T19898] ? __alloc_skb+0xe8/0x500 [ 2909.338890][T20134] kmem_cache_alloc_trace+0x5d/0x2f0 [ 2909.346837][T19898] ? netlink_sendmsg+0x756/0xc50 [ 2909.350093][T20134] ? find_css_set+0xc56/0x19a0 [ 2909.354302][T19898] ? ___sys_sendmsg+0x60d/0x910 [ 2909.358685][T20134] find_css_set+0xc56/0x19a0 [ 2909.363245][T19898] ? do_syscall_64+0xfe/0x140 [ 2909.368069][T20134] ? cgroup_attach_task+0x731/0xa10 [ 2909.373232][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.381099][T20134] cgroup_migrate_prepare_dst+0x11b/0xc20 [ 2909.385917][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.395957][T20134] cgroup_attach_task+0x73d/0xa10 [ 2909.400863][T19898] ? trace_lock_release+0x135/0x1a0 [ 2909.404121][T20134] __cgroup1_procs_write+0x23d/0x310 [ 2909.408765][T19898] ? rcu_lock_release+0x9/0x30 [ 2909.413061][T20134] cgroup1_procs_write+0x2a/0x40 [ 2909.417972][T19898] netlink_rcv_skb+0x19e/0x3d0 [ 2909.422353][T20134] ? cgroup_pidlist_stop+0xe0/0xe0 [ 2909.426826][T19898] ? rtnetlink_bind+0x80/0x80 [ 2909.431743][T20134] cgroup_file_write+0x223/0x5f0 [ 2909.437517][T19898] rtnetlink_rcv+0x1c/0x20 [ 2909.441986][T20134] ? cgroup_seqfile_stop+0xc0/0xc0 [ 2909.446459][T19898] netlink_unicast+0x787/0x900 [ 2909.451709][T20134] kernfs_fop_write+0x3e4/0x4f0 [ 2909.456615][T19898] netlink_sendmsg+0x993/0xc50 [ 2909.461345][T20134] ? kernfs_fop_read+0x580/0x580 [ 2909.466167][T19898] ? netlink_getsockopt+0x9f0/0x9f0 [ 2909.470727][T20134] __vfs_write+0xb8/0x740 [ 2909.475368][T19898] ___sys_sendmsg+0x60d/0x910 [ 2909.480531][T20134] ? check_preemption_disabled+0x47/0x2a0 [ 2909.485270][T19898] ? rcu_lock_release+0xd/0x30 [ 2909.490958][T20134] ? __sb_start_write+0x403/0x4c0 [ 2909.495703][T19898] ? rcu_lock_release+0x26/0x30 [ 2909.500695][T20134] vfs_write+0x275/0x590 [ 2909.505859][T19898] ? __fget+0x4e6/0x510 [ 2909.511110][T20134] ksys_write+0x117/0x220 [ 2909.515843][T19898] ? __fdget+0x17c/0x200 [ 2909.520748][T20134] __x64_sys_write+0x7b/0x90 03:38:11 executing program 2 (fault-call:6 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 2909.525479][T19898] __x64_sys_sendmsg+0x17c/0x200 [ 2909.530558][T20134] do_syscall_64+0xfe/0x140 [ 2909.535212][T19898] do_syscall_64+0xfe/0x140 [ 2909.540112][T20134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2909.544510][T19898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2909.549589][T20134] RIP: 0033:0x4598e9 [ 2909.554318][T19898] RIP: 0033:0x4598e9 [ 2909.559149][T20134] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2909.563881][T19898] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2909.568785][T20134] RSP: 002b:00007ff6d942bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2909.573953][T19898] RSP: 002b:00007fdb1a1e6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2909.578260][T20134] RAX: ffffffffffffffda RBX: 00007ff6d942bc90 RCX: 00000000004598e9 [ 2909.582903][T19898] RAX: ffffffffffffffda RBX: 00007fdb1a1e6c90 RCX: 00000000004598e9 [ 2909.588584][T20134] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000004 [ 2909.588592][T20134] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2909.593324][T19898] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 2909.598314][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6d942c6d4 [ 2909.603127][T19898] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:38:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2909.603134][T19898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb1a1e76d4 [ 2909.607354][T20134] R13: 00000000004c9a63 R14: 00000000004e1160 R15: 0000000000000005 [ 2909.611483][T19898] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000007 [ 2909.793874][T19898] Modules linked in: [ 2909.804577][ T3906] kobject: 'loop2' (0000000036a5ee73): kobject_uevent_env [ 2909.812995][ T3906] kobject: 'loop2' (0000000036a5ee73): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:38:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x1000000000000003, &(0x7f00000000c0)=0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x48040) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, r0, 0x0, 0x12f, 0x1f00}]) 03:38:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @vbi}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x568e, 0x1, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}}) [ 2909.819277][T19898] ---[ end trace aea483c68ffaa324 ]--- 03:38:11 executing program 0: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x6, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) [ 2909.851304][ T3906] kobject: 'loop0' (00000000be7baf40): kobject_uevent_env [ 2909.856790][T19898] RIP: 0010:qdisc_put+0x24/0x90 [ 2909.860412][ T3906] kobject: 'loop0' (00000000be7baf40): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2909.867699][T19898] Code: 84 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 d1 6e 7a fb 49 8d 5e 10 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <8a> 04 08 84 c0 75 40 8b 1b 89 de 83 e6 01 31 ff e8 47 72 7a fb 83 [ 2909.882149][ T3906] kobject: 'loop1' (00000000064e7467): kobject_uevent_env 03:38:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) set_mempolicy(0x1, &(0x7f0000000380)=0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 2909.918510][ T3906] kobject: 'loop1' (00000000064e7467): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2909.938393][ T3906] kobject: 'loop4' (000000009194815a): kobject_uevent_env [ 2909.939122][T19898] RSP: 0018:ffff8880542a75b8 EFLAGS: 00010202 [ 2909.947911][ T3906] kobject: 'loop4' (000000009194815a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2909.952139][T19898] RAX: 0000000000000002 RBX: 0000000000000010 RCX: dffffc0000000000 [ 2909.977617][ T3906] kobject: 'loop2' (0000000036a5ee73): kobject_uevent_env [ 2909.998467][ T3906] kobject: 'loop2' (0000000036a5ee73): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2910.031741][T19898] RDX: ffffc900109ca000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2910.048655][T19898] RBP: ffff8880542a75c8 R08: dffffc0000000000 R09: ffff8880542a7598 [ 2910.057841][T19898] R10: ffffed100a854eb7 R11: 0000000000000000 R12: 00000000fffffff4 [ 2910.069362][T19898] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 2910.078907][T19898] FS: 00007fdb1a1e7700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 2910.089649][T19898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2910.091792][ T3906] kobject: 'loop2' (0000000036a5ee73): kobject_uevent_env [ 2910.097058][T19898] CR2: 00007fca567cd000 CR3: 0000000090412000 CR4: 00000000001406e0 [ 2910.103936][ T3906] kobject: 'loop2' (0000000036a5ee73): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2910.112911][T19898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2910.129832][T19898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2910.137866][T19898] Kernel panic - not syncing: Fatal exception [ 2910.145526][T19898] Kernel Offset: disabled [ 2910.149862][T19898] Rebooting in 86400 seconds..