0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:12:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x208e24b) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:53 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x8, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x54fa, &(0x7f0000000200)={0x0, 0x8efc, 0x800, 0x1, 0x20f}, &(0x7f0000000000)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r6, r3, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r4, 0x0, 0x0, 0x1}) 22:12:53 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2000000, 0x1e100) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000200)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000003c0)) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4884, 0x2, 0x0, 0x395}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4884, 0x2, 0x0, 0x395}, &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000004c0)=""/210, 0xd2) 22:12:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:12:53 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) fcntl$dupfd(r0, 0x0, r2) (async) r4 = fcntl$dupfd(r0, 0x0, r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x8, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x54fa, &(0x7f0000000200)={0x0, 0x8efc, 0x800, 0x1, 0x20f}, &(0x7f0000000000)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r6, r3, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r4, 0x0, 0x0, 0x1}) 22:12:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7102000000000000008f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000200)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000003c0)) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4884, 0x2, 0x0, 0x395}, &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r1, &(0x7f00000004c0)=""/210, 0xd2) 22:12:53 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2000000, 0x1e100) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7102000000000000008f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7102000000000000008f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:12:53 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r4 = fcntl$dupfd(r0, 0x0, r2) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x8, 0x0, 0x0) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) syz_io_uring_setup(0x54fa, &(0x7f0000000200)={0x0, 0x8efc, 0x800, 0x1, 0x20f}, &(0x7f0000000000)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r6, r3, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r4, 0x0, 0x0, 0x1}) 22:12:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x4022010, r4, 0x8000000) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:12:54 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000840), 0x10001, 0x280000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000880)={0x0, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"5768d02aff9dc7e1ededa8a2de3f230a", r2, 0x0, {0x8, 0x3f2}, {0x4, 0xf5}, 0x8, [0x4, 0x8a07, 0x7, 0x0, 0x401, 0xfffffffffffffff7, 0x7, 0x5, 0x8, 0x4c, 0xf17, 0x2, 0x7fffffff, 0x8, 0x1, 0x7]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getpeername$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) getsockname$packet(r7, &(0x7f0000000380), &(0x7f00000004c0)=0x14) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x4022010, r4, 0x8000000) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4801, 0x104) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7102000000000000008f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:54 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000840), 0x10001, 0x280000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000880)={0x0, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"5768d02aff9dc7e1ededa8a2de3f230a", r2, 0x0, {0x8, 0x3f2}, {0x4, 0xf5}, 0x8, [0x4, 0x8a07, 0x7, 0x0, 0x401, 0xfffffffffffffff7, 0x7, 0x5, 0x8, 0x4c, 0xf17, 0x2, 0x7fffffff, 0x8, 0x1, 0x7]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"5768d02aff9dc7e1ededa8a2de3f230a", r2, 0x0, {0x8, 0x3f2}, {0x4, 0xf5}, 0x8, [0x4, 0x8a07, 0x7, 0x0, 0x401, 0xfffffffffffffff7, 0x7, 0x5, 0x8, 0x4c, 0xf17, 0x2, 0x7fffffff, 0x8, 0x1, 0x7]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getpeername$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) getsockname$packet(r7, &(0x7f0000000380), &(0x7f00000004c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000380), &(0x7f00000004c0)=0x14) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4801, 0x104) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x8) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x4022010, r4, 0x8000000) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:54 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4801, 0x104) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4801, 0x104) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000200)=0x8) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:12:54 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000840), 0x10001, 0x280000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000880)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000880)={0x0, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"5768d02aff9dc7e1ededa8a2de3f230a", r2, 0x0, {0x8, 0x3f2}, {0x4, 0xf5}, 0x8, [0x4, 0x8a07, 0x7, 0x0, 0x401, 0xfffffffffffffff7, 0x7, 0x5, 0x8, 0x4c, 0xf17, 0x2, 0x7fffffff, 0x8, 0x1, 0x7]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"5768d02aff9dc7e1ededa8a2de3f230a", r2, 0x0, {0x8, 0x3f2}, {0x4, 0xf5}, 0x8, [0x4, 0x8a07, 0x7, 0x0, 0x401, 0xfffffffffffffff7, 0x7, 0x5, 0x8, 0x4c, 0xf17, 0x2, 0x7fffffff, 0x8, 0x1, 0x7]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getpeername$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) getsockname$packet(r7, &(0x7f0000000380), &(0x7f00000004c0)=0x14) (async) getsockname$packet(r7, &(0x7f0000000380), &(0x7f00000004c0)=0x14) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:12:55 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:12:55 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x425b, 0x0, 0x3, 0x1, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8}}) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '&/'}], 0xa, "f129f5fc6e9821c1283f466624fd108a6a4391f82af22ad22177c5264ea999633fe4ed1db6cf8b341bba07d43a0c3b9e015704bbd6edb66e670efac208d28919d3b6703e77cc37d332c685fb935555908d39b55f11960b6a05e09b8d1e"}, 0xa1) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:55 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000eafbf8c8008df6e474395f3109d36b0100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4008010}, 0x10884) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003040)='/proc/vmstat\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="583f390504836d0f39c751a4433b358f44117615173c5c04bbd389425f9d9c8343b05c52dd48d4a9236fb4f068b4f18452560b8406c548c18a774a9cd46eea0638bb16b394e2656bcb0501a6fc69da1148d516ee0c67cd7b33b070ec47e5be733651a3fa548dbece1d297739e3f0b48ff01a95e804a98503557185c74ece8e8f277f9f8e24108b206aec9df5f1c343a7771a6b495b59ad65d9c7a4dfa6002209cd20b22d7283b50a426b8030d80963397b48b44bc6eb77d9354977fbd3b77b24b0321858efa2d94f4f9ed5e60e936f1f24b33cbd13579b5cd57931c2d376f1c62385e8f6ccb5141b2569250356f7326c99", 0xf1}, {&(0x7f0000000640)="728f7eaf679fab7f480af0ff35e2b8effa0b2ce0bd2fd0275c2b5954cd934de2f50b9d3e1ed20ab6002c9c5d2f303dae0df7108279c2133333d40aa0c9e81eecc96535b9fe05ea949407794aa4d95a528338da04090625852193bc72be3b65588412a9fc48e6fdd935bc8c82b07fec3bea12c672966f706beba9a3709883ddfcbd770697c30c946c3018c8ff82c3", 0x8e}, {&(0x7f0000000200)="f99f0ca7d306ad1bc6f2b3e81c3082b89859128119d73fcfed07ed59eddca6624fb1badf2a5489eab551b9abcddd552e648fce16752e7cf6a5b7816dcb749d54546dc51e182977d6a6977b659b1d201faee7", 0x52}, {&(0x7f0000000700)="294f0b51e15dc30dae3b35973924c955bab460c51f402523eea314c10a9af995e0cf4d3919389eeee6bff4ea8310588d774952e235c9e8935aaae8c61fe8c4fab40e5fef31b02ea5820ffc48dcbef1604d6e9d7eaf4e783a0e0878afad28e8eaae2c38c22d9ff172e8b505e901757d8f2e87767aa151e95cd81a53a0de5cb1d9dcdec9eb8515b1f84169dbf2", 0x8c}, {&(0x7f00000007c0)="9a8b41146a4cd09427950477461681461fb1d009872de620f4d6ba459121290678fdfd20229d1a568d47059b9abb2984f26fdb1c06cd2a6fffd0c5641e04241883bfd3a8aaff50c270dbe90e30cae46a4f179b6ea928870b4ec832e3ec33acf88eaf116dab34a89c02b37946da57c337a3df77466435befb052a4130aacf518e4b821a124ff858772f560a94e2fc12ec6e3461b482cfec61d7506127c9cb4c0579c5b9d9b0729480533aacaa6bc4b95acf894b01cd07e5fb00ec4a4dc2156e8799e1c3a1", 0xc4}, {&(0x7f0000000340)="636a63966698a4b237232220e48f45d2d36030dbbd8ccbd2910dee04246b2fc6a2e4015b4583996914290f7791677ad634a24bd22580819c8b8200390a224053a8feda367579313fb4ce508b6db0c77c00d1d5a2fc88", 0x56}, {&(0x7f00000008c0)="5952e5a41328f7cf3ee09f207a4b202ff00c91059a6c41f4b1e0cb3e769fc42fa977916ed9788b65d45754d70d1b4c0b165cf490342dafcfafabc5fbd4a36053dbba0345", 0x44}, {&(0x7f0000000940)="0be84b86a9e983f6b98dfbe02a36abb76b9bd80572e6e7fe963d51fb3e38181eda2b87e3da8abd516a668b52081a3c524554d5b959459cdb3d40f71f16053c7aba3f2d7ec6b697e2c134f6bc5f9031e060f5f08f001830e2d2834660f198486c8119200bf93464c3fbb0e8ec14832cd16412a5982da0bc6d07f2d782e604d06af5c204449cc727c46771dd3b3d3da3cdb588a4f545c993f1f78b72615ac730636a8f4c349945684596409060283cd36ef82b0ed67e5237229f023ded0a1dff40b6", 0xc1}], 0x8, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)="0c88417df3ee2983a73e3347f9efdfe69657715fdd05c1d764b4230c1256e97f05acc38b73f83bb6e1a39118ca138a6fb78a1b02c7510244b3a1749f2d0f6bf106186e010b62871eabf1eb01deaed5d42a3a33fc076affc2213de4e92329072b55dc65c93f8d47c98371116bf9639071714663689439cde2136e376958db6786b1fb8cc527564471ab5a51b5c885f30f7dcbfb3c0ddca400ba1c3a7a29", 0x9d}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="24080000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x10}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000e00)="a54f3ced74ca22e23e23ced12e5a826c90bac1244cb0e6c8769abfb811a11db8fdbf0d04c0fab00ac5d02c05f3b5c1329aabd031048bd1e7195ff5a67b4f3ec889396927a6cf6eb056e1c8", 0x4b}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="ff01de55ccb5f9bd5908fef8b8b45274e38548ee566b8adfc22068ef60db30b4763200e8a8b817ef1380863bb3d28c37e9638da72794a837bfc2dda3f90673f1001cc424de0a3b939bca1b5f5eadd7cd627033620b8bbe1761f664dc3247e5e432b058caac45eb76dc74c018a603584144cb6045ebfa3603fb3c10d76da10277338beb6d93313e4584f0805cd8dc5688739d4217bd70090b58b63e07b1939fdb2fb5fdb5d558d287275522", 0xab}, {&(0x7f0000002f40)="ddc59cd642f0005bc0703df5cad563886674af7fb02317dffaae74350f076024db77a01fb54a7c3e", 0x28}, {&(0x7f0000002f80)="60ce1af406ffd1c264c2c7f90cae24a5f325b02f94eaa3793d208cc0cd", 0x1d}], 0x6, &(0x7f0000003080)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r7, r0, r0, r8]}}], 0x28, 0x40040c1}}], 0x3, 0x10040) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r10 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r10, 0x4e07, 0x0, 0x18, 0x0, 0x0) read$dsp(r9, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f0000000000)=0x1) 22:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:12:55 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) 22:12:55 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) (async) setreuid(0x0, r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000800)=0xfffffffe) (async) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000580)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}], 0x78, 0xc020}}], 0x1, 0x4000010) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000eafbf8c8008df6e474395f3109d36b0100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4008010}, 0x10884) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) openat$procfs(0xffffffffffffff9c, &(0x7f0000003040)='/proc/vmstat\x00', 0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003040)='/proc/vmstat\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="583f390504836d0f39c751a4433b358f44117615173c5c04bbd389425f9d9c8343b05c52dd48d4a9236fb4f068b4f18452560b8406c548c18a774a9cd46eea0638bb16b394e2656bcb0501a6fc69da1148d516ee0c67cd7b33b070ec47e5be733651a3fa548dbece1d297739e3f0b48ff01a95e804a98503557185c74ece8e8f277f9f8e24108b206aec9df5f1c343a7771a6b495b59ad65d9c7a4dfa6002209cd20b22d7283b50a426b8030d80963397b48b44bc6eb77d9354977fbd3b77b24b0321858efa2d94f4f9ed5e60e936f1f24b33cbd13579b5cd57931c2d376f1c62385e8f6ccb5141b2569250356f7326c99", 0xf1}, {&(0x7f0000000640)="728f7eaf679fab7f480af0ff35e2b8effa0b2ce0bd2fd0275c2b5954cd934de2f50b9d3e1ed20ab6002c9c5d2f303dae0df7108279c2133333d40aa0c9e81eecc96535b9fe05ea949407794aa4d95a528338da04090625852193bc72be3b65588412a9fc48e6fdd935bc8c82b07fec3bea12c672966f706beba9a3709883ddfcbd770697c30c946c3018c8ff82c3", 0x8e}, {&(0x7f0000000200)="f99f0ca7d306ad1bc6f2b3e81c3082b89859128119d73fcfed07ed59eddca6624fb1badf2a5489eab551b9abcddd552e648fce16752e7cf6a5b7816dcb749d54546dc51e182977d6a6977b659b1d201faee7", 0x52}, {&(0x7f0000000700)="294f0b51e15dc30dae3b35973924c955bab460c51f402523eea314c10a9af995e0cf4d3919389eeee6bff4ea8310588d774952e235c9e8935aaae8c61fe8c4fab40e5fef31b02ea5820ffc48dcbef1604d6e9d7eaf4e783a0e0878afad28e8eaae2c38c22d9ff172e8b505e901757d8f2e87767aa151e95cd81a53a0de5cb1d9dcdec9eb8515b1f84169dbf2", 0x8c}, {&(0x7f00000007c0)="9a8b41146a4cd09427950477461681461fb1d009872de620f4d6ba459121290678fdfd20229d1a568d47059b9abb2984f26fdb1c06cd2a6fffd0c5641e04241883bfd3a8aaff50c270dbe90e30cae46a4f179b6ea928870b4ec832e3ec33acf88eaf116dab34a89c02b37946da57c337a3df77466435befb052a4130aacf518e4b821a124ff858772f560a94e2fc12ec6e3461b482cfec61d7506127c9cb4c0579c5b9d9b0729480533aacaa6bc4b95acf894b01cd07e5fb00ec4a4dc2156e8799e1c3a1", 0xc4}, {&(0x7f0000000340)="636a63966698a4b237232220e48f45d2d36030dbbd8ccbd2910dee04246b2fc6a2e4015b4583996914290f7791677ad634a24bd22580819c8b8200390a224053a8feda367579313fb4ce508b6db0c77c00d1d5a2fc88", 0x56}, {&(0x7f00000008c0)="5952e5a41328f7cf3ee09f207a4b202ff00c91059a6c41f4b1e0cb3e769fc42fa977916ed9788b65d45754d70d1b4c0b165cf490342dafcfafabc5fbd4a36053dbba0345", 0x44}, {&(0x7f0000000940)="0be84b86a9e983f6b98dfbe02a36abb76b9bd80572e6e7fe963d51fb3e38181eda2b87e3da8abd516a668b52081a3c524554d5b959459cdb3d40f71f16053c7aba3f2d7ec6b697e2c134f6bc5f9031e060f5f08f001830e2d2834660f198486c8119200bf93464c3fbb0e8ec14832cd16412a5982da0bc6d07f2d782e604d06af5c204449cc727c46771dd3b3d3da3cdb588a4f545c993f1f78b72615ac730636a8f4c349945684596409060283cd36ef82b0ed67e5237229f023ded0a1dff40b6", 0xc1}], 0x8, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)="0c88417df3ee2983a73e3347f9efdfe69657715fdd05c1d764b4230c1256e97f05acc38b73f83bb6e1a39118ca138a6fb78a1b02c7510244b3a1749f2d0f6bf106186e010b62871eabf1eb01deaed5d42a3a33fc076affc2213de4e92329072b55dc65c93f8d47c98371116bf9639071714663689439cde2136e376958db6786b1fb8cc527564471ab5a51b5c885f30f7dcbfb3c0ddca400ba1c3a7a29", 0x9d}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="24080000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x10}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000e00)="a54f3ced74ca22e23e23ced12e5a826c90bac1244cb0e6c8769abfb811a11db8fdbf0d04c0fab00ac5d02c05f3b5c1329aabd031048bd1e7195ff5a67b4f3ec889396927a6cf6eb056e1c8", 0x4b}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="1a0932fd602e6c7856600040b250658d9f7a63ae9ac271e24028a65a4f5303cd45db7dffb3541dc712727f61398ecd39c2524285fc19cf15bcf60efdee3b1ed61f72403dce4bb610a5e4d878e303ac890779a7ff56b28c8b9d654c79ca3668f33797504f530304f25adb826750c8a6a7867d770fbf84827adb1c8ad2ace0792f19821d2245dd0f325d71d26089d3a94af47d5c74d12a9eff8800c973bde9ba15b7c248ce0a7cc6257d85922aaebabe63009ee8df9eb61b92082f78c9a36ffab414b1a14ece5308883bf9400f520164ee6a711ad451d9d4e6ef0e7b2afb341d9d78ba85dfe571e08811dbf0e07f6a3f4cf91f818d159477703218325979fe137e55cbb0cbc54064726607e48c1738a5f7497b17426d231ab36554a8e20a00f6455a3a6956bc4a928b13a72cfbed2f06afb5aaf791c1584964af29b33b802bd130c601f119c496174d37007a5f6c2c6fba5bac974147f82efe04eb9acaf16499349114200753e3d6b241d0f5e83ea771c2eae0121e197c7decc5ea377a6d15e5ff05681d1ca20bb96082898920db46690ed487a4d597ab348b7425ee40a362a2e02316b24c57ba88d80e21db11bf2f35b66154058b794e3faa37f2c02952718bc449099f2876d6021bde1ed6557f9e54b67bba6e55759ec2569956b4c4a780d67733d8c162f75781db732d9d9f8de26d9c05daf62653b255b56fc1552a284903e2ff93c73afc4c8b7cd9e6c132845bf6334be05cd97950973268aad9f9db64d636d8314846204777ccbf1a638cc5bee5781f0d57ada0c132651a555c1197f53ae1854267e1e46caeb3a4b1ff1fbb52e5985c4ad98a02b440c72cf7e87170daac89c38ea9f870b470845f042b4c1b56f238aef5c3bacac5c517dae82b453b4275b69e68e0c67337438f5f454c70083b4fa85147ee1a36722175579187785bfa1c898114c473204ebbda704c9ed1434feba95aca1508ffe445263e5a9ba64727226d4db1a4588f7e409a85b95a10f2f9191141c1195eadf951de3868f18236f8ce6e3898dcb33385d020c76cb73e9851cacbf4904d928d95560adb3ca05a8948f7245f4da801a319d8d33b01ec04e4e6ad0381e77366f018de93ac51b064a17f0f0ae4ec2f2a2d81d8d22ca8b92cfb3f5340a8f2069a1ff52e67da3b455fc1e25b5e32a4ed3d1f804a44410a35db7bd742340106d07d765bdde0cbd70b781ecfd13a640d159ecb6627a7ce1083ffaa15d1f605dbd0161c8a67d6d808e6364c119c4c73184c80055c51d9bf07e3187442f12a6196f9a21ebc9cf3b91380cd9cda6b15a94361b2b14dbf5876d1f0f3a5cbb4773519560c6b4e4dc0c50b179036dc837dbe7ad269ecd69686f63343d94eb9e90d4d60d0bdd50c6b0685bc34c826d7f91e7a5fdebb6a6659d468c289cdc89f07a2f5dd6e745f68114446b6ac5aa03b31ede1a6dda54c156e652bb74e5f8abffe597964d9224fe2c30fc6fb2a3f756faaf70d2010e93df334bdb282a72f03f5358ac45242a5c8efd77229e16d60acd1b787196955fdf1a1d0a19478dbd2412e7e603829ca40ef7535b90696345d257fb941c7c941cdc901d7b6c78d098fd314021c1bc0e78eee62998f51a80a5f64804ca9274e21f05e935727f13c94acf4318abb5acac5ec4137c26b2e1b187b0daf24776dc977dd0fcc6f41a5b8333c1f8273c86082ce6366f115eb505e4261cd52557805df12c6c0dbd3acc4f15732e72815327282359c2eb2ed716e21797f1bc46f87752e2643f4199cca4bd12d3d04757f4b66687a142d8bdcb065ef3be5c7e52889b6ba508ec21b428290e588efa98ce48cb8f7afdc89913badc0c65e9687ac2c4c0b1dbc68a0907d48c9200c1c398e81ecb8267fbee38ed16c26a404dd28d1646e22a106762a98109fdee01f06b2779dab1767fbe29348ababde35d3641a3953deaee12b6d5ac74870baf29a1943d2823a293a3031e5a894840877f1ab0fe21ee7094aeb1410c735c6380ad5059fb7c0f49c2ee840e68cfb3262369b568e4f90bc604707e56c8b7c037663f7945250e3267e3d46ed38ecad3b18b030510bf1bcd7d6762199c98d98e4fcd45eed779f485a53d6f62e5028b2acb4ab27a3448374884abe023af97f8bad78523aedc10deed11e6ed044ff900d55decc9eca17708b298ec71b2b61ede4528256e2e0b07c5d5ea30cc6bcdd0fdb088da875becc2d09a3068a609bb2201831e104a0ac4f71b97aacdcdb92740b960205fee932f432adfb4b96e2e9253d62392faf71cd7d30735a4c901666de3cdd56568a3ac041e3657e51f40c48f802aed6632c955d241993cd4287037b501dd70e6ce5311088eeca905a39246e241a654706b0a7f4a1446de33a4cf0b304e8395ea7a66b82d7563fda5df22bdae1b62d8faa3d09dc850db0c9e62a87f75aa2448299abc11c140c91aaf0bf0a10ee10a374c8214004660e0ed898bd0410fc631de98d0633c36dc34870a874c754c2a84fa4e849571cd5ce3fcf5210aa4372bbebbac891cd489ce6845b9a954bdf116fd1b20d1109be4c8a39ebab5c2a821c77d934b0c4b7b03205f4633db5d28797b1bc9ff9e4da5ce6e25f7b253b268f4ea09286535a83bb70bff92fa8d31fcfab11d6e2d4333beda8737d1363c5aa107401eec8286a9439b2a6ba29149d1fd88120be6e3bde7ae44c266f1d7601d096d933af6f9dc1c21c0950669eebffefa40bcd66a12f78026a9f09da82b7daf707fdf6868ceb0b8dd0c505b38f8441c31b4c1588183fc6ac1df97402564159d4be238c620bc57da22415d8eb5eaa1198e2bfa213ff7434c405ef9646bae521f0f0b88394acecbacc4fe785f6182383d215d8322956f4620cd37a2eb7e59e91b4ade1bddab2db839fe56b668b9f165af517cfeebe611ebf262098800c0399e08283ccbeabe9633e6314b009620f62cdf6f410b55bd5090fb12f4f7a60473933e423af4a5d704b21881ee05b6aa93a28761f0fd94d0bd98e4845c85f90179d79181f60b866b4ae73fd535e339c0cda7ff00cfe5853701f0b4a45b510045d36db59fde85c294c16b19c471156c976a7d69d83b6f16590733d6e118dc3ca137bc69164afa1d06c9f18abf69d4d04251999c31d456030b63b5cd90b01395fff209aa7a157296cdea27986ee015ef2544b4ea1cdc1d163c5375adac63da9a62de6ae8de90096b17fe4a6454df3b926a1f4098f150a1eca9b5c94ae6d94546831641337d7fd1190d0fd5fe4e329b90815d7ca6b96630e4d84f0e45f24f31b2f72ca9e5150b91470580de0dc3a2c292afdc2a4f170947033740ba443c923bee1fbcd66ddf2572e9fe8dc3dd21ff298ea08bc0088a6cbffef45baa23d5eed1f2abdb9e56ce8dbfa94169da7d6e42b4dbb2bace958298f326b74c6b83249de971f486805010d84d78d0435d7bb7d4aa97342120962f1aea5fc2230f00d832970d2efb2ce66eb234978b9eaf6f9ded086f273e69a963c758583a59fdb06536a1a6068ebc3aa371e33285920d0958cb1bb62739c407328c21697a7bd1d5ed314707c68551ce47a0070410187fa76e416a447922cd55298b66638e0f8e610e556ce3bde7bec118c0c91aab5a7ea64747347e4ed72282e84ec8529cf97aa7cde572b10496eac898f23c61a1202920875fdde7ad984638010f2cd13e48dd1e5cbd173e4101eb394a9f3281c1f2ed8f32a4e1ad7047f9f7bb5248185934be8104d4da97d899a71ad6964a6b1cac95988a9c478bf4017affc3bd79a5cb2d5c3c76e653850540c2f6d25e83a1ccfb329cce35241a681165ffa11c3dfad9613e6060bf8aaf1ac75f62d123c0c154744b90feddf941a0c1728ee75c571545247323bc13e619e90ecfebaf7f5dc3a32199c2f658707263be8dcd0a89071a347646b154b9cb618994ff53d5c85eb62ae595a646f29dde7233ff29f9b6c6600b43ef50b04a8e1b7c259be3a023a87d3d8f9a3ddad325bf455773f0957ed3c47e61280f665add24604881ac986ad5864cc491d987e3d4a7f5b970f794a61868c526cdd59461ea30c6088114c80a7a44df88ad31ed984f815d81aadc99fc7bec479b3dd46887fb74b3c18b67679c7b55182f230cc3a0755be555306071178b22aa1ae297e7bc4f3ea8adf69ffb64f47f26993b2fef498903513f9fd9f01951baf2773f6f3f0a1343c73e8f351514062c88ad3e606f8a3e3b3aeacfe9df9112b51cfea8118fc0d0952d3f18310c96f5987f1f91e17670ffa8c4a7945284a29605100ea4ce60dfca74f8f41e9e954801d76d81e20e860f40ff82ba2b2e7ec01820e939e66dd8ee0fbcd99f1a6ddc3e4e51febaa38d4dc8b9b549e5deffab088bd2d72b300f747c893c4df182276278a159568b7a80ca7211046e345fb438b9c450021e9a8f0acefb9b3d5777b8a7abaa288134ce3c270ea66363936dba902e7df8445df9bb875a7c0d690c42c3ad53072746b631852b9cf63a4bd64473a63fef185e92d6f0e2365179e2d01dc952ad893c42c34b79e7b5a3fcd6fed5f79f283632c803a787dd0677ca053c68da6932ab23add006721420a7839bb1364a976d3c5f51473e43353a2216c4d1f5a67029fc3f51a29732adc75cd4a6a82eebfe863cc0c5db5c18d7c9f604e9879e66a1085452f0429b72f394ea22866ee3bfbad342eb48abf252ce00be6bb6e22cfc423f817ca524dae54bc22fa08e5c1df1ba2343937661ee6fa123d292b409c18e7f08cc2f0470fe2657e4eefceacbbe9cb07992d5dfad3ccf3a85e39a996d98258c877fff4597b4e171a8ad6ddf3c71717f7e0bb56c70858e86a51a2298ff770dde38abab77ee9bc49ead19b154ecfcd832712785986eb597d008c16682cd82dcde8bb62bdcf06c6ee4c6ee573363d7b26f6b164e6310a8dfdbd1f669f558039e02096d05bb753595102c97c55ba00902c6e52ee2beeba47efa0f955b451718add712c2547e8443f1e3aa86176bf54276ce0b4ca65a443a7efefd060572ad381a40f2f56359f0fb4b5250cd473479619e8002b346da3fb1da8d16d8b161159408d3b0ffdb98870c51dcfc3be94686cbfc9d64e49e7b5d465aa62c675cdf969d2a98bfcbb2a3185354e090cca73a586c4621050dec3db93f5f061259e7e0f96a53e4b250f067c1bbc2ce8b756654c48c06e594b859392c059dcf815586fcf99a5dafcddffa601ffdc347306a640877ef22066a1b82d6b7ee003127e957b2e7146f40d3da7e0102ff8019f10d2f9ad281bb96a2ebb84a777f772dd0521bbebb2c8f6e09839773215ccfde724559fd531293cc8001a163a530bcef9c3a00d19e63b655de1c65a8f060c01be039e131898aceddb62b20e755853638452478e789ce951447379f79a5be223492e9ecf44894d7328725bd670178c851da2ad273ad53dad12b266116e0a1d5fb249a6462a7503b7600005112c6ca419bff1300cb4c3d4c2689a44641028ff421f2f11df50e828ba0c580818e0f212b2ed695b63ed8bf0d5e85680e3ed93c22e3f044e046d4a9252727ad99ac5a1479d37cf73c5871c0de3677115d7e0401416fff21e3d30aeb5480f351466c4e8f9ee729c31e7dca066e2ad2892ff3c4ee35e51014c4237183c4e8d3b9aa2b3dc22a05fd9ba68d23081e3306a2215fff58f11fdb3e3158202c9bfd69bef017f8bfd374f8a4ee496450e0dc783b799fff69cf69f94d9efdde66a6277d53a4d46e9840c8dd46ccbeb466694a83e2081143b469fd169c57dcbf4c2e003a859ab012758a042b0cef44f7d6a6e0af9ce1329ca698f4e99f76728", 0x1000}, {&(0x7f0000002e80)="ff01de55ccb5f9bd5908fef8b8b45274e38548ee566b8adfc22068ef60db30b4763200e8a8b817ef1380863bb3d28c37e9638da72794a837bfc2dda3f90673f1001cc424de0a3b939bca1b5f5eadd7cd627033620b8bbe1761f664dc3247e5e432b058caac45eb76dc74c018a603584144cb6045ebfa3603fb3c10d76da10277338beb6d93313e4584f0805cd8dc5688739d4217bd70090b58b63e07b1939fdb2fb5fdb5d558d287275522", 0xab}, {&(0x7f0000002f40)="ddc59cd642f0005bc0703df5cad563886674af7fb02317dffaae74350f076024db77a01fb54a7c3e", 0x28}, {&(0x7f0000002f80)="60ce1af406ffd1c264c2c7f90cae24a5f325b02f94eaa3793d208cc0cd", 0x1d}], 0x6, &(0x7f0000003080)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r7, r0, r0, r8]}}], 0x28, 0x40040c1}}], 0x3, 0x10040) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r10 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r10, 0x4e07, 0x0, 0x18, 0x0, 0x0) read$dsp(r9, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f0000000000)=0x1) 22:12:55 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340)={0x0, 0x40000, 0x10}, &(0x7f0000000100), &(0x7f0000000200)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x9) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:12:56 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') (rerun: 64) read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) (async) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}], 0x78, 0xc020}}], 0x1, 0x4000010) (async) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000eafbf8c8008df6e474395f3109d36b0100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4008010}, 0x10884) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) (async, rerun: 64) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003040)='/proc/vmstat\x00', 0x0, 0x0) (rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="583f390504836d0f39c751a4433b358f44117615173c5c04bbd389425f9d9c8343b05c52dd48d4a9236fb4f068b4f18452560b8406c548c18a774a9cd46eea0638bb16b394e2656bcb0501a6fc69da1148d516ee0c67cd7b33b070ec47e5be733651a3fa548dbece1d297739e3f0b48ff01a95e804a98503557185c74ece8e8f277f9f8e24108b206aec9df5f1c343a7771a6b495b59ad65d9c7a4dfa6002209cd20b22d7283b50a426b8030d80963397b48b44bc6eb77d9354977fbd3b77b24b0321858efa2d94f4f9ed5e60e936f1f24b33cbd13579b5cd57931c2d376f1c62385e8f6ccb5141b2569250356f7326c99", 0xf1}, {&(0x7f0000000640)="728f7eaf679fab7f480af0ff35e2b8effa0b2ce0bd2fd0275c2b5954cd934de2f50b9d3e1ed20ab6002c9c5d2f303dae0df7108279c2133333d40aa0c9e81eecc96535b9fe05ea949407794aa4d95a528338da04090625852193bc72be3b65588412a9fc48e6fdd935bc8c82b07fec3bea12c672966f706beba9a3709883ddfcbd770697c30c946c3018c8ff82c3", 0x8e}, {&(0x7f0000000200)="f99f0ca7d306ad1bc6f2b3e81c3082b89859128119d73fcfed07ed59eddca6624fb1badf2a5489eab551b9abcddd552e648fce16752e7cf6a5b7816dcb749d54546dc51e182977d6a6977b659b1d201faee7", 0x52}, {&(0x7f0000000700)="294f0b51e15dc30dae3b35973924c955bab460c51f402523eea314c10a9af995e0cf4d3919389eeee6bff4ea8310588d774952e235c9e8935aaae8c61fe8c4fab40e5fef31b02ea5820ffc48dcbef1604d6e9d7eaf4e783a0e0878afad28e8eaae2c38c22d9ff172e8b505e901757d8f2e87767aa151e95cd81a53a0de5cb1d9dcdec9eb8515b1f84169dbf2", 0x8c}, {&(0x7f00000007c0)="9a8b41146a4cd09427950477461681461fb1d009872de620f4d6ba459121290678fdfd20229d1a568d47059b9abb2984f26fdb1c06cd2a6fffd0c5641e04241883bfd3a8aaff50c270dbe90e30cae46a4f179b6ea928870b4ec832e3ec33acf88eaf116dab34a89c02b37946da57c337a3df77466435befb052a4130aacf518e4b821a124ff858772f560a94e2fc12ec6e3461b482cfec61d7506127c9cb4c0579c5b9d9b0729480533aacaa6bc4b95acf894b01cd07e5fb00ec4a4dc2156e8799e1c3a1", 0xc4}, {&(0x7f0000000340)="636a63966698a4b237232220e48f45d2d36030dbbd8ccbd2910dee04246b2fc6a2e4015b4583996914290f7791677ad634a24bd22580819c8b8200390a224053a8feda367579313fb4ce508b6db0c77c00d1d5a2fc88", 0x56}, {&(0x7f00000008c0)="5952e5a41328f7cf3ee09f207a4b202ff00c91059a6c41f4b1e0cb3e769fc42fa977916ed9788b65d45754d70d1b4c0b165cf490342dafcfafabc5fbd4a36053dbba0345", 0x44}, {&(0x7f0000000940)="0be84b86a9e983f6b98dfbe02a36abb76b9bd80572e6e7fe963d51fb3e38181eda2b87e3da8abd516a668b52081a3c524554d5b959459cdb3d40f71f16053c7aba3f2d7ec6b697e2c134f6bc5f9031e060f5f08f001830e2d2834660f198486c8119200bf93464c3fbb0e8ec14832cd16412a5982da0bc6d07f2d782e604d06af5c204449cc727c46771dd3b3d3da3cdb588a4f545c993f1f78b72615ac730636a8f4c349945684596409060283cd36ef82b0ed67e5237229f023ded0a1dff40b6", 0xc1}], 0x8, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)="0c88417df3ee2983a73e3347f9efdfe69657715fdd05c1d764b4230c1256e97f05acc38b73f83bb6e1a39118ca138a6fb78a1b02c7510244b3a1749f2d0f6bf106186e010b62871eabf1eb01deaed5d42a3a33fc076affc2213de4e92329072b55dc65c93f8d47c98371116bf9639071714663689439cde2136e376958db6786b1fb8cc527564471ab5a51b5c885f30f7dcbfb3c0ddca400ba1c3a7a29", 0x9d}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="24080000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x10}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000e00)="a54f3ced74ca22e23e23ced12e5a826c90bac1244cb0e6c8769abfb811a11db8fdbf0d04c0fab00ac5d02c05f3b5c1329aabd031048bd1e7195ff5a67b4f3ec889396927a6cf6eb056e1c8", 0x4b}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="ff01de55ccb5f9bd5908fef8b8b45274e38548ee566b8adfc22068ef60db30b4763200e8a8b817ef1380863bb3d28c37e9638da72794a837bfc2dda3f90673f1001cc424de0a3b939bca1b5f5eadd7cd627033620b8bbe1761f664dc3247e5e432b058caac45eb76dc74c018a603584144cb6045ebfa3603fb3c10d76da10277338beb6d93313e4584f0805cd8dc5688739d4217bd70090b58b63e07b1939fdb2fb5fdb5d558d287275522", 0xab}, {&(0x7f0000002f40)="ddc59cd642f0005bc0703df5cad563886674af7fb02317dffaae74350f076024db77a01fb54a7c3e", 0x28}, {&(0x7f0000002f80)="60ce1af406ffd1c264c2c7f90cae24a5f325b02f94eaa3793d208cc0cd", 0x1d}], 0x6, &(0x7f0000003080)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r7, r0, r0, r8]}}], 0x28, 0x40040c1}}], 0x3, 0x10040) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r10 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r10, 0x4e07, 0x0, 0x18, 0x0, 0x0) (async, rerun: 64) read$dsp(r9, &(0x7f00000003c0)=""/199, 0xc7) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f0000000000)=0x1) 22:12:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) 22:12:56 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000340)={0x0, 0x40000, 0x10}, &(0x7f0000000100), &(0x7f0000000200)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340)={0x0, 0x40000, 0x10}, &(0x7f0000000100), &(0x7f0000000200)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x9) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:56 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) (async) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x425b, 0x0, 0x3, 0x1, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8}}) (async) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '&/'}], 0xa, "f129f5fc6e9821c1283f466624fd108a6a4391f82af22ad22177c5264ea999633fe4ed1db6cf8b341bba07d43a0c3b9e015704bbd6edb66e670efac208d28919d3b6703e77cc37d332c685fb935555908d39b55f11960b6a05e09b8d1e"}, 0xa1) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:56 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x374}, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, 0x0) 22:12:56 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x374}, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2339b860000f00d0660f38802cf26f646565660f71e4930f3026f36e0f01c466b8010000000f01c138e0", 0x2b}], 0x1, 0x40, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) dup3(r4, r0, 0x80000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="c4c2e106af731d0000c4c1fa115d40c74424002318926ac744240208000000c7442406000000000f011c24c4e23901254b530000a5660f38810664650fc76d0066b821008ec8c4e17c29f366ba4100b80001c0feef", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:56 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340)={0x0, 0x40000, 0x10}, &(0x7f0000000100), &(0x7f0000000200)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x9) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:57 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x425b, 0x0, 0x3, 0x1, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8}}) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '&/'}], 0xa, "f129f5fc6e9821c1283f466624fd108a6a4391f82af22ad22177c5264ea999633fe4ed1db6cf8b341bba07d43a0c3b9e015704bbd6edb66e670efac208d28919d3b6703e77cc37d332c685fb935555908d39b55f11960b6a05e09b8d1e"}, 0xa1) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x425b, 0x0, 0x3, 0x1, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x8}}) (async) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/nullb0\x00'}, {0x20, '\x00'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '&/'}], 0xa, "f129f5fc6e9821c1283f466624fd108a6a4391f82af22ad22177c5264ea999633fe4ed1db6cf8b341bba07d43a0c3b9e015704bbd6edb66e670efac208d28919d3b6703e77cc37d332c685fb935555908d39b55f11960b6a05e09b8d1e"}, 0xa1) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)) 22:12:57 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x374}, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2339b860000f00d0660f38802cf26f646565660f71e4930f3026f36e0f01c466b8010000000f01c138e0", 0x2b}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2339b860000f00d0660f38802cf26f646565660f71e4930f3026f36e0f01c466b8010000000f01c138e0", 0x2b}], 0x1, 0x40, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) (async) close(r4) dup3(r4, r0, 0x80000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="c4c2e106af731d0000c4c1fa115d40c74424002318926ac744240208000000c7442406000000000f011c24c4e23901254b530000a5660f38810664650fc76d0066b821008ec8c4e17c29f366ba4100b80001c0feef", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:57 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r4, &(0x7f0000000640)=""/4096, 0x1000) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)) 22:12:57 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0xf4d, &(0x7f0000000200)={0x0, 0xf45c, 0x2000, 0x3, 0x2fb, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:57 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420080, 0x0) read$dsp(r4, &(0x7f00000004c0)=""/245, 0xf5) 22:12:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)) 22:12:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2339b860000f00d0660f38802cf26f646565660f71e4930f3026f36e0f01c466b8010000000f01c138e0", 0x2b}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f2339b860000f00d0660f38802cf26f646565660f71e4930f3026f36e0f01c466b8010000000f01c138e0", 0x2b}], 0x1, 0x40, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) dup3(r4, r0, 0x80000) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="c4c2e106af731d0000c4c1fa115d40c74424002318926ac744240208000000c7442406000000000f011c24c4e23901254b530000a5660f38810664650fc76d0066b821008ec8c4e17c29f366ba4100b80001c0feef", 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:58 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420080, 0x0) read$dsp(r4, &(0x7f00000004c0)=""/245, 0xf5) 22:12:58 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420080, 0x0) read$dsp(r4, &(0x7f00000004c0)=""/245, 0xf5) 22:12:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:12:58 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r4, &(0x7f0000000640)=""/4096, 0x1000) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0xffffff7f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:12:58 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420080, 0x0) read$dsp(r4, &(0x7f00000004c0)=""/245, 0xf5) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x420080, 0x0) (async) read$dsp(r4, &(0x7f00000004c0)=""/245, 0xf5) (async) 22:12:58 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 64) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0xf4d, &(0x7f0000000200)={0x0, 0xf45c, 0x2000, 0x3, 0x2fb, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22:12:58 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x0, 0x5004) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r6}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000eafbf8c8008df6e474395f3109d36b0100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4008010}, 0x10884) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003040)='/proc/vmstat\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="583f390504836d0f39c751a4433b358f44117615173c5c04bbd389425f9d9c8343b05c52dd48d4a9236fb4f068b4f18452560b8406c548c18a774a9cd46eea0638bb16b394e2656bcb0501a6fc69da1148d516ee0c67cd7b33b070ec47e5be733651a3fa548dbece1d297739e3f0b48ff01a95e804a98503557185c74ece8e8f277f9f8e24108b206aec9df5f1c343a7771a6b495b59ad65d9c7a4dfa6002209cd20b22d7283b50a426b8030d80963397b48b44bc6eb77d9354977fbd3b77b24b0321858efa2d94f4f9ed5e60e936f1f24b33cbd13579b5cd57931c2d376f1c62385e8f6ccb5141b2569250356f7326c99", 0xf1}, {&(0x7f0000000640)="728f7eaf679fab7f480af0ff35e2b8effa0b2ce0bd2fd0275c2b5954cd934de2f50b9d3e1ed20ab6002c9c5d2f303dae0df7108279c2133333d40aa0c9e81eecc96535b9fe05ea949407794aa4d95a528338da04090625852193bc72be3b65588412a9fc48e6fdd935bc8c82b07fec3bea12c672966f706beba9a3709883ddfcbd770697c30c946c3018c8ff82c3", 0x8e}, {&(0x7f0000000200)="f99f0ca7d306ad1bc6f2b3e81c3082b89859128119d73fcfed07ed59eddca6624fb1badf2a5489eab551b9abcddd552e648fce16752e7cf6a5b7816dcb749d54546dc51e182977d6a6977b659b1d201faee7", 0x52}, {&(0x7f0000000700)="294f0b51e15dc30dae3b35973924c955bab460c51f402523eea314c10a9af995e0cf4d3919389eeee6bff4ea8310588d774952e235c9e8935aaae8c61fe8c4fab40e5fef31b02ea5820ffc48dcbef1604d6e9d7eaf4e783a0e0878afad28e8eaae2c38c22d9ff172e8b505e901757d8f2e87767aa151e95cd81a53a0de5cb1d9dcdec9eb8515b1f84169dbf2", 0x8c}, {&(0x7f00000007c0)="9a8b41146a4cd09427950477461681461fb1d009872de620f4d6ba459121290678fdfd20229d1a568d47059b9abb2984f26fdb1c06cd2a6fffd0c5641e04241883bfd3a8aaff50c270dbe90e30cae46a4f179b6ea928870b4ec832e3ec33acf88eaf116dab34a89c02b37946da57c337a3df77466435befb052a4130aacf518e4b821a124ff858772f560a94e2fc12ec6e3461b482cfec61d7506127c9cb4c0579c5b9d9b0729480533aacaa6bc4b95acf894b01cd07e5fb00ec4a4dc2156e8799e1c3a1", 0xc4}, {&(0x7f0000000340)="636a63966698a4b237232220e48f45d2d36030dbbd8ccbd2910dee04246b2fc6a2e4015b4583996914290f7791677ad634a24bd22580819c8b8200390a224053a8feda367579313fb4ce508b6db0c77c00d1d5a2fc88", 0x56}, {&(0x7f00000008c0)="5952e5a41328f7cf3ee09f207a4b202ff00c91059a6c41f4b1e0cb3e769fc42fa977916ed9788b65d45754d70d1b4c0b165cf490342dafcfafabc5fbd4a36053dbba0345", 0x44}, {&(0x7f0000000940)="0be84b86a9e983f6b98dfbe02a36abb76b9bd80572e6e7fe963d51fb3e38181eda2b87e3da8abd516a668b52081a3c524554d5b959459cdb3d40f71f16053c7aba3f2d7ec6b697e2c134f6bc5f9031e060f5f08f001830e2d2834660f198486c8119200bf93464c3fbb0e8ec14832cd16412a5982da0bc6d07f2d782e604d06af5c204449cc727c46771dd3b3d3da3cdb588a4f545c993f1f78b72615ac730636a8f4c349945684596409060283cd36ef82b0ed67e5237229f023ded0a1dff40b6", 0xc1}], 0x8, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20, 0x8000}}, {{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b40)="0c88417df3ee2983a73e3347f9efdfe69657715fdd05c1d764b4230c1256e97f05acc38b73f83bb6e1a39118ca138a6fb78a1b02c7510244b3a1749f2d0f6bf106186e010b62871eabf1eb01deaed5d42a3a33fc076affc2213de4e92329072b55dc65c93f8d47c98371116bf9639071714663689439cde2136e376958db6786b1fb8cc527564471ab5a51b5c885f30f7dcbfb3c0ddca400ba1c3a7a29", 0x9d}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="24080000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x10}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000e00)="a54f3ced74ca22e23e23ced12e5a826c90bac1244cb0e6c8769abfb811a11db8fdbf0d04c0fab00ac5d02c05f3b5c1329aabd031048bd1e7195ff5a67b4f3ec889396927a6cf6eb056e1c8", 0x4b}, {&(0x7f0000000e80)="b8a03d5e3695d7c74a6b627075c6a366786caa8f178a776cdb79abf7963661ff0026ccebc69c536461c88ef3b90b659a0739fc5d4739d1c59e7d693a64979bf85ad25b6907315c758e427ee5a34f5f7e6d1c8e8dfe67c97ee35704b4400c550a1ec755eca535663c4c82fa56d44c72aac66fd987f5464f9e6ac2d6bd18c4d724e497c828e12e1723ce852fcebe320c8ff71d596780db5b97dabdfc8a2832ed5e5c18f866c87cd2412eed0130425c16a86b914d51b97c92ba77233d5f9b590a1f8f08e522a2a694c6d31321346b0f4f796ce51a9a631d01263e6e45944e1086796da22fa3e6c3bc2c59fe6f5bed27efea396ae293abc34af3bc94113593a3daf3265e5a6fe8754f0d86d99ac5cb35474d18058bd451c75ec5fd972d389946fbb0a7082f1aae4cfbe5ee50a5118adffde96d0fa79a5150b1584c185a9b5ff165729891111f7e374c4e9166f6f28fcbfec3789d74ba3ea5ee2c9d27c7b2054ec721f68b3e61c61faa6a94a604751b0dd4af2b71c212693432bd46f2f0e5b890c9fea44823ae84322bc4ac0b55db0fb4ebd9ff051e7d9a6b9e07ff564cb4c27ec5375d557fb0f0931a5faab98d90b380cc8394ed40971e91cbebf7318f989a8ba1380b9e6fee9fdb53c8f30d8a14e57387eb01b947b78336bb1b6974e43b8ed8a466c7ce7d62c6a163bedd360584e440451f596d8d4c67eec0468cec33e357c3f9fcd67b9d86946fa0944c6a5ce5c9fd19773fcbae975d5c4071f0c5fc6897fa90cabaa9bf4df99e78458e7432edf0abe81968a4c73c1f6e46acf0b321d2177d95bf1c07bb77cc55dc833f66785041db40a43b22ca7b462507bbfee848bf8efae9b664b5fbab50156d3897ff983c79a8b4408da01a56ec3e8b85e4409d9aab7c0cd5d6f75c88aebd999385d5e6aaf11e2bd138a0a56be856f7c9411546ba72abad45ac5a6e25aff6e12d4a7e3bf00321fc3354ece27d17b912feb7af6dcd9d098beb4bead9e5cc84ce176df28864e50d3667a8e4266435ee7abd8bcacaa2d8bd976b83cae228e59a598aa09942a36d9a689b832035fe3e22393e7bdac12eb6d29ea23851d355c83a2fee348e1d763f6e6b648d24cd5602272a17b88ac9f83ed31ca97f24ee503ef123138411f96878e773fcafd544226bfac5b6b3d30880fe762455bb9847adffdb9aa0ab5f0e0ef90668ce29ff9b663b17499818509c0bf41ccf67029591b3f095328d9499ad13f5d54702bcf08a4d72aedb6ad0c537318374585c48bdbbc8a2e82379d68a522779a9667ae47d92add96015e5ace071469b5690c46349bf24a234a488303808d585716f25e32115adcb9d227e541130413ecb43f3be924ea89dc124a7a4bb2489db71b9b65c0dfc431afe41150a5ed840f5af0cdbafcb93ab9660b226c9e0a5da57c3979770a1487c9484a159e0ed4d042133d1c5f003d025915882e4f7096a74ae8255339079e8f2e794252620c326b802e0a67703fd136c3255ef1d25429eaf6bc6bf1d63c6db7187f90c8c87694d87401c4d3acb2c380bc4ceb9a3edb858edc044967dc249e4af9bbf22278dde4266d1f2033f4ac68530d6dbab9602753665080e940e33b02dee10300722529002450d859f02ac7c3d84eceaf369de02b228dc6c8dc1010ff9da37e994142df75c69a50f6883819ff55e03b5e3544c2531b321dcfbcbe62ec40649aaefa37178f796cf6e28d3dadfcc65c238d6ba7eec4ea9e9f30bd193d8e93ae7294708e84155d006e7468faeb896ab00b392c7ebf008c95e2080447c55377b018e2af43c0f9a1886040943f2dfc7f77275b1ecd71bdd51261e6625b2d381e8dfa457399364d7077e396da11d6a5fb577b5ab9318a8270bc538474e5b2961495bac137be7efe5776c023142e845efc10be183ad26ca0dbb21a9b7d15b002a762dfe0c357daee70ebf5ee6cecf969fade9cbad56b5ab5582d43d579064171d875700f36320cc6d753925b7143321016be033438c344cf97a2c81824ed8f09fa87fb2a1a73de783b19f00c1495949bdf9b5d28a3f743b0655700ddd92821d0531754d4efca5e83025d0f144fd6177e1b49b7b38843d1f8bed6c1771e4c3642d3e139da3a67fb61ed11e424f538e4ea18c220ba31d923a69cf796d612a0d40666f0b16993fa75c37a41fefe4e48d3c79dab0a6175a2c45e52089f529ed64078c929595f406fd085c1b1c6a1124b8007c1eaa034bfbf4b7eeb27937efcaae1aad79b4b8cab5f1f1e91cbad214f71aefd4f8a90ed2dc5c8cca3c3b039aa1e430c18345ad3a639a73cf2eeff36fa8d42c26bccfafe2033ee823959115917647b78886410ff1ce1adc6357637bb45a8e77844fdd471e18a6bf7bd83bf9431adb0f938864edc0cbf581d339967abc4d7b10fb637739558f6095d543f5357e84933ef858b8d8f9171eb7a2d848734d2758074ddc0c21e45171db4e3933640077ae8e66f2e5a29e8b153f6499720c1a1d6000e91a29070682a931defb3eac0450638829d875b61fd015eea40edee2f0e3ca039f6a25ef6ae564d81059801abaca125242c384a04988d224dbb58fb1c803cc306c4fca6b4f72f34cb2460f283ba5fda23b6348f20c343d4a87f49ac0c69d8244c6ae2c4780b6a6f9ba483d3b16904c516bd587d3020fecf7a4504045478c81ab2733f9f799127f78c4f54d5519217b5515056126e8756816f0a1cffeb6afe0a76dff3ceca20a7642e72990aaca1083efc0e0fbf0c206088b37e8db6c3c2b5fcad09f69e89ae695023df5e34e4b184da6872962836ed23e47a394a2db044d1a32ebe223662eaec3733976159f04b13f768fa4ddff85041dde50885feb783399aff94725282ed2d70eb9901bf45af20effa968cccbae43692ce27efcfff55d992081dfaa00f6930c1b44151cbc747200d03415b773ec0fce95fee04ac5181b42f407de3fbd2486a75e1148cc00968c68fa6f80ec6d12ce29111ed1895e7cc9f49e2e5d6eeb109f6ea6190162fcebd4dee9b4d1c4c6862813dd9dda372120a4ccc62c1c7b9e2d2f54d2172e466a32ac930d3dbcc8edfd971bdb94e15f5f7ad222f774c009ad21dd2c57c869d8bfc864ca8e2021b806a293fb5f5ea2fba4a2e4ff58e86aeececd1e93d2c872eb750e205b204e164da44b355a64312ce952f62044736256d94487adba62dc34a934524c05a2b82df11534498b26cb9cf1c9fa9329c3c66cebfb182bc499b78b81a20653432d385e34e6f32454ab48500ad741d602096320a1215b0ed93e70d8b47a83889c91783ab7a418144aaef38c896ae4cd7a4dac40369cc55deb1ccf32444a3cc7aaa9e6ec81dd483ac60bf88454e61ef78d51149987f3efbc00080d5c7d8daedf511d77a3148dbc258d13b5f8e352dfb5d77d53d9c12fabeb0123361ef5f2ec32f60e8ab0bcc52600533087a6e00f6efeddff5c07281860f1e3cd22a30a9a0477745d5abcb215e15e28b44b63299f5c4ba9903d4d6838bd488db6a79cde1234ef366b2d6f3ef0deb915382309b733028fcb8354470ee6b6cbae1f5a7f82027371765a79c37dc2b9f0c3aa04ac3360e333f372a2f41a9320ab8b72505b47bbda7e83e9a4c25cad0220b7fb8193f8becd661e14cca146cfcc892792a12b9e56ef8f7c8933c5a410f49a557cd312b3b8c79ebb87749ca0e652db878424092c8e1b23440af28940bca0e23c3ba42e1dbd7ed677a3f00c15b0b01f487f9c1378afd92cf736bae064353759e8e386095b72eb47ffd2fc21a40a21c840d228d2b458c5e0850c920b4dad3f7980ff0481e30d0d2e27feecc96de14cce5e657854a7769bd6f84c7f49753be68902019eab018664f815a2bbc9a8c2b5500542b6ae5f14743b345d620213ef60d0262b90dfbefeb601b56387a90e6b20338b2c666a73eadf959d09401d340c7ed1a64200badefcd59569eb1a82719f9fe6478c14dd6bfcc4adc114935afbbc271c0aea154b00e9a0d9d66b54929029cc96f3806e6d0906df29876c2b1945920427ee59be8a7d94763403dfe00c0a2cbdaffc32b17d460605cc4173b565b2d52fdd02522116d2262145e70a76dd8559e8657cf3c726d02411c103af0224f209d404cb90cfa6ebba85db365a575c02c044109858bb3a83dffb87d9780cb4c5bc1e6c76345eb13c9826402e324dc9a7120b2a96503149cb20d5b7d70dea6da7b61b12da57e9cd3bc56d28280de5073d64f7e792105d1b39b065b5168c46cf5764e74263ba3a99003fca4cb988372331bfda62f35c4985d1aa31ad0f4013446f346c736312d34779e1e9bc95fa11693595fd619fc9e50b55e27349f3c4a7cd9852fec79b93ef3e7cc8486e3dff61fc93b805b4d3b286f45e35d8d74504db92836fe3e1ce178a26a00b96abaddbb33900fc5db24648d8418df006ed8e7da35ecec41c815a01dee5dd2a39f93fe368cff9d380ba5052ae68d1aca5a42e8bccd38b8879a061fd87bfe59e8a2fd5cf5148f3bf92fc976cbb6dfddb4a02656920fc6cf65a9a8d6b6b6ff34b7db60f4d14ad9a1897a6f19b3d8a3f58bc6a4a20bc8d8548f547653b7e4f064af74c5bc71aff1d57d66492766a627c14f2645fe3ed4a3d75bedfca1819b98e24f7658813aeeada782d28148c8deff2c61f4f584c9484d171395b61f8dd2d93ded958abfc098126bb03cad8dc677abd14b8e109154486a41c1f00633d75e791b9db89ebae8d508f4da2040a51414f52f1037ccc9f0175ecf4882bdf639144f214368e3accade9fda3a26e0e3581fd1080a033b4eef9e8457ecd04f54703b63d628670d8a9ff14fd6eaa630d6ede4ae1a2d7fa0dd33e648b20f08ba4669eaf5272867b10821e5dfd571e6d20cf6b90c5c4c7119c00e997dbf8e6805556f6380274104de146762a282aa657cc3fe8b275f918bf2ac4b3c783c9f699f912b10fb1619da374c0fe41e76dae713b2c614e73180cfafc5dec0d08f25ca1f4611d551c01ef28bfb63ff00a8186563885539d988aacd1dd95c774a6f9e5a35c733dc98818064e81a5153c97dd9bcfab9341a94e6896b066966ab03742cedd21c2a9a2402b3de1efef1c81eb9b04b110c059ae97f76ff216317ee4b5779006be44eb428e1d3dbc0503c33334c6567c8829e862ee24c145cf4e101c1e6a170681e27cfadff93d362dc5572f7e42e06dcddb525899b1ab7a3580769866fc3646f6fdac5b12291015fa6fcfd21c91d4c33e2a5afce42b4acb7feb15a1cce039ec84aaf50b9c5c6f75ec503ae99338ab2cc92d97842909619eca84a444ee44ab0058ab24c6dcaef257a39393ac9b048447eca77b83bc5705cc2f409489c9600d0f6fc2ec47edfd47e2ca4ea6e0cc9beef30dafcf1a3166045592e0b3abe7651c13c2a4f447e81641bb1ff243628d3e9fd63e99fe7d224483506f3e339b848c25010a29e248f445b5f278809687070da660548c2426b632909cc4dd3a5af7a97bceca2979e8d38f5cf805c41c585de2a0a5924b34dd08ae6c96089a8895a46d22b87466577c41c77c6d42d8cf37d82234f0e2e85d3a0f98db474b714bfb4c9d4243aa43c3e312753a9728c2d005e609004097384cff4c16a6dcb5fbe5bbc6a5bdb426cf6f4d111aba84982dd512456e4f482205a8068c3d8f2463e6397f68613ca173cce3d4e6b0793947ca99a2b299a8b86e36f60568b4a9ff2ae1f71fcc8b9028ad8b56cef543d2154f4d9d91e1e8cd2ededa53b20bb40ee4e2b3e581d9b31c444904e8d28e41b4e59b080adbd58dbce952aa566a4001d66b80d2b9c72c83d898e9efa9b0debfe8f7", 0x1000}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="ff01de55ccb5f9bd5908fef8b8b45274e38548ee566b8adfc22068ef60db30b4763200e8a8b817ef1380863bb3d28c37e9638da72794a837bfc2dda3f90673f1001cc424de0a3b939bca1b5f5eadd7cd627033620b8bbe1761f664dc3247e5e432b058caac45eb76dc74c018a603584144cb6045ebfa3603fb3c10d76da10277338beb6d93313e4584f0805cd8dc5688739d4217bd70090b58b63e07b1939fdb2fb5fdb5d558d287275522", 0xab}, {&(0x7f0000002f40)="ddc59cd642f0005bc0703df5cad563886674af7fb02317dffaae74350f076024db77a01fb54a7c3e", 0x28}, {&(0x7f0000002f80)="60ce1af406ffd1c264c2c7f90cae24a5f325b02f94eaa3793d208cc0cd", 0x1d}], 0x6, &(0x7f0000003080)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r7, r0, r0, r8]}}], 0x28, 0x40040c1}}], 0x3, 0x10040) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r10 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r10, 0x4e07, 0x0, 0x18, 0x0, 0x0) read$dsp(r9, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f0000000000)=0x1) 22:12:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:58 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x20, 0x7ff, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0x81, 0x4, 0x0, @local, @remote, {[@end, @lsrr={0x83, 0x13, 0x7b, [@rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @timestamp={0x44, 0xc, 0xa9, 0x0, 0x5, [0x3, 0xff]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xfff3, 0x10}, {0x10, 0xa}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000540)=""/134, 0x86) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:12:59 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:59 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) read$dsp(r4, &(0x7f0000000640)=""/4096, 0x1000) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0xffffff7f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:59 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 32) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0xf4d, &(0x7f0000000200)={0x0, 0xf45c, 0x2000, 0x3, 0x2fb, 0x0, r4}, &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:12:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:12:59 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x1478, &(0x7f00000004c0)={0x0, 0x9d2c, 0x400, 0x0, 0x2ca, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x5122, &(0x7f0000000200)={0x0, 0x4abc, 0x200, 0x2, 0xf6, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) 22:12:59 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:12:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async, rerun: 32) r2 = dup(r1) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0xffffff7f}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) 22:13:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x20, 0x7ff, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0x81, 0x4, 0x0, @local, @remote, {[@end, @lsrr={0x83, 0x13, 0x7b, [@rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @timestamp={0x44, 0xc, 0xa9, 0x0, 0x5, [0x3, 0xff]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xfff3, 0x10}, {0x10, 0xa}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) (async) read$dsp(r3, &(0x7f0000000540)=""/134, 0x86) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:13:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:00 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x1478, &(0x7f00000004c0)={0x0, 0x9d2c, 0x400, 0x0, 0x2ca, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x5122, &(0x7f0000000200)={0x0, 0x4abc, 0x200, 0x2, 0xf6, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) syz_io_uring_setup(0x1478, &(0x7f00000004c0)={0x0, 0x9d2c, 0x400, 0x0, 0x2ca, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000580)) (async) syz_io_uring_setup(0x5122, &(0x7f0000000200)={0x0, 0x4abc, 0x200, 0x2, 0xf6, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) (async) 22:13:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f0fa5c08b0e200345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x1000, 0x5}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) 22:13:00 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fallocate(r0, 0x4d, 0x7, 0xff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000004c0)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000000), 0xa624, 0x42e40) r7 = openat(r6, &(0x7f0000000540)='./file0\x00', 0x0, 0x1) r8 = memfd_create(&(0x7f0000000580)='/dev/adsp1\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r12 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000340)=ANY=[], 0x208e24b) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r15, r14, &(0x7f0000000000)=0xc876, 0x400) setsockopt$inet_mreqn(r14, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @local}, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r13}}) syz_io_uring_submit(r10, r5, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x18, 0x0, r6, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r13}}) 22:13:00 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000200)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f00000003c0)) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x4884, 0x2, 0x0, 0x395}, &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000004c0)=""/210, 0xd2) 22:13:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x20, 0x7ff, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x65, 0x0, 0x81, 0x4, 0x0, @local, @remote, {[@end, @lsrr={0x83, 0x13, 0x7b, [@rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @timestamp={0x44, 0xc, 0xa9, 0x0, 0x5, [0x3, 0xff]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0x3}, {0xfff3, 0x10}, {0x10, 0xa}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000540)=""/134, 0x86) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r3, &(0x7f00000003c0)=""/199, 0xc7) 22:13:00 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x1478, &(0x7f00000004c0)={0x0, 0x9d2c, 0x400, 0x0, 0x2ca, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000580)) syz_io_uring_setup(0x5122, &(0x7f0000000200)={0x0, 0x4abc, 0x200, 0x2, 0xf6, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) 22:13:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f0fa5c08b0e200345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x1000, 0x5}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) 22:13:01 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000340)={[0x8001]}, 0x8, 0x800) r2 = syz_io_uring_setup(0x6a10, &(0x7f0000000080)={0x0, 0x6152, 0x800, 0x2004, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0xcda) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000200)) 22:13:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f0fa5c08b0e200345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x1000, 0x5}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) 22:13:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:01 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r1, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x23, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x180}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x2052, &(0x7f0000000340)={0x0, 0xab50, 0x40, 0x0, 0xbd}, &(0x7f0000000240), &(0x7f00000004c0)) 22:13:01 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fallocate(r0, 0x4d, 0x7, 0xff) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000004c0)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (async) r6 = syz_open_dev$audion(&(0x7f0000000000), 0xa624, 0x42e40) r7 = openat(r6, &(0x7f0000000540)='./file0\x00', 0x0, 0x1) r8 = memfd_create(&(0x7f0000000580)='/dev/adsp1\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r12 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r15, r14, &(0x7f0000000000)=0xc876, 0x400) (async) setsockopt$inet_mreqn(r14, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @local}, 0xc) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r13}}) (async) syz_io_uring_submit(r10, r5, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x18, 0x0, r6, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r13}}) 22:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f0fa5c08b0e200345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x1000, 0x5}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f0fa5c08b0e200345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x9, 0x1000, 0x5}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xd0, 0x5, 0x1ff}) (async) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x7) (async) 22:13:01 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r1, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x23, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x180}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x2052, &(0x7f0000000340)={0x0, 0xab50, 0x40, 0x0, 0xbd}, &(0x7f0000000240), &(0x7f00000004c0)) 22:13:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:01 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async, rerun: 32) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (rerun: 32) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r1, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x23, 0x0, r3, 0x0, &(0x7f0000000000)='./file0\x00', 0x180}) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async, rerun: 32) syz_io_uring_setup(0x2052, &(0x7f0000000340)={0x0, 0xab50, 0x40, 0x0, 0xbd}, &(0x7f0000000240), &(0x7f00000004c0)) 22:13:02 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) fallocate(r0, 0x4d, 0x7, 0xff) (async) fallocate(r0, 0x4d, 0x7, 0xff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000004c0)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r6 = syz_open_dev$audion(&(0x7f0000000000), 0xa624, 0x42e40) openat(r6, &(0x7f0000000540)='./file0\x00', 0x0, 0x1) (async) r7 = openat(r6, &(0x7f0000000540)='./file0\x00', 0x0, 0x1) r8 = memfd_create(&(0x7f0000000580)='/dev/adsp1\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)) (async) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000200)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r12 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000340)=ANY=[], 0x208e24b) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r15, r14, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r15, r14, &(0x7f0000000000)=0xc876, 0x400) setsockopt$inet_mreqn(r14, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @local}, 0xc) (async) setsockopt$inet_mreqn(r14, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @local}, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r13}}) syz_io_uring_submit(r10, r5, &(0x7f0000000240)=@IORING_OP_SHUTDOWN={0x22, 0x18, 0x0, r6, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r13}}) 22:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000340)={[0x8001]}, 0x8, 0x800) r2 = syz_io_uring_setup(0x6a10, &(0x7f0000000080)={0x0, 0x6152, 0x800, 0x2004, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0xcda) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000200)) (async) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000200)) 22:13:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:02 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x1ff, 0x0, 0x3f}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) dup3(r4, r3, 0x0) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) dup3(r4, r3, 0x0) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000340)={[0x8001]}, 0x8, 0x800) r2 = syz_io_uring_setup(0x6a10, &(0x7f0000000080)={0x0, 0x6152, 0x800, 0x2004, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0xcda) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000200)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) signalfd4(r0, &(0x7f0000000340)={[0x8001]}, 0x8, 0x800) (async) syz_io_uring_setup(0x6a10, &(0x7f0000000080)={0x0, 0x6152, 0x800, 0x2004, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0xcda) (async) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000200)) (async) 22:13:03 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = syz_open_dev$audion(&(0x7f0000000200), 0x6, 0x446801) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x98bfa78d92ff7117, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}]}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x10e8, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xefcc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x291}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfd, 0xd, 0x1, 0x0, "e66c9bdb20333c8f956ed11bd98b11a388854b65824190fa0a0aae7ac33a57ebc86cdae90bf7991006ab66e1f7a4d90a0f6260b7f4e7588f25e6318aa38cdde1f67ff0006976528b9f5fc7856465b8f98beca72297792970831b5290ee549e412209cb3b55ba2bde236a7f036e437d6bda8cbb27be6e9340375535f9ff4ee3ed708687ea00c21c880deb637734e50b4dfd8b8696dd451f746bdecd54b5722fe60c2badc2a8bed6cdc59884f2d382be302d789914d49e6e7507be8ca3ae9173dff535a3de0deaba6cf97102f152da1e1dbd9f85678b913d637d68d514467bd42ee74788e115c99e9e7a1b70b14e5713dd5b25e2b75f69410c23"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2dbd}]}}], {0x14}}, 0x13a8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001) 22:13:03 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x1ff, 0x0, 0x3f}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x800) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r3, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c74424000e000000c74424025af0b5dcc7442406000000000f011424dacab9800000c00f3235000800000f30b80000c0fe0f23c80f21f8350c0060000f23f8b8090000000f23d00f21f835200000060f23f80f090f78e30f236b0f674c2107b8010000000f01d9", 0x67}], 0x1, 0x51, &(0x7f0000000240)=[@dstype3={0x7, 0x9}, @dstype3={0x7, 0x2}], 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 652.530548][T18443] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:13:03 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = syz_open_dev$audion(&(0x7f0000000200), 0x6, 0x446801) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x98bfa78d92ff7117, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}]}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x10e8, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xefcc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x291}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfd, 0xd, 0x1, 0x0, "e66c9bdb20333c8f956ed11bd98b11a388854b65824190fa0a0aae7ac33a57ebc86cdae90bf7991006ab66e1f7a4d90a0f6260b7f4e7588f25e6318aa38cdde1f67ff0006976528b9f5fc7856465b8f98beca72297792970831b5290ee549e412209cb3b55ba2bde236a7f036e437d6bda8cbb27be6e9340375535f9ff4ee3ed708687ea00c21c880deb637734e50b4dfd8b8696dd451f746bdecd54b5722fe60c2badc2a8bed6cdc59884f2d382be302d789914d49e6e7507be8ca3ae9173dff535a3de0deaba6cf97102f152da1e1dbd9f85678b913d637d68d514467bd42ee74788e115c99e9e7a1b70b14e5713dd5b25e2b75f69410c23"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2dbd}]}}], {0x14}}, 0x13a8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001) 22:13:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:03 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff0a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000340)="f639", 0x2, 0x400c1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x0, 0x36}, &(0x7f0000000440)=0x40) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:03 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = syz_open_dev$audion(&(0x7f0000000200), 0x6, 0x446801) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x98bfa78d92ff7117, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}]}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x10e8, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "6d45ba877900d62d596e0f55cd33dafff5dcad2a099889ed2699f3da9b0b2aa84a51dd914ac0fe66e2c979181fcc0a14bcf0de304a7c88c4e56f9409cc5eba41525c806afe2f42b859fd25a8e4629a5e85a7d9b130c6534a289723a5b3f504355769d00bb925aa55146b31809c282616066bd411892146c942e97e82058e4d3f239b86aeed63fea6c115d717e4f6920f48d60f0cf678e7822509d688f115cb1fa18fb5d0348c0f2690287e4faf9aee824a2ff206a74658114a282dabb29f4a66301f8edc5c41e6e03f8580fe43e8e7207062c8fb8f664c02f5f00b5345e79fae4d38cf4105fc02535afcb2adea43b72a8dbede0bcd39e6b3eb4c72fe28b291cb1df98646445cd701894a658ba08fe0e08d93cb6396927b12063096186213c64a5e5ce4e985b2724af8ded5b0f632bd079944beb74751e4069741c465cfaea28bdf56aba6b5a197f80dff70b8b07fc00536343d1e0c17c7ac7df3845a438d31439320ae226735300268c7e43a9a50cf1909954e7df050d7bd97d5c0ba0c0df01e059d4232a4bea7687c01e2c39ca18a5b47aec46ff2e9cfeaa34fc813f9ed2cdbfd56882d4686ea1697da70f35ec71b784cace2c10a83e2527c5e45a444c990f24b6b7848511d98e6a73b3457b464af59df597a69f0044a40a51cefc2909a7e05f55a4671bd5fcde39a4cccd7d795a159d9c5f509bd196ad92bc3ed591256cabcfca32858f0236b624ae6db1a81c0abc7e31b7d7865c5734fcb86a540651e1e9c863188abeff95cccec361c88d00dd71811c24a75a2b619f718159a70784ef42be2f3e0558fbb6d26d99b855f05c5b16c65fb10ba6438f4f5af22bbb7a75c302e4af0bbb61fe344211a8d49518d1e8d2620414bb8baf123579b5ba28046c5f9196ae727983defb7ba8711eddf871722ac0fe3ce8caf2c838cd8100baf2257e2ddb8c819c39f34a228e7c8f8ac76934bb282d607b8f399d112adba8023e862fc73e21db79be7b5d8f6beaddee1cc6bdf975d1f7c016997e6dbcf26bd3ae502a3d3f5650868ccefab0c557d33d4b822a9c6db05673ce9a5e2f2ed71d4bdeca2b442e88f962995cd40fb01aa139df300d915ebeeaacf9e4834b68a77928ebacb26dce772f7d9b94ca6b3d44b85e9294c3e8eff4f2c18113bfb51bdf88a626f6fbb2551e1034f72a40973f4cac285b4307881eac0feae8f756e59724b9aae119691cf65eb4254163c397e3f15ad5c46883dbdc2165452499af64a51b0a5ab655468eb83042ad16a2d3c1b36710c99b303cc935d289e6eea22f54efb4c76bc8e2aa20103ba89832d4725908c48c9bc2ee25c1811f6e725db66e0201c6c223c3aa8d7ded231f96fee249b39da92f51a74b77b0608309aa8ecbe736fcb7e68ebefbc8ae434a05220c0110062dcb2e95adb6f5eeb82b9d4fa529bd94e5b1d912dc1e5fda61c6332adc3d4bc79cd5d643384081b01eeca51a1ad781fbc59474e586784f225806437fbed372fdcf2bece47f26a25063662dbe8de038c4bcfc40e1584a75134e845c1ea77df1e969d89cf61f711c995eb46eac169dc7d3437e124d5db7eed75251219efd1fad8b9404e661b6ebd5e75eae264a81a898c0405e555127a6424c4ee4ac1434ba567e3816d3975b83d6d79aecd7acc8783245430d0e184e7a72fae873e7d2d2a5848ceea80ac7c823f9607fc1374eebb223cd4b348ff70185f11a709ccac06091f87faad65bdb05ac7cff7201ee9b460117c37957d133be06ed1e6ed30c9d897a378fa81b95df003116999c8022d024d449dd873e7610bb1be4c16b49b7d732ef4c4c11653ca07c10d97807d241c264694e76a344d814c95817bfd1ea6663856856edd6a38281bc3461b5044fd66a193d313ff02b0f9b449953d1a6b3ecaa8d7890fe2c90398c6382d6e2d395081ab8f59d10b077247bc03ac53b2258170808ea9d77fdf4a7f17d5b594d864cfe2b73805b16230d2dc20e7959a46e7e1bc1df4c03d61508bcf7f5fb9f323141b62d27f47f724db0bd0a9e57362be5bb21dec7090f7181ff35595b46029196f85ec0ca399b2bb1a852ebe12140efbf33f688b2bf5a17ce960a446f9551cd3bd5d1ff6a0ff6ad9ab53112305c2b252fb4aef54e19c2cb2a8a116c63fac012e0e8c9fb3fb8df27447f776ec1aa5126c5352865b4973d42a213ca390ee0ed65e0c9bc158da0e15e02d398f05b098eb6ab176940a4ae2cec1fc2a68f6041187832db94e52f7c9f53a5cd32318d84d2b4ff1971e26b29335efb1eb0ad424a781c0d440381c43b1d76b005a315aab36d48b916cfd457f4cd39e686ca5ccc41ead427d76221df8ae6630c62ea2e69bc8da143d9bcbcfee67e2a321ff19cf8a0c9bd0a9c3ca9a20800c0d255ea05327b1eedc69d505dab19ddd95aeab6cc7baae094e05467387c8eec52efa43c83114a2d54e2b8875bd077c53f20980a09d7b7189f9de57e78315b7faa7623f731faa1d1a0b1e7fa16a9c08e3ec47e4c9c960723c6120761776d806f15c838a25fe6d6f5b886c8bb9ca0b435bdcf5f374f92bb0ad0f80c841427e8648877221adbcefffb6e02ab9a2ca786109c346ebeae9cc7f900c889b2bf51cc61a633f10664864d5f775b4f692e6f670c476f4bac3262942e6f3521e996b6a506ca9d713f7bb9371be355b51b366110773edbeca62f26743b651afae9244d966b608ece9b93b4d3f1bcce8e3ae79a3678cd168ef49652cb7191f11a33c5ea20266e4531ab46365c827070e736ba1243062d511be25d98195de282ceb80953483a9e507f66770730e612ed075c602319f6ea479795a9ee6a87a3a1e0e40adc3b8df84c5e6a1883216b771da9a75dc4452184b3231bfd2d99e412e27805120b2932dbef8178dae3dc33097133e628807cf1e104fd820da5e9688cb0e59985d63beff766124b2860d3aaba14fe8536c371f0232e81767a6120cd3733e49af43cae33bb416570eefac7fd28c5678f00c914879c30555d6a5f46604060153aa8d73e8e40c6e6aa6decc3caf3a46d979e3df3f7a8ee57ba3e5ca6acfcad11caa8e7527e8a1274ecf128b53ad68c844b9dd26a828b33354e0bd4dd5c349863736a54298a1e8a48c0722b358070ab62fcaeff2d8f118d05defd80ae688fb474790af53fb9b622f4218d10f552070942930ffe108221251adc22c8e2150dea4f292bfb097d035d31b60f666c0bdb8d5eadd2f14a55b0083dfb52b94cde66034a435955d50603eaad385e684c77aaa032c5b03be8f28db6a65de485d471135de87c52a76cdfe1853180a357c34e5b45484169fdab7b009f602c12df8973389f9376c682432c765715b3712c42c17f1f3dfb44c4badcf8299e0216f62e8e0f2026eeec81383a5fc4d2b53441450ef7091bb1db6d1cfc5d9ffe263d28e7a4b2f03871bf76928c7edaf933892e5804afa8473e722ef7eea2f8d11389c921c5f3504f439d5a4410c67c3999c4493454b7840181d2c15070f95a268b33164994b5928509b353f5e81c92bc719834ac91be44dfbada2b6c6e95a2d92358014c6a7d01e276e0a6698110efc0ae9106caaee39c2536c35263c6938241c818dae80dfce5c12497f317b8aaf1b38421af4bbd5f5d4a04659c6c02671fccfac077c62f0a69684c18f86687430d2d2d55256be75e1aba589f7cae5727892aeb6f0def76e04c29431da57b93b76ef978af344af080e246e13b0bb3d7df997302e11b0065a3e72440066e0786cc799278e5f329280f33164f6f6983193f5d56e06b2db9d1bfdc92a198174d04526feb169710c3a1c9b1856f453176c5aaf05173a4b9fb8f4884434b6b2052b3301869c01e51b64a8b6adf401ca1d1d0411bd993f91aa974b4dcbeba69114fa137d0049467f6d14d49133a2337b75baec6745ceade3ed1a93ec01f88923c99f6710a8fda5c1d3c22e7014d70495b28f4b4462dcc836e630f47470f8f9aecec8250ec42c3f34e5b58a96fe26023b5723935a0c0b114d017db71c3c654f9955612356b415a1bc5c9dd384d0c684a398a87ac6de94fe6473a69d1ad43d64398e9a1a4593f3a51cb09bb044ee9fc34580b3babe56a5c31fc12a103cb35a0471001b7b27cc1c17b2d92ab15e6bcd48bff60854d62d776feca643c85f7af78f6dc4974ae60ddfa383e6c0526f81e0c9f33925d93c29bfdf610840c415d284bf1885ded1cb0a3d29fe77b7a9e768f9800160d5adcce1a80b63cdfc57aa249cbd144ec31a523c11de54e19908dd09e9a17760dad41260641bd5fab943d7194e999da33ca79cfa7e61936437141860e91a79a1b3cef522e19937dd33f833644daca9d6bef60fdeff215b7b32a8358d8d240fb5dd5ec876775da4ce300fb2e6995c419ad9edbe22268e5b161d610517ea0705603ebb50e8ea95b682046ef1ab3ed0ea3ba9b777d0c7a56b0f62df5f6d40738b76f8d33f621480539c906a0c57371ff5c00a62d6f798c0b7db961fe5dcfab4ca31278d78f779239415c9d147e22d5dce276b3926a802cac5ab1c25740404ee5a52360fdd95c3d0817b55c41404b3bb21ad749bc9d4b3b32311104fe983e6347a5503d768fc394ed905d2f51b2c6860607acd9d46f470083df64ef0880f1a935645e1b8efc042c4b9f1fd97d107226b1548a600d2c4c9d5280f16545b2e0da2b109fdebadb335c9004b58c0584c169b20a4d5b5559123c6b59c86e9a6286518cac7dad0b4a91d90cbf2c77f7420331f3909c85b5e11bdf7cbb8a2c242551a15d1fb8740328dcf0a7b75aa0a63fda10dd0a5c84f644e8dab6978b07583c9b0d3837987ed1a5499fd8c9b04d64f5766ef41539c06976ca1486508272668325973771854656fe108e6c13593b35c4a2b940a2b547d418d98358031e84ea10e66d0f577a23217bba7673e6c4836f9b2683e7df56d7ba3d03ae0811d2b9ab3b4c7f93bd56733f16f98d3754e214d024388573596d12ba48414eb2804b63061e974275669cea3cabd635cae81bead6b809f8857ee90c8c5cf64c5aa7a436d19b2d116a43b21e32a92a42add69d32c26e0ed26278fdac9f6eadc3440b7f53f2851cd18fcf651a296fe9c8694b2f4310e43e579668de12c0cc687717265faa4885ec2aa8013dedbbbc32d93f284fb79db90eeb7b80da3243bb0ee626eb38ac36a4c181aaf8474bd7146e8c5899d70e3d9d07659a9427096cc1975f479be433963dd7c75a41fb2647d0fc946179617da0d028f9b0e50051287957063fddf9698cb465231f448e7a5662b234fb7859fdafae0de500c9e2e1903de601276a04ba7a33925f4b475c8acdeb7508d7d118737f1ead4bdb946373d2a8a304fae0c6e062afcf852885c2349221da8a800f1d5fe128f46424fc2a3f44ccd882907caa633b26f6efada8dfd6d5d889fe640003f5871cc6ef3c419d6ebb7de45c83bedb8bdb00c15687c2b6742c62f39b63912ad116b91b22e92c99397960606da7ce3a27d4129d63cbf4845d1ed4f8a40636ffdccacabc9d8f22614b0a0849856a309d857a7e9339fc0b5f950d7707aefaec774e21080e838bf8539c94e950c9e610f87160b3fe940208412253fe9aa40e6403eb75a97fcb67f6d7a11763a0695feb959592f271760969591389f57a0ebd9a7e9f9966c5423d7bd984bf3f4d78dc768fa22a4abb462ca938c496d9cdcecad7b779bff09286748517b5f187f00b696a437ef6a4b5e4bd50eaca71f3271f28541bfca515691027eddda65d7bb5229dae940770c785f3bbaf1f4baaff434c6954f00a0e51badebef4809a03e976920036c9af20c"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xefcc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x291}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfd, 0xd, 0x1, 0x0, "e66c9bdb20333c8f956ed11bd98b11a388854b65824190fa0a0aae7ac33a57ebc86cdae90bf7991006ab66e1f7a4d90a0f6260b7f4e7588f25e6318aa38cdde1f67ff0006976528b9f5fc7856465b8f98beca72297792970831b5290ee549e412209cb3b55ba2bde236a7f036e437d6bda8cbb27be6e9340375535f9ff4ee3ed708687ea00c21c880deb637734e50b4dfd8b8696dd451f746bdecd54b5722fe60c2badc2a8bed6cdc59884f2d382be302d789914d49e6e7507be8ca3ae9173dff535a3de0deaba6cf97102f152da1e1dbd9f85678b913d637d68d514467bd42ee74788e115c99e9e7a1b70b14e5713dd5b25e2b75f69410c23"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2dbd}]}}], {0x14}}, 0x13a8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001) 22:13:03 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x1ff, 0x0, 0x3f}) (async) syz_io_uring_submit(r6, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x1ff, 0x0, 0x3f}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) [ 653.183345][T18474] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 22:13:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:04 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff0a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000340)="f639", 0x2, 0x400c1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x0, 0x36}, &(0x7f0000000440)=0x40) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r4, 0x0, 0xffffffffffffff0a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000000340)="f639", 0x2, 0x400c1, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x0, 0x36}, &(0x7f0000000440)=0x40) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r5) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r7}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:04 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff0a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000340)="f639", 0x2, 0x400c1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x0, 0x36}, &(0x7f0000000440)=0x40) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:04 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x4}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r5 = syz_open_dev$audion(&(0x7f0000000200), 0x6, 0x446801) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x98bfa78d92ff7117, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}]}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x16}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x10e8, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa0, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xefcc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x291}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfd, 0xd, 0x1, 0x0, "e66c9bdb20333c8f956ed11bd98b11a388854b65824190fa0a0aae7ac33a57ebc86cdae90bf7991006ab66e1f7a4d90a0f6260b7f4e7588f25e6318aa38cdde1f67ff0006976528b9f5fc7856465b8f98beca72297792970831b5290ee549e412209cb3b55ba2bde236a7f036e437d6bda8cbb27be6e9340375535f9ff4ee3ed708687ea00c21c880deb637734e50b4dfd8b8696dd451f746bdecd54b5722fe60c2badc2a8bed6cdc59884f2d382be302d789914d49e6e7507be8ca3ae9173dff535a3de0deaba6cf97102f152da1e1dbd9f85678b913d637d68d514467bd42ee74788e115c99e9e7a1b70b14e5713dd5b25e2b75f69410c23"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2dbd}]}}], {0x14}}, 0x13a8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8001) 22:13:04 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d09, &(0x7f0000000000)=0x3d) [ 653.582420][T18491] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 22:13:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x800) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r3, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c74424000e000000c74424025af0b5dcc7442406000000000f011424dacab9800000c00f3235000800000f30b80000c0fe0f23c80f21f8350c0060000f23f8b8090000000f23d00f21f835200000060f23f80f090f78e30f236b0f674c2107b8010000000f01d9", 0x67}], 0x1, 0x51, &(0x7f0000000240)=[@dstype3={0x7, 0x9}, @dstype3={0x7, 0x2}], 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:13:04 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:04 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffff0a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, &(0x7f0000000340)="f639", 0x2, 0x400c1, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/194, 0xc2, 0x0, 0x0, 0x36}, &(0x7f0000000440)=0x40) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r5) (async) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x80}, 0x0, {0x0, r7}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:04 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4000, 0x0, 0x0, 0x4c}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:04 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x208e24b) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000000080)={[0x26]}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:13:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:05 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4000, 0x0, 0x0, 0x4c}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:05 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 32) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 32) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:05 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d09, &(0x7f0000000000)=0x3d) 22:13:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x80000000, 0x800) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r3, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c74424000e000000c74424025af0b5dcc7442406000000000f011424dacab9800000c00f3235000800000f30b80000c0fe0f23c80f21f8350c0060000f23f8b8090000000f23d00f21f835200000060f23f80f090f78e30f236b0f674c2107b8010000000f01d9", 0x67}], 0x1, 0x51, &(0x7f0000000240)=[@dstype3={0x7, 0x9}, @dstype3={0x7, 0x2}], 0x2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:13:05 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={r4, 0x1, r5, 0xfed, 0x80000}) 22:13:05 executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d09, &(0x7f0000000000)=0x3d) 22:13:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:05 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4000, 0x0, 0x0, 0x4c}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4000, 0x0, 0x0, 0x4c}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:05 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d09, &(0x7f0000000000)=0x3d) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d09, &(0x7f0000000000)=0x3d) 22:13:06 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={r4, 0x1, r5, 0xfed, 0x80000}) 22:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4, 0x16000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:06 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={r4, 0x1, r5, 0xfed, 0x80000}) 22:13:06 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:06 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) r7 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x23, 0x4000, @fd=r6, 0x5, 0x6, 0xc4, 0x0, 0x0, {0x1, r8}}) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:06 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x5760, &(0x7f0000000200)={0x0, 0x15f0, 0x1000, 0x0, 0x8d, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) dup(r1) (async) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4, 0x16000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4, 0x16000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:06 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:06 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (rerun: 64) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async, rerun: 64) close(r6) (rerun: 64) r7 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x23, 0x4000, @fd=r6, 0x5, 0x6, 0xc4, 0x0, 0x0, {0x1, r8}}) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x5760, &(0x7f0000000200)={0x0, 0x15f0, 0x1000, 0x0, 0x8d, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5760, &(0x7f0000000200)={0x0, 0x15f0, 0x1000, 0x0, 0x8d, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) (async) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:07 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) r7 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x23, 0x4000, @fd=r6, 0x5, 0x6, 0xc4, 0x0, 0x0, {0x1, r8}}) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r6) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x23, 0x4000, @fd=r6, 0x5, 0x6, 0xc4, 0x0, 0x0, {0x1, r8}}) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:07 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x5760, &(0x7f0000000200)={0x0, 0x15f0, 0x1000, 0x0, 0x8d, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) (async) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x4, 0x16000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:07 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r2 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x8aa, &(0x7f0000000200)={0x0, 0x5c3f, 0x8, 0x0, 0x31a, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0xa8ec, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000006c0)=0xfffffff8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000680)=0x1) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000700)=0x1cb7) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000240)='\x1e$^:-\x00', &(0x7f0000000300)='/dev/adsp1\x00', &(0x7f0000000340)='/dev/adsp1\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/adsp1\x00', &(0x7f0000000500)='/dev/snd/midiC#D#\x00', &(0x7f0000000540)='!,!-$\'$-](#%-{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00'], 0x100) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:07 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) r2 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 64) syz_io_uring_setup(0x8aa, &(0x7f0000000200)={0x0, 0x5c3f, 0x8, 0x0, 0x31a, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:08 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:08 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r2 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x8aa, &(0x7f0000000200)={0x0, 0x5c3f, 0x8, 0x0, 0x31a, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:08 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_NMI(r3, 0xae9a) 22:13:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:09 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2000}, &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:09 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0xc876, 0x400) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) 22:13:09 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0xa8ec, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000006c0)=0xfffffff8) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000680)=0x1) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000700)=0x1cb7) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000240)='\x1e$^:-\x00', &(0x7f0000000300)='/dev/adsp1\x00', &(0x7f0000000340)='/dev/adsp1\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/adsp1\x00', &(0x7f0000000500)='/dev/snd/midiC#D#\x00', &(0x7f0000000540)='!,!-$\'$-](#%-{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00'], 0x100) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:09 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2000}, &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:09 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 64) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0xa8ec, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000006c0)=0xfffffff8) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000680)=0x1) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000700)=0x1cb7) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000240)='\x1e$^:-\x00', &(0x7f0000000300)='/dev/adsp1\x00', &(0x7f0000000340)='/dev/adsp1\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/adsp1\x00', &(0x7f0000000500)='/dev/snd/midiC#D#\x00', &(0x7f0000000540)='!,!-$\'$-](#%-{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00'], 0x100) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x2000}, &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:10 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 64) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) 22:13:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0xc4ff2759e9bbbb9c, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa08a01, 0x0) syz_io_uring_setup(0x1693, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:10 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x48b3, &(0x7f0000000300)={0x0, 0x2117, 0x8, 0x1, 0x1a0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000380)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x208e24b) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:13:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) (fail_nth: 1) 22:13:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async, rerun: 64) close(r3) (async, rerun: 64) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x208e24b) (async) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:13:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:11 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0xc4ff2759e9bbbb9c, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa08a01, 0x0) syz_io_uring_setup(0x1693, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0xc4ff2759e9bbbb9c, 0x0) (async) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa08a01, 0x0) (async) syz_io_uring_setup(0x1693, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000000)) (async) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) [ 660.863327][T18793] FAULT_INJECTION: forcing a failure. [ 660.863327][T18793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.907931][T18793] CPU: 0 PID: 18793 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 660.918141][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 660.928211][T18793] Call Trace: [ 660.931503][T18793] [ 660.934442][T18793] dump_stack_lvl+0x125/0x1b0 [ 660.939152][T18793] should_fail_ex+0x496/0x5b0 [ 660.943863][T18793] _copy_to_user+0x30/0xb0 [ 660.948393][T18793] simple_read_from_buffer+0xd0/0x150 [ 660.953798][T18793] proc_fail_nth_read+0x1b0/0x280 [ 660.958851][T18793] ? proc_sessionid_read+0x280/0x280 [ 660.964154][T18793] ? security_file_permission+0xdc/0x100 [ 660.969815][T18793] ? proc_sessionid_read+0x280/0x280 [ 660.975127][T18793] vfs_read+0x1ce/0x8f0 [ 660.979315][T18793] ? kernel_read+0x1b0/0x1b0 [ 660.983933][T18793] ? __fget_files+0x1c6/0x340 [ 660.988641][T18793] ksys_read+0x12f/0x250 [ 660.992907][T18793] ? vfs_write+0xdf0/0xdf0 [ 660.997344][T18793] ? syscall_enter_from_user_mode+0x26/0x80 [ 661.003262][T18793] do_syscall_64+0x3f/0x110 [ 661.007792][T18793] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 661.013707][T18793] RIP: 0033:0x7fb2d447b78c [ 661.018139][T18793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 661.037805][T18793] RSP: 002b:00007fb2d51930c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.046238][T18793] RAX: ffffffffffffffda RBX: 00007fb2d459c050 RCX: 00007fb2d447b78c [ 661.054219][T18793] RDX: 000000000000000f RSI: 00007fb2d5193130 RDI: 0000000000000005 [ 661.062210][T18793] RBP: 00007fb2d5193120 R08: 0000000000000000 R09: 0000000000000000 [ 661.070189][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.078167][T18793] R13: 000000000000006e R14: 00007fb2d459c050 R15: 00007fb2d46bfa48 [ 661.086161][T18793] 22:13:11 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0xc876, 0x400) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r2, r1, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x2) (async) 22:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r4) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x208e24b) (async, rerun: 32) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22:13:12 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x48b3, &(0x7f0000000300)={0x0, 0x2117, 0x8, 0x1, 0x1a0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000380)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d9218638c0b9e0d69a703a83deca3afa3346489ae83fc645b429c9f002d506e5479cefd8b51919333f504b2cef22785ee2e63c970c1ea445f62569dc7"], 0x208e24b) r2 = dup(r1) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/3, 0x3}], 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:12 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) write$dsp(r0, &(0x7f0000000000)="0941571090679c05e13ebc4de6c05df809b8e727660e83369df8eb557573e0debc428cc3c0db", 0x26) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0xc4ff2759e9bbbb9c, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa08a01, 0x0) (async) syz_io_uring_setup(0x1693, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 64) syz_io_uring_setup(0x48b3, &(0x7f0000000300)={0x0, 0x2117, 0x8, 0x1, 0x1a0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000380)) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x2, &(0x7f0000000040)={0x4}) 22:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d9218638c0b9e0d69a703a83deca3afa3346489ae83fc645b429c9f002d506e5479cefd8b51919333f504b2cef22785ee2e63c970c1ea445f62569dc7"], 0x208e24b) dup(r1) (async) r2 = dup(r1) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/3, 0x3}], 0x8) (async) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/3, 0x3}], 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:12 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) write$dsp(r0, &(0x7f0000000000)="0941571090679c05e13ebc4de6c05df809b8e727660e83369df8eb557573e0debc428cc3c0db", 0x26) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000200)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:12 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) fsync(r1) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff]}, 0x0, 0x8) io_uring_setup(0x1643, &(0x7f0000000200)={0x0, 0xa328, 0x800, 0x1, 0xc, 0x0, r4}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x4, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x10, &(0x7f0000000040)={0x4}) 22:13:13 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) fsync(r1) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:13 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff]}, 0x0, 0x8) io_uring_setup(0x1643, &(0x7f0000000200)={0x0, 0xa328, 0x800, 0x1, 0xc, 0x0, r4}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff]}, 0x0, 0x8) (async) io_uring_setup(0x1643, &(0x7f0000000200)={0x0, 0xa328, 0x800, 0x1, 0xc, 0x0, r4}) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:13 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 64) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) fsync(r1) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d9218638c0b9e0d69a703a83deca3afa3346489ae83fc645b429c9f002d506e5479cefd8b51919333f504b2cef22785ee2e63c970c1ea445f62569dc7"], 0x208e24b) (async) r2 = dup(r1) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/3, 0x3}], 0x8) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x541b, &(0x7f0000000040)={0x4}) 22:13:13 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff]}, 0x0, 0x8) io_uring_setup(0x1643, &(0x7f0000000200)={0x0, 0xa328, 0x800, 0x1, 0xc, 0x0, r4}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:13 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) write$dsp(r0, &(0x7f0000000000)="0941571090679c05e13ebc4de6c05df809b8e727660e83369df8eb557573e0debc428cc3c0db", 0x26) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000200)) (async) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x5421, &(0x7f0000000040)={0x4}) 22:13:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xc4, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "eaf313945b892726359843a697cbb71e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6e1ba0f202020d7f8d4eaccd3074414c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "626994c3057e789352ff349bbfd20084"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e657227065adfa990dc25ca8e9304ac7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5ea8bf67f877fa174333b100"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f5a1241853048cefd29aecdb18917e42"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ee5250c84a74fa5c5bcbe3ad00"}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc802}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:13:13 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x10001) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:13 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x7) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x0, @fd_index=0x3, 0x9, 0xfffffffffffffffe, 0xe, 0x0, 0x0, {0x1}}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:14 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000000)=r4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x168d, 0x20, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x5450, &(0x7f0000000040)={0x4}) 22:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xc4, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "eaf313945b892726359843a697cbb71e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6e1ba0f202020d7f8d4eaccd3074414c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "626994c3057e789352ff349bbfd20084"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e657227065adfa990dc25ca8e9304ac7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5ea8bf67f877fa174333b100"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f5a1241853048cefd29aecdb18917e42"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ee5250c84a74fa5c5bcbe3ad00"}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc802}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:13:14 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x7) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x0, @fd_index=0x3, 0x9, 0xfffffffffffffffe, 0xe, 0x0, 0x0, {0x1}}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xc4, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "eaf313945b892726359843a697cbb71e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6e1ba0f202020d7f8d4eaccd3074414c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "626994c3057e789352ff349bbfd20084"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e657227065adfa990dc25ca8e9304ac7"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5ea8bf67f877fa174333b100"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f5a1241853048cefd29aecdb18917e42"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ee5250c84a74fa5c5bcbe3ad00"}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc802}, 0x40) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:13:14 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x10001) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x10001) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x5451, &(0x7f0000000040)={0x4}) 22:13:14 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000000)=r4) (async, rerun: 64) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) (async) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r7) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 32) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x168d, 0x20, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 32) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:14 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x7) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x0, @fd_index=0x3, 0x9, 0xfffffffffffffffe, 0xe, 0x0, 0x0, {0x1}}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x7) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x0, @fd_index=0x3, 0x9, 0xfffffffffffffffe, 0xe, 0x0, 0x0, {0x1}}) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9df7179f8474f3cffb7d6a4df0d35d04000000fe4d429a1863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x5452, &(0x7f0000000040)={0x4}) 22:13:14 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x10001) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:14 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x395}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x5460, &(0x7f0000000040)={0x4}) 22:13:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9df7179f8474f3cffb7d6a4df0d35d04000000fe4d429a1863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9df7179f8474f3cffb7d6a4df0d35d04000000fe4d429a1863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x8933, &(0x7f0000000040)={0x4}) 22:13:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:15 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000000)=r4) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000000)=r4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) close(r5) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) (async) close(r6) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x168d, 0x20, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:15 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xae03, &(0x7f0000000040)={0x4}) 22:13:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9df7179f8474f3cffb7d6a4df0d35d04000000fe4d429a1863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:15 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x395}, &(0x7f0000000100), &(0x7f0000000200)=0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000000)=0x1ff) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 64) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 64) 22:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xae41, &(0x7f0000000040)={0x4}) 22:13:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xaec7, &(0x7f0000000040)={0x4}) 22:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x10000, 0x2000, &(0x7f000000c000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:16 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x25dd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xaece, &(0x7f0000000040)={0x4}) 22:13:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:16 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x25dd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:16 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x400448c9, &(0x7f0000000040)={0x4}) 22:13:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x10000, 0x2000, &(0x7f000000c000/0x2000)=nil}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:17 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x395}, &(0x7f0000000100), &(0x7f0000000200)=0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000000)=0x1ff) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:17 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x25dd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x400448dd, &(0x7f0000000040)={0x4}) 22:13:17 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x10000, 0x2000, &(0x7f000000c000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x10000, 0x2000, &(0x7f000000c000/0x2000)=nil}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x400454ca, &(0x7f0000000040)={0x4}) 22:13:17 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$dsp(r4, &(0x7f00000004c0)="ffcc921c7213f9e1cc93275244bdd4d5407e7b034d39e58bd8a750c6c9a27a1ae1c2d22d31875ff53b8e25858f807a616c9c5866c8748f93d332818b87fc5132d4bc6d6cf5ecfa32a6e5595e5e81f1e4f463a521d0dbddf924d7c6664421a383930624619ce5750fba7b52e766d7daae63e105482ad752d46d9b2cfc6cb839bd3d792b9d51f202ff8c82d08261a35e47f9c211e07da38c20ada21e75b671f75218501856395c2f65205fe1a239558cd44839486fb05d71af51ee004445174e1920799b707e11cf0171e547198713d3b8c8d6834451fb5f8c9f873b8232a9dbd517ceb59bac", 0xe5) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x40049409, &(0x7f0000000040)={0x4}) 22:13:17 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$dsp(r4, &(0x7f00000004c0)="ffcc921c7213f9e1cc93275244bdd4d5407e7b034d39e58bd8a750c6c9a27a1ae1c2d22d31875ff53b8e25858f807a616c9c5866c8748f93d332818b87fc5132d4bc6d6cf5ecfa32a6e5595e5e81f1e4f463a521d0dbddf924d7c6664421a383930624619ce5750fba7b52e766d7daae63e105482ad752d46d9b2cfc6cb839bd3d792b9d51f202ff8c82d08261a35e47f9c211e07da38c20ada21e75b671f75218501856395c2f65205fe1a239558cd44839486fb05d71af51ee004445174e1920799b707e11cf0171e547198713d3b8c8d6834451fb5f8c9f873b8232a9dbd517ceb59bac", 0xe5) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x40086602, &(0x7f0000000040)={0x4}) 22:13:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca90000345d4dbb8f0afe4d3d92186300"/30], 0x208e24b) r2 = dup(r1) r3 = dup3(r2, r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) r9 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x14d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baf80c66b87a97068f66efbafc0ced818f0000a00066b99c0200000fed36f30fa6c866b8010000000f01d966b98505000066b81117cd5566bab96c5d4d0f894848211cf30f2b3e3500b832010f00d80fc7bb0f00"}], 0x1, 0x2, 0x0, 0x9) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000007000/0x2000)=nil, 0x2000}}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:18 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f00000004c0)=""/214, 0xd6) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:18 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$dsp(r4, &(0x7f00000004c0)="ffcc921c7213f9e1cc93275244bdd4d5407e7b034d39e58bd8a750c6c9a27a1ae1c2d22d31875ff53b8e25858f807a616c9c5866c8748f93d332818b87fc5132d4bc6d6cf5ecfa32a6e5595e5e81f1e4f463a521d0dbddf924d7c6664421a383930624619ce5750fba7b52e766d7daae63e105482ad752d46d9b2cfc6cb839bd3d792b9d51f202ff8c82d08261a35e47f9c211e07da38c20ada21e75b671f75218501856395c2f65205fe1a239558cd44839486fb05d71af51ee004445174e1920799b707e11cf0171e547198713d3b8c8d6834451fb5f8c9f873b8232a9dbd517ceb59bac", 0xe5) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) write$dsp(r4, &(0x7f00000004c0)="ffcc921c7213f9e1cc93275244bdd4d5407e7b034d39e58bd8a750c6c9a27a1ae1c2d22d31875ff53b8e25858f807a616c9c5866c8748f93d332818b87fc5132d4bc6d6cf5ecfa32a6e5595e5e81f1e4f463a521d0dbddf924d7c6664421a383930624619ce5750fba7b52e766d7daae63e105482ad752d46d9b2cfc6cb839bd3d792b9d51f202ff8c82d08261a35e47f9c211e07da38c20ada21e75b671f75218501856395c2f65205fe1a239558cd44839486fb05d71af51ee004445174e1920799b707e11cf0171e547198713d3b8c8d6834451fb5f8c9f873b8232a9dbd517ceb59bac", 0xe5) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4008ae61, &(0x7f0000000040)={0x4}) 22:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4008ae6a, &(0x7f0000000040)={0x4}) 22:13:18 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (rerun: 32) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 32) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:18 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x3b4a, &(0x7f0000000200)={0x0, 0xdc8d, 0x100, 0x1, 0x270}, &(0x7f0000000000), &(0x7f0000000340)) 22:13:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4010ae42, &(0x7f0000000040)={0x4}) 22:13:18 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f00000004c0)=""/214, 0xd6) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:19 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) syz_io_uring_setup(0x3b4a, &(0x7f0000000200)={0x0, 0xdc8d, 0x100, 0x1, 0x270}, &(0x7f0000000000), &(0x7f0000000340)) 22:13:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca90000345d4dbb8f0afe4d3d92186300"/30], 0x208e24b) (async) r2 = dup(r1) r3 = dup3(r2, r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) r9 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x14d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baf80c66b87a97068f66efbafc0ced818f0000a00066b99c0200000fed36f30fa6c866b8010000000f01d966b98505000066b81117cd5566bab96c5d4d0f894848211cf30f2b3e3500b832010f00d80fc7bb0f00"}], 0x1, 0x2, 0x0, 0x9) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000007000/0x2000)=nil, 0x2000}}) (async) ioctl$KVM_NMI(r4, 0xae9a) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) 22:13:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4010ae67, &(0x7f0000000040)={0x4}) 22:13:19 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x3b4a, &(0x7f0000000200)={0x0, 0xdc8d, 0x100, 0x1, 0x270}, &(0x7f0000000000), &(0x7f0000000340)) (async) syz_io_uring_setup(0x3b4a, &(0x7f0000000200)={0x0, 0xdc8d, 0x100, 0x1, 0x270}, &(0x7f0000000000), &(0x7f0000000340)) 22:13:19 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:19 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (rerun: 64) read$dsp(r0, &(0x7f00000004c0)=""/214, 0xd6) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4010ae68, &(0x7f0000000040)={0x4}) 22:13:19 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x40}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:19 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x0) io_uring_enter(r1, 0x7565, 0x14ca, 0x19, &(0x7f0000000200)={[0x9]}, 0x8) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:20 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca90000345d4dbb8f0afe4d3d92186300"/30], 0x208e24b) r2 = dup(r1) r3 = dup3(r2, r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 64) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 64) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) r9 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x14d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baf80c66b87a97068f66efbafc0ced818f0000a00066b99c0200000fed36f30fa6c866b8010000000f01d966b98505000066b81117cd5566bab96c5d4d0f894848211cf30f2b3e3500b832010f00d80fc7bb0f00"}], 0x1, 0x2, 0x0, 0x9) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000007000/0x2000)=nil, 0x2000}}) (rerun: 32) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x40186366, &(0x7f0000000040)={0x4}) 22:13:20 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x40}) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x0) (async) io_uring_enter(r1, 0x7565, 0x14ca, 0x19, &(0x7f0000000200)={[0x9]}, 0x8) (async) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async, rerun: 32) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 32) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x401c5820, &(0x7f0000000040)={0x4}) 22:13:20 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x40}) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f08000000921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:20 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x0) io_uring_enter(r1, 0x7565, 0x14ca, 0x19, &(0x7f0000000200)={[0x9]}, 0x8) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4020940d, &(0x7f0000000040)={0x4}) 22:13:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:20 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1f7}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x181000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc1}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:20 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4020ae46, &(0x7f0000000040)={0x4}) 22:13:21 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1f7}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x181000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc1}) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f08000000921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:21 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x1002ddd, &(0x7f0000000080)={0x0, 0x3, 0x10152}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_disconnect={0xfffffffd}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r8 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x101080, 0xe9}, 0x18) syz_io_uring_setup(0x69d8, &(0x7f00000004c0)={0x0, 0x115c, 0x20, 0x3, 0x182, 0x0, r8}, &(0x7f0000000380), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{&(0x7f0000000640)="b1256155e292651d00efa9dffddc7e6bc9a3ba1bf99c3cbe82100934cdc683362af15c4db7ab3b3b4ca6ae45dbc79da190e055bb1d737b1c4ced69a5abc831050217688097e31ffd3f899e7f410f4451ea", 0x51, 0x1}]}, 0x1, 0x2}, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) ioctl$USBDEVFS_CONNECTINFO(r9, 0x40085511, &(0x7f0000000700)) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) io_uring_enter(r12, 0x7fd4, 0x9bda, 0x1, &(0x7f0000000580)={[0xffffffffffffffe1]}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) 22:13:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4020ae76, &(0x7f0000000040)={0x4}) 22:13:21 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1f7}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x181000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc1}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1f7}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x181000) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc1}) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x60, 0x0, @fd=r0}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4020aea5, &(0x7f0000000040)={0x4}) 22:13:21 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) write$dsp(r5, &(0x7f0000000000)="e0b7b82340de058c22a2a43336bc595a16016ccd04", 0x15) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f08000000921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4040ae79, &(0x7f0000000040)={0x4}) 22:13:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x60, 0x0, @fd=r0}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x60, 0x0, @fd=r0}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x4068aea3, &(0x7f0000000040)={0x4}) 22:13:22 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x1002ddd, &(0x7f0000000080)={0x0, 0x3, 0x10152}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_disconnect={0xfffffffd}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r8 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x101080, 0xe9}, 0x18) syz_io_uring_setup(0x69d8, &(0x7f00000004c0)={0x0, 0x115c, 0x20, 0x3, 0x182, 0x0, r8}, &(0x7f0000000380), &(0x7f0000000540)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{&(0x7f0000000640)="b1256155e292651d00efa9dffddc7e6bc9a3ba1bf99c3cbe82100934cdc683362af15c4db7ab3b3b4ca6ae45dbc79da190e055bb1d737b1c4ced69a5abc831050217688097e31ffd3f899e7f410f4451ea", 0x51, 0x1}]}, 0x1, 0x2}, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) ioctl$USBDEVFS_CONNECTINFO(r9, 0x40085511, &(0x7f0000000700)) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) io_uring_enter(r12, 0x7fd4, 0x9bda, 0x1, &(0x7f0000000580)={[0xffffffffffffffe1]}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) 22:13:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x60, 0x0, @fd=r0}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:22 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) (async, rerun: 64) write$dsp(r5, &(0x7f0000000000)="e0b7b82340de058c22a2a43336bc595a16016ccd04", 0x15) (async, rerun: 64) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x80086301, &(0x7f0000000040)={0x4}) 22:13:22 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x1002ddd, &(0x7f0000000080)={0x0, 0x3, 0x10152}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000005c0)=@usbdevfs_disconnect={0xfffffffd}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r8 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x101080, 0xe9}, 0x18) syz_io_uring_setup(0x69d8, &(0x7f00000004c0)={0x0, 0x115c, 0x20, 0x3, 0x182, 0x0, r8}, &(0x7f0000000380), &(0x7f0000000540)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000006c0)={&(0x7f0000001000)={[{&(0x7f0000000640)="b1256155e292651d00efa9dffddc7e6bc9a3ba1bf99c3cbe82100934cdc683362af15c4db7ab3b3b4ca6ae45dbc79da190e055bb1d737b1c4ced69a5abc831050217688097e31ffd3f899e7f410f4451ea", 0x51, 0x1}]}, 0x1, 0x2}, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$USBDEVFS_CONNECTINFO(r9, 0x40085511, &(0x7f0000000700)) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) (async) io_uring_enter(r12, 0x7fd4, 0x9bda, 0x1, &(0x7f0000000580)={[0xffffffffffffffe1]}, 0x8) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) 22:13:22 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d39, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000200)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r4, &(0x7f0000000300)=""/150, 0x96) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:23 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) r4 = socket$isdn(0x22, 0x3, 0x23) splice(r3, &(0x7f0000000000)=0x1, r4, &(0x7f0000000200), 0x8001, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r5 = syz_open_dev$audion(&(0x7f0000000240), 0xfff, 0x101000) syz_io_uring_setup(0x5e6, &(0x7f0000000280)={0x0, 0xe76a, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x80086601, &(0x7f0000000040)={0x4}) 22:13:23 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async, rerun: 64) close(r3) (rerun: 64) r4 = socket$isdn(0x22, 0x3, 0x23) splice(r3, &(0x7f0000000000)=0x1, r4, &(0x7f0000000200), 0x8001, 0x2) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r5 = syz_open_dev$audion(&(0x7f0000000240), 0xfff, 0x101000) syz_io_uring_setup(0x5e6, &(0x7f0000000280)={0x0, 0xe76a, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0x801c581f, &(0x7f0000000040)={0x4}) 22:13:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc0045878, &(0x7f0000000040)={0x4}) 22:13:24 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d39, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r5) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000200)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) (async) read$dsp(r4, &(0x7f0000000300)=""/150, 0x96) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:24 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x3b8, 0x0, 0xffffffff, 0x0, 0x3b8, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@hashlimit2={{0x150}, {'veth0_virt_wifi\x00', {0x400, 0x2, 0x43, 0x6b1, 0x4, 0x80, 0x6, 0x78, 0x8}, {0x2000000000000000}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @empty, @gre_key=0x7, @port=0x4e20}}}}, {{@ip={@loopback, @local, 0xfffefe, 0xff, 'team_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x5c, 0x0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x2, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @gre_key=0x8, @icmp_id=0x68}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0xff000000, 'geneve0\x00', '\x00', {}, {}, 0x145, 0x46294f55495f99, 0x52}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @gre_key=0xa1, @gre_key=0x7fff}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x44e, {0x80000001}}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x0, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x15}, @gre_key, @gre_key=0x291}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000007961fc57fa7115ff0000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000800)) 22:13:24 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) write$dsp(r5, &(0x7f0000000000)="e0b7b82340de058c22a2a43336bc595a16016ccd04", 0x15) (async) write$dsp(r5, &(0x7f0000000000)="e0b7b82340de058c22a2a43336bc595a16016ccd04", 0x15) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc0045878, &(0x7f0000000040)={0x4}) 22:13:24 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) (async) r4 = socket$isdn(0x22, 0x3, 0x23) splice(r3, &(0x7f0000000000)=0x1, r4, &(0x7f0000000200), 0x8001, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r5 = syz_open_dev$audion(&(0x7f0000000240), 0xfff, 0x101000) syz_io_uring_setup(0x5e6, &(0x7f0000000280)={0x0, 0xe76a, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:13:24 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x3b8, 0x0, 0xffffffff, 0x0, 0x3b8, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@hashlimit2={{0x150}, {'veth0_virt_wifi\x00', {0x400, 0x2, 0x43, 0x6b1, 0x4, 0x80, 0x6, 0x78, 0x8}, {0x2000000000000000}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @empty, @gre_key=0x7, @port=0x4e20}}}}, {{@ip={@loopback, @local, 0xfffefe, 0xff, 'team_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x5c, 0x0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x2, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @gre_key=0x8, @icmp_id=0x68}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0xff000000, 'geneve0\x00', '\x00', {}, {}, 0x145, 0x46294f55495f99, 0x52}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @gre_key=0xa1, @gre_key=0x7fff}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x44e, {0x80000001}}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x0, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x15}, @gre_key, @gre_key=0x291}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000007961fc57fa7115ff0000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async, rerun: 32) r2 = dup(r1) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000800)) 22:13:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc008ae67, &(0x7f0000000040)={0x4}) 22:13:24 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x69010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r9 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r10}}) syz_io_uring_setup(0x51af, &(0x7f0000000640)={0x0, 0xe77, 0x2, 0x3, 0x2bf, 0x0, r6}, &(0x7f0000000380), &(0x7f00000005c0)) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0xc000000, &(0x7f00000004c0)="35681d92c34237c1243326271266f93cb9e97692ae59daa0695ace3a54acb1b4cbc637b9efc85052d41e069c10473a9c55e7aefdea0bd722c3025232ee6165c590385aec1e82202ce0bb53d0635c07bac4d80a23ffdde70a78c1b6a3a276bf7cb8d8938a27185f60bc031bc386e936897f10b661f14e8f14b867953133ccab254336de5756ef32188c5192007338c9406f945d81e3ef543366d93f7acf3309191ef49d0b971906e4832bc09b4ac5b38bd1e8197c4a505b5cd09ccb6722d629cb3878c81695f2a708d4eca281f1b5ea5ba2ca77299558c03227ec8646024a89f3245fcb9b1af21247c50627d6", 0xec, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/fib_triestat\x00') read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc0189436, &(0x7f0000000040)={0x4}) 22:13:25 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x3b8, 0x0, 0xffffffff, 0x0, 0x3b8, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@hashlimit2={{0x150}, {'veth0_virt_wifi\x00', {0x400, 0x2, 0x43, 0x6b1, 0x4, 0x80, 0x6, 0x78, 0x8}, {0x2000000000000000}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @empty, @gre_key=0x7, @port=0x4e20}}}}, {{@ip={@loopback, @local, 0xfffefe, 0xff, 'team_slave_1\x00', 'pim6reg\x00', {}, {0xff}, 0x5c, 0x0, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x2, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @gre_key=0x8, @icmp_id=0x68}}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0x0, 0xff000000, 'geneve0\x00', '\x00', {}, {}, 0x145, 0x46294f55495f99, 0x52}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @gre_key=0xa1, @gre_key=0x7fff}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x44e, {0x80000001}}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x0, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x15}, @gre_key, @gre_key=0x291}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000007961fc57fa7115ff0000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async, rerun: 64) r2 = dup(r1) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000800)) 22:13:25 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x4d39, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x4d39, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, 0x2}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) close(r5) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000200)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r4, &(0x7f0000000300)=""/150, 0x96) (async) read$dsp(r4, &(0x7f0000000300)=""/150, 0x96) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:25 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x675e, &(0x7f00000008c0)={0x0, 0x1480, 0x20, 0x3, 0x143}, &(0x7f00000007c0), &(0x7f0000000940)) sendfile(r0, r5, &(0x7f0000000000)=0xc873, 0xff) syz_io_uring_submit(r3, r4, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0xcdcc9e35dcf453ea, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="6a7058dd7079373a535598", 0xb}], 0x1, &(0x7f0000000640)=[{0x98, 0x10d, 0x25, "2d917441f1a6e5663856a7690826ccde20b6b19f48224c0713ba48cb890eee6c00f4d45e6686407f34588925401e4903214aac52dcfdc36636dd98ad2d832556892fb1899089add022823eeb4505de49531ea2d172d2a4d59cb8e4027c0bb100856688b5d085d97ffa63753ab54a58057050a7090cd8b099107cc61f41a479584cb62004e2d6c0b5"}, {0x10, 0x84, 0x401}, {0x58, 0x0, 0xd71, "790afc7ad8a8efe155d6ce6d55b45d293e5fbdec1039664e7b3a76e36c753e1bf437153a6bc49d797044dff0bfa168f1dd9fed423c59d68b5d94076384e5795654a33798"}], 0x100}, 0x0, 0x20000004, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x4, 0xfc, 0x1, 0x1, 0x8, 0x1a00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050890}, 0x2000c000) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x6b80, &(0x7f0000000840)={0x0, 0x8, 0x4c2, 0x4}, &(0x7f0000000200), &(0x7f0000000780)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:13:25 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x69010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r9 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r10}}) (async, rerun: 32) syz_io_uring_setup(0x51af, &(0x7f0000000640)={0x0, 0xe77, 0x2, 0x3, 0x2bf, 0x0, r6}, &(0x7f0000000380), &(0x7f00000005c0)) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0xc000000, &(0x7f00000004c0)="35681d92c34237c1243326271266f93cb9e97692ae59daa0695ace3a54acb1b4cbc637b9efc85052d41e069c10473a9c55e7aefdea0bd722c3025232ee6165c590385aec1e82202ce0bb53d0635c07bac4d80a23ffdde70a78c1b6a3a276bf7cb8d8938a27185f60bc031bc386e936897f10b661f14e8f14b867953133ccab254336de5756ef32188c5192007338c9406f945d81e3ef543366d93f7acf3309191ef49d0b971906e4832bc09b4ac5b38bd1e8197c4a505b5cd09ccb6722d629cb3878c81695f2a708d4eca281f1b5ea5ba2ca77299558c03227ec8646024a89f3245fcb9b1af21247c50627d6", 0xec, 0x0, 0x1, {0x0, r10}}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/fib_triestat\x00') (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="f053dc363ce2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863c768b526f6e0cf0e8582fbb7ad51a8ede9d1837901000000000000000e22c730fcf3dcd9a2d7011f0db68e999f75c5ecb6aa3675dc680f49b8bc29753b5c20855ac8b3f554f0c250c735c593a000672e0436fc68651041260a76301d8341ce4a65bdeaa09b99c5d6a5dc70fd95d854574960ded21aceb3ea1b77160800a6b9f988b5aa178cf6bdfc3c94d832ab163611a3601de0f28002fb6c14c325b22f040cb84441f3a63ef1f956cfa7447e98fc4e8b54c99b2c2dbdd07074fd6f4ecaf13b62e2e439f009"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="c4e149ee4f99c4223d36781826c14b0092b911030000b80e000000ba000000000f30410f01c3b9800000c00f3235004000000f306666400f72f0b1b9800000c00f3235000800000f30f30f30656742f4", 0x50}], 0x1, 0x0, &(0x7f0000000400), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="66b8000001000f23c80f21f866350000b0000f23f826f20f005e5f0f01c90f320f2e4e09a70f01c21edb90634566b9800000c00f326635002000000f30", 0x3d}], 0x1, 0x5, &(0x7f0000000240)=[@cr4, @cstype3], 0x2) 22:13:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000040)={0x4}) 22:13:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22:13:25 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x69010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r6 = syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r9 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r10}}) syz_io_uring_setup(0x51af, &(0x7f0000000640)={0x0, 0xe77, 0x2, 0x3, 0x2bf, 0x0, r6}, &(0x7f0000000380), &(0x7f00000005c0)) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0xc000000, &(0x7f00000004c0)="35681d92c34237c1243326271266f93cb9e97692ae59daa0695ace3a54acb1b4cbc637b9efc85052d41e069c10473a9c55e7aefdea0bd722c3025232ee6165c590385aec1e82202ce0bb53d0635c07bac4d80a23ffdde70a78c1b6a3a276bf7cb8d8938a27185f60bc031bc386e936897f10b661f14e8f14b867953133ccab254336de5756ef32188c5192007338c9406f945d81e3ef543366d93f7acf3309191ef49d0b971906e4832bc09b4ac5b38bd1e8197c4a505b5cd09ccb6722d629cb3878c81695f2a708d4eca281f1b5ea5ba2ca77299558c03227ec8646024a89f3245fcb9b1af21247c50627d6", 0xec, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/fib_triestat\x00') read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x69010, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000200)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_io_uring_submit(r7, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r10}}) (async) syz_io_uring_setup(0x51af, &(0x7f0000000640)={0x0, 0xe77, 0x2, 0x3, 0x2bf, 0x0, r6}, &(0x7f0000000380), &(0x7f00000005c0)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0xc000000, &(0x7f00000004c0)="35681d92c34237c1243326271266f93cb9e97692ae59daa0695ace3a54acb1b4cbc637b9efc85052d41e069c10473a9c55e7aefdea0bd722c3025232ee6165c590385aec1e82202ce0bb53d0635c07bac4d80a23ffdde70a78c1b6a3a276bf7cb8d8938a27185f60bc031bc386e936897f10b661f14e8f14b867953133ccab254336de5756ef32188c5192007338c9406f945d81e3ef543366d93f7acf3309191ef49d0b971906e4832bc09b4ac5b38bd1e8197c4a505b5cd09ccb6722d629cb3878c81695f2a708d4eca281f1b5ea5ba2ca77299558c03227ec8646024a89f3245fcb9b1af21247c50627d6", 0xec, 0x0, 0x1, {0x0, r10}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/fib_triestat\x00') (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc020660b, &(0x7f0000000040)={0x4}) 22:13:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6773, &(0x7f0000000540)={0x0, 0xc08e, 0x20, 0x2, 0x268, 0x0, r6}, &(0x7f00000004c0), &(0x7f00000005c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x87, 0xfffa, 0xffffffe0, 0x2, 0x8, 0x40, "30caedb6d1fe80383ba07f12054e74c0c6e61a55036a1c8792dc3f671504fe8a186e653a251b2ed10a3c60fb8bc7681e884fb3a3a8cfd1fd197019f2d2c7435fac657db8390ee293b3c27d0cf61f0bee03622b572f81e83130dd581c26ef243d626d34722d891fba2f848507d110efd03139a5f172ffb48c83a796371a47cb1b9d58e7a6553c4b"}}, 0x19f) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x10240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000840)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r9}, r10, 0x4, @inherit={0x58, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x1ff, {0x10, 0x1, 0x8, 0xffff, 0x7f}, [0x5, 0x97b]}}, @devid}) 22:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f08000000921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x2}) 22:13:26 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_io_uring_setup(0xfd1, &(0x7f0000000200)={0x0, 0xf109, 0x80, 0x1, 0x0, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:26 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x675e, &(0x7f00000008c0)={0x0, 0x1480, 0x20, 0x3, 0x143}, &(0x7f00000007c0), &(0x7f0000000940)) (async) syz_io_uring_setup(0x675e, &(0x7f00000008c0)={0x0, 0x1480, 0x20, 0x3, 0x143}, &(0x7f00000007c0), &(0x7f0000000940)) sendfile(r0, r5, &(0x7f0000000000)=0xc873, 0xff) syz_io_uring_submit(r3, r4, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0xcdcc9e35dcf453ea, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="6a7058dd7079373a535598", 0xb}], 0x1, &(0x7f0000000640)=[{0x98, 0x10d, 0x25, "2d917441f1a6e5663856a7690826ccde20b6b19f48224c0713ba48cb890eee6c00f4d45e6686407f34588925401e4903214aac52dcfdc36636dd98ad2d832556892fb1899089add022823eeb4505de49531ea2d172d2a4d59cb8e4027c0bb100856688b5d085d97ffa63753ab54a58057050a7090cd8b099107cc61f41a479584cb62004e2d6c0b5"}, {0x10, 0x84, 0x401}, {0x58, 0x0, 0xd71, "790afc7ad8a8efe155d6ce6d55b45d293e5fbdec1039664e7b3a76e36c753e1bf437153a6bc49d797044dff0bfa168f1dd9fed423c59d68b5d94076384e5795654a33798"}], 0x100}, 0x0, 0x20000004, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x4, 0xfc, 0x1, 0x1, 0x8, 0x1a00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050890}, 0x2000c000) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x6b80, &(0x7f0000000840)={0x0, 0x8, 0x4c2, 0x4}, &(0x7f0000000200), &(0x7f0000000780)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x3}) 22:13:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6773, &(0x7f0000000540)={0x0, 0xc08e, 0x20, 0x2, 0x268, 0x0, r6}, &(0x7f00000004c0), &(0x7f00000005c0)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x87, 0xfffa, 0xffffffe0, 0x2, 0x8, 0x40, "30caedb6d1fe80383ba07f12054e74c0c6e61a55036a1c8792dc3f671504fe8a186e653a251b2ed10a3c60fb8bc7681e884fb3a3a8cfd1fd197019f2d2c7435fac657db8390ee293b3c27d0cf61f0bee03622b572f81e83130dd581c26ef243d626d34722d891fba2f848507d110efd03139a5f172ffb48c83a796371a47cb1b9d58e7a6553c4b"}}, 0x19f) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x10240, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000840)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r9}, r10, 0x4, @inherit={0x58, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x1ff, {0x10, 0x1, 0x8, 0xffff, 0x7f}, [0x5, 0x97b]}}, @devid}) 22:13:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="f053dc363ce2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863c768b526f6e0cf0e8582fbb7ad51a8ede9d1837901000000000000000e22c730fcf3dcd9a2d7011f0db68e999f75c5ecb6aa3675dc680f49b8bc29753b5c20855ac8b3f554f0c250c735c593a000672e0436fc68651041260a76301d8341ce4a65bdeaa09b99c5d6a5dc70fd95d854574960ded21aceb3ea1b77160800a6b9f988b5aa178cf6bdfc3c94d832ab163611a3601de0f28002fb6c14c325b22f040cb84441f3a63ef1f956cfa7447e98fc4e8b54c99b2c2dbdd07074fd6f4ecaf13b62e2e439f009"], 0x208e24b) (async, rerun: 64) r2 = dup(r1) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="c4e149ee4f99c4223d36781826c14b0092b911030000b80e000000ba000000000f30410f01c3b9800000c00f3235004000000f306666400f72f0b1b9800000c00f3235000800000f30f30f30656742f4", 0x50}], 0x1, 0x0, &(0x7f0000000400), 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="66b8000001000f23c80f21f866350000b0000f23f826f20f005e5f0f01c90f320f2e4e09a70f01c21edb90634566b9800000c00f326635002000000f30", 0x3d}], 0x1, 0x5, &(0x7f0000000240)=[@cr4, @cstype3], 0x2) 22:13:26 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_io_uring_setup(0xfd1, &(0x7f0000000200)={0x0, 0xf109, 0x80, 0x1, 0x0, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6773, &(0x7f0000000540)={0x0, 0xc08e, 0x20, 0x2, 0x268, 0x0, r6}, &(0x7f00000004c0), &(0x7f00000005c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x87, 0xfffa, 0xffffffe0, 0x2, 0x8, 0x40, "30caedb6d1fe80383ba07f12054e74c0c6e61a55036a1c8792dc3f671504fe8a186e653a251b2ed10a3c60fb8bc7681e884fb3a3a8cfd1fd197019f2d2c7435fac657db8390ee293b3c27d0cf61f0bee03622b572f81e83130dd581c26ef243d626d34722d891fba2f848507d110efd03139a5f172ffb48c83a796371a47cb1b9d58e7a6553c4b"}}, 0x19f) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x10240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000840)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r9}, r10, 0x4, @inherit={0x58, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x1ff, {0x10, 0x1, 0x8, 0xffff, 0x7f}, [0x5, 0x97b]}}, @devid}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x6773, &(0x7f0000000540)={0x0, 0xc08e, 0x20, 0x2, 0x268, 0x0, r6}, &(0x7f00000004c0), &(0x7f00000005c0)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) write$UHID_CREATE2(r8, &(0x7f0000000640)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x87, 0xfffa, 0xffffffe0, 0x2, 0x8, 0x40, "30caedb6d1fe80383ba07f12054e74c0c6e61a55036a1c8792dc3f671504fe8a186e653a251b2ed10a3c60fb8bc7681e884fb3a3a8cfd1fd197019f2d2c7435fac657db8390ee293b3c27d0cf61f0bee03622b572f81e83130dd581c26ef243d626d34722d891fba2f848507d110efd03139a5f172ffb48c83a796371a47cb1b9d58e7a6553c4b"}}, 0x19f) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x10240, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000840)) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000900)={{r9}, r10, 0x4, @inherit={0x58, &(0x7f0000000880)={0x0, 0x2, 0x2, 0x1ff, {0x10, 0x1, 0x8, 0xffff, 0x7f}, [0x5, 0x97b]}}, @devid}) (async) 22:13:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca90000345d4dbb8f0afe4d3d92186300"/30], 0x208e24b) r2 = dup(r1) r3 = dup3(r2, r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) r9 = syz_open_dev$audion(&(0x7f0000000240), 0x0, 0x14d000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baf80c66b87a97068f66efbafc0ced818f0000a00066b99c0200000fed36f30fa6c866b8010000000f01d966b98505000066b81117cd5566bab96c5d4d0f894848211cf30f2b3e3500b832010f00d80fc7bb0f00"}], 0x1, 0x2, 0x0, 0x9) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000007000/0x2000)=nil, 0x2000}}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x5}) 22:13:27 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x675e, &(0x7f00000008c0)={0x0, 0x1480, 0x20, 0x3, 0x143}, &(0x7f00000007c0), &(0x7f0000000940)) (async) sendfile(r0, r5, &(0x7f0000000000)=0xc873, 0xff) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000740)=@IORING_OP_SENDMSG={0x9, 0xcdcc9e35dcf453ea, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="6a7058dd7079373a535598", 0xb}], 0x1, &(0x7f0000000640)=[{0x98, 0x10d, 0x25, "2d917441f1a6e5663856a7690826ccde20b6b19f48224c0713ba48cb890eee6c00f4d45e6686407f34588925401e4903214aac52dcfdc36636dd98ad2d832556892fb1899089add022823eeb4505de49531ea2d172d2a4d59cb8e4027c0bb100856688b5d085d97ffa63753ab54a58057050a7090cd8b099107cc61f41a479584cb62004e2d6c0b5"}, {0x10, 0x84, 0x401}, {0x58, 0x0, 0xd71, "790afc7ad8a8efe155d6ce6d55b45d293e5fbdec1039664e7b3a76e36c753e1bf437153a6bc49d797044dff0bfa168f1dd9fed423c59d68b5d94076384e5795654a33798"}], 0x100}, 0x0, 0x20000004, 0x1}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x4, 0xfc, 0x1, 0x1, 0x8, 0x1a00}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050890}, 0x2000c000) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r13, r12, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x6b80, &(0x7f0000000840)={0x0, 0x8, 0x4c2, 0x4}, &(0x7f0000000200), &(0x7f0000000780)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:27 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_io_uring_setup(0xfd1, &(0x7f0000000200)={0x0, 0xf109, 0x80, 0x1, 0x0, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="f053dc363ce2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863c768b526f6e0cf0e8582fbb7ad51a8ede9d1837901000000000000000e22c730fcf3dcd9a2d7011f0db68e999f75c5ecb6aa3675dc680f49b8bc29753b5c20855ac8b3f554f0c250c735c593a000672e0436fc68651041260a76301d8341ce4a65bdeaa09b99c5d6a5dc70fd95d854574960ded21aceb3ea1b77160800a6b9f988b5aa178cf6bdfc3c94d832ab163611a3601de0f28002fb6c14c325b22f040cb84441f3a63ef1f956cfa7447e98fc4e8b54c99b2c2dbdd07074fd6f4ecaf13b62e2e439f009"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000380)="c4e149ee4f99c4223d36781826c14b0092b911030000b80e000000ba000000000f30410f01c3b9800000c00f3235004000000f306666400f72f0b1b9800000c00f3235000800000f30f30f30656742f4", 0x50}], 0x1, 0x0, &(0x7f0000000400), 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="66b8000001000f23c80f21f866350000b0000f23f826f20f005e5f0f01c90f320f2e4e09a70f01c21edb90634566b9800000c00f326635002000000f30", 0x3d}], 0x1, 0x5, &(0x7f0000000240)=[@cr4, @cstype3], 0x2) 22:13:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x6}) 22:13:27 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) read$dsp(r3, &(0x7f0000000240)=""/29, 0x1d) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:27 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40000001c7882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x1010, r4, 0x0) 22:13:27 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x7}) 22:13:27 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) read$dsp(r3, &(0x7f0000000240)=""/29, 0x1d) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) read$dsp(r3, &(0x7f0000000240)=""/29, 0x1d) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f053dca9ee5821ff7961fc57fa7115f20000345d4dbb8f0afe4d3d921863a5fcc722cecd015635939d1271be2a27d5b1028078b2"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x10000, 0x9f000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:28 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x7) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x10, 0x0, @fd_index=0x3, 0x9, 0xfffffffffffffffe, 0xe, 0x0, 0x0, {0x1}}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x8}) 22:13:28 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:28 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 64) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (rerun: 64) read$dsp(r3, &(0x7f0000000240)=""/29, 0x1d) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:28 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:28 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40000001c7882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x1010, r4, 0x0) 22:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x9}) 22:13:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f053dca9ee5821ff7961fc57fa7115f20000345d4dbb8f0afe4d3d921863a5fcc722cecd015635939d1271be2a27d5b1028078b2"], 0x208e24b) (async, rerun: 32) r2 = dup(r1) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x10000, 0x9f000}) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0xb}) 22:13:28 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r6, &(0x7f0000000000)={0x107804, 0x14b, 0x1c}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}) 22:13:28 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff]}, 0x0, 0x8) io_uring_setup(0x1643, &(0x7f0000000200)={0x0, 0xa328, 0x800, 0x1, 0xc, 0x0, r4}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x11}) 22:13:29 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x4dd2, &(0x7f0000000200)={0x0, 0x37c1, 0x4, 0x1, 0x142, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r6, &(0x7f00000004c0)=0x8, r7, &(0x7f0000000500)=0xffffffff, 0xbb, 0x0) 22:13:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 22:13:29 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40000001c7882, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40000001c7882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x1010, r4, 0x0) 22:13:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f053dca9ee5821ff7961fc57fa7115f20000345d4dbb8f0afe4d3d921863a5fcc722cecd015635939d1271be2a27d5b1028078b2"], 0x208e24b) (async, rerun: 32) r2 = dup(r1) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x10000, 0x9f000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 678.811850][T19641] FAULT_INJECTION: forcing a failure. [ 678.811850][T19641] name failslab, interval 1, probability 0, space 0, times 0 [ 678.839456][T19641] CPU: 0 PID: 19641 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 678.849691][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 678.859791][T19641] Call Trace: [ 678.863120][T19641] [ 678.866081][T19641] dump_stack_lvl+0x125/0x1b0 [ 678.870834][T19641] should_fail_ex+0x496/0x5b0 [ 678.875585][T19641] should_failslab+0x9/0x20 [ 678.880139][T19641] __kmem_cache_alloc_node+0x6b/0x310 [ 678.885565][T19641] ? tomoyo_realpath_from_path+0xb9/0x710 [ 678.891357][T19641] ? tomoyo_realpath_from_path+0xb9/0x710 [ 678.897140][T19641] __kmalloc+0x4f/0x100 [ 678.901361][T19641] tomoyo_realpath_from_path+0xb9/0x710 [ 678.906963][T19641] ? tomoyo_profile+0x47/0x60 [ 678.911683][T19641] tomoyo_path_number_perm+0x241/0x580 [ 678.917195][T19641] ? tomoyo_path_number_perm+0x22e/0x580 [ 678.923074][T19641] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 678.928983][T19641] ? __fget_files+0x1c1/0x340 [ 678.933715][T19641] ? reacquire_held_locks+0x4b0/0x4b0 [ 678.939183][T19641] security_file_ioctl+0x72/0xb0 [ 678.944210][T19641] __x64_sys_ioctl+0xbb/0x210 [ 678.948982][T19641] do_syscall_64+0x3f/0x110 [ 678.953547][T19641] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 678.959491][T19641] RIP: 0033:0x7f430967cae9 [ 678.963950][T19641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 678.983615][T19641] RSP: 002b:00007f430a49c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.992164][T19641] RAX: ffffffffffffffda RBX: 00007f430979bf80 RCX: 00007f430967cae9 [ 679.000261][T19641] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 22:13:29 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000640)={{r0}, "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"}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) [ 679.009235][T19641] RBP: 00007f430a49c120 R08: 0000000000000000 R09: 0000000000000000 [ 679.017331][T19641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.025340][T19641] R13: 000000000000000b R14: 00007f430979bf80 R15: 00007f43098bfa48 [ 679.033369][T19641] 22:13:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) [ 679.058003][T19641] ERROR: Out of memory at tomoyo_realpath_from_path. 22:13:29 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r6, &(0x7f0000000000)={0x107804, 0x14b, 0x1c}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}) 22:13:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 2) 22:13:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x2}) 22:13:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0000400000f9d0fc8191486d4a4309006e6bdbf1ec915b48f5e5707acd468cb5d04408b846988fa6861cfe02521560c0b763cb2afc8f5d63282d1778027bf307d030d66afe97ef73a012c370c2793b36a8ce8f0ef7d3c2a6"]) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000080)="6766c7442400bdde00006766c74424020c0000006766c744240600000000670f011c24673e0f01c40f35ba200066b80cabd1e266efc1980b0000baf80c66b85c5a5d8d66efbafc0c66b80040000066efb864000f00d03e76f30f20e06635000002000f22e00f01c9", 0x68}], 0x1, 0x0, &(0x7f0000000280)=[@flags={0x3, 0x18240}], 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:30 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000640)={{r0}, "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"}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:30 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x4dd2, &(0x7f0000000200)={0x0, 0x37c1, 0x4, 0x1, 0x142, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r6, &(0x7f00000004c0)=0x8, r7, &(0x7f0000000500)=0xffffffff, 0xbb, 0x0) [ 679.592845][T19664] FAULT_INJECTION: forcing a failure. [ 679.592845][T19664] name failslab, interval 1, probability 0, space 0, times 0 [ 679.632446][T19664] CPU: 1 PID: 19664 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 679.642593][T19664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 679.652689][T19664] Call Trace: [ 679.655989][T19664] [ 679.658948][T19664] dump_stack_lvl+0x125/0x1b0 [ 679.663681][T19664] should_fail_ex+0x496/0x5b0 [ 679.668426][T19664] should_failslab+0x9/0x20 [ 679.672976][T19664] __kmem_cache_alloc_node+0x6b/0x310 [ 679.678390][T19664] ? tomoyo_encode2+0x100/0x3d0 [ 679.683304][T19664] ? tomoyo_encode2+0x100/0x3d0 [ 679.688207][T19664] __kmalloc+0x4f/0x100 [ 679.692417][T19664] tomoyo_encode2+0x100/0x3d0 [ 679.697154][T19664] tomoyo_encode+0x29/0x50 [ 679.701627][T19664] tomoyo_realpath_from_path+0x196/0x710 [ 679.707313][T19664] ? tomoyo_profile+0x47/0x60 [ 679.712039][T19664] tomoyo_path_number_perm+0x241/0x580 [ 679.717555][T19664] ? tomoyo_path_number_perm+0x22e/0x580 [ 679.723244][T19664] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 679.729142][T19664] ? __fget_files+0x1c1/0x340 [ 679.731945][T19679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 679.733852][T19664] ? reacquire_held_locks+0x4b0/0x4b0 [ 679.747859][T19664] security_file_ioctl+0x72/0xb0 [ 679.752866][T19664] __x64_sys_ioctl+0xbb/0x210 [ 679.757606][T19664] do_syscall_64+0x3f/0x110 [ 679.762167][T19664] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 679.768110][T19664] RIP: 0033:0x7f430967cae9 [ 679.772563][T19664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 22:13:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x3}) [ 679.792393][T19664] RSP: 002b:00007f430a49c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.800859][T19664] RAX: ffffffffffffffda RBX: 00007f430979bf80 RCX: 00007f430967cae9 [ 679.808962][T19664] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 679.817059][T19664] RBP: 00007f430a49c120 R08: 0000000000000000 R09: 0000000000000000 [ 679.825074][T19664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.833090][T19664] R13: 000000000000000b R14: 00007f430979bf80 R15: 00007f43098bfa48 [ 679.841127][T19664] [ 679.873654][T19664] ERROR: Out of memory at tomoyo_realpath_from_path. 22:13:30 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r6, &(0x7f0000000000)={0x107804, 0x14b, 0x1c}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345}) 22:13:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0000400000f9d0fc8191486d4a4309006e6bdbf1ec915b48f5e5707acd468cb5d04408b846988fa6861cfe02521560c0b763cb2afc8f5d63282d1778027bf307d030d66afe97ef73a012c370c2793b36a8ce8f0ef7d3c2a6"]) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000080)="6766c7442400bdde00006766c74424020c0000006766c744240600000000670f011c24673e0f01c40f35ba200066b80cabd1e266efc1980b0000baf80c66b85c5a5d8d66efbafc0c66b80040000066efb864000f00d03e76f30f20e06635000002000f22e00f01c9", 0x68}], 0x1, 0x0, &(0x7f0000000280)=[@flags={0x3, 0x18240}], 0x1) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:30 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000640)={{r0}, "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"}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000640)={{r0}, "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"}) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 3) 22:13:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x4}) 22:13:31 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x4dd2, &(0x7f0000000200)={0x0, 0x37c1, 0x4, 0x1, 0x142, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r6) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r6, &(0x7f00000004c0)=0x8, r7, &(0x7f0000000500)=0xffffffff, 0xbb, 0x0) 22:13:31 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) dup(r5) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) write$dsp(r4, &(0x7f0000000000)="f3e80ee30b0fb8d769157b4421564538c68b8c23ff3771316d995185f8593b7b5bdcf4d0d61a042a61af3cffc3ccc00291d6c077e5", 0x35) 22:13:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0000400000f9d0fc8191486d4a4309006e6bdbf1ec915b48f5e5707acd468cb5d04408b846988fa6861cfe02521560c0b763cb2afc8f5d63282d1778027bf307d030d66afe97ef73a012c370c2793b36a8ce8f0ef7d3c2a6"]) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000080)="6766c7442400bdde00006766c74424020c0000006766c744240600000000670f011c24673e0f01c40f35ba200066b80cabd1e266efc1980b0000baf80c66b85c5a5d8d66efbafc0c66b80040000066efb864000f00d03e76f30f20e06635000002000f22e00f01c9", 0x68}], 0x1, 0x0, &(0x7f0000000280)=[@flags={0x3, 0x18240}], 0x1) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 680.516850][T19704] FAULT_INJECTION: forcing a failure. [ 680.516850][T19704] name failslab, interval 1, probability 0, space 0, times 0 [ 680.578946][T19704] CPU: 1 PID: 19704 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 680.589095][T19704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 680.599195][T19704] Call Trace: [ 680.602625][T19704] [ 680.605598][T19704] dump_stack_lvl+0x125/0x1b0 [ 680.610343][T19704] should_fail_ex+0x496/0x5b0 [ 680.615103][T19704] should_failslab+0x9/0x20 [ 680.619665][T19704] __kmem_cache_alloc_node+0x6b/0x310 [ 680.625086][T19704] ? kvmalloc_node+0x99/0x1a0 [ 680.629796][T19704] ? kvmalloc_node+0x99/0x1a0 [ 680.634515][T19704] __kmalloc_node+0x52/0x110 [ 680.639157][T19704] kvmalloc_node+0x99/0x1a0 [ 680.643703][T19704] __kvm_mmu_topup_memory_cache+0x322/0x480 [ 680.649623][T19704] ? kvm_hv_setup_tsc_page+0x29b/0x8d0 [ 680.655108][T19704] ? vcpu_run+0x1ac9/0x6080 [ 680.659640][T19704] mmu_topup_memory_caches+0x22/0xd0 [ 680.664950][T19704] kvm_mmu_load+0xda/0x1fe0 [ 680.669481][T19704] ? mark_held_locks+0x9f/0xe0 [ 680.674275][T19704] ? vmx_flush_tlb_guest+0x113/0x2e0 [ 680.679591][T19704] ? invvpid_error+0xb0/0xb0 [ 680.684216][T19704] ? kvm_mmu_after_set_cpuid+0x440/0x440 [ 680.689879][T19704] ? __apic_update_ppr+0x350/0x350 [ 680.695011][T19704] ? record_steal_time+0x78/0xb20 [ 680.700060][T19704] vcpu_run+0x3d00/0x6080 [ 680.704437][T19704] ? kvm_arch_vcpu_runnable+0x720/0x720 [ 680.710019][T19704] ? __local_bh_enable_ip+0xa4/0x120 [ 680.715339][T19704] ? lockdep_hardirqs_on+0x7d/0x100 [ 680.720568][T19704] ? fpu_swap_kvm_fpstate+0x1c9/0x420 [ 680.725967][T19704] ? __local_bh_enable_ip+0xa4/0x120 [ 680.731277][T19704] ? kvm_arch_vcpu_ioctl_run+0x42e/0x1660 [ 680.737029][T19704] kvm_arch_vcpu_ioctl_run+0x42e/0x1660 [ 680.742612][T19704] kvm_vcpu_ioctl+0x59f/0x1040 [ 680.747395][T19704] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 680.752185][T19704] ? __fget_files+0x1c1/0x340 [ 680.756883][T19704] ? reacquire_held_locks+0x4b0/0x4b0 [ 680.762299][T19704] ? bpf_lsm_file_ioctl+0x9/0x10 [ 680.767267][T19704] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 680.772049][T19704] __x64_sys_ioctl+0x18f/0x210 [ 680.776930][T19704] do_syscall_64+0x3f/0x110 [ 680.781461][T19704] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 680.787372][T19704] RIP: 0033:0x7f430967cae9 [ 680.791801][T19704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 680.811431][T19704] RSP: 002b:00007f430a49c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.819880][T19704] RAX: ffffffffffffffda RBX: 00007f430979bf80 RCX: 00007f430967cae9 [ 680.827874][T19704] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 680.835859][T19704] RBP: 00007f430a49c120 R08: 0000000000000000 R09: 0000000000000000 [ 680.843841][T19704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.851821][T19704] R13: 000000000000000b R14: 00007f430979bf80 R15: 00007f43098bfa48 [ 680.859820][T19704] 22:13:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x5}) 22:13:31 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 4) 22:13:31 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x6]}, 0x8, 0x80800) syz_io_uring_setup(0x9db, &(0x7f0000000300)={0x0, 0x6f67, 0x40, 0x0, 0x132, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000380)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x6}) 22:13:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000dca9eee2ff074dbb8f0afe4d3d921863e4c40d6566e1c2584f921fb6c55635952b37ebbb8c79e9d96ecc731de2e4d1ae2da41aaf0eabf52f6a6d949be9afbdf104d276"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e120813d28d2"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bc3748790078"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bbb7c040005f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8691c44d8a45"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8aa78d73a456"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 681.353385][T19738] FAULT_INJECTION: forcing a failure. [ 681.353385][T19738] name failslab, interval 1, probability 0, space 0, times 0 [ 681.384048][T19738] CPU: 1 PID: 19738 Comm: syz-executor.3 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 22:13:32 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r5) (async) dup(r5) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) write$dsp(r4, &(0x7f0000000000)="f3e80ee30b0fb8d769157b4421564538c68b8c23ff3771316d995185f8593b7b5bdcf4d0d61a042a61af3cffc3ccc00291d6c077e5", 0x35) [ 681.394200][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 681.404295][T19738] Call Trace: [ 681.407612][T19738] [ 681.410581][T19738] dump_stack_lvl+0x125/0x1b0 [ 681.415341][T19738] should_fail_ex+0x496/0x5b0 [ 681.420094][T19738] should_failslab+0x9/0x20 [ 681.424645][T19738] kmem_cache_alloc+0x69/0x380 [ 681.429462][T19738] __kvm_mmu_topup_memory_cache+0x19c/0x480 [ 681.435410][T19738] ? vcpu_run+0x1ac9/0x6080 [ 681.439976][T19738] mmu_topup_memory_caches+0x22/0xd0 [ 681.445322][T19738] kvm_mmu_load+0xda/0x1fe0 [ 681.449889][T19738] ? mark_held_locks+0x9f/0xe0 [ 681.454720][T19738] ? vmx_flush_tlb_guest+0x113/0x2e0 [ 681.460080][T19738] ? invvpid_error+0xb0/0xb0 [ 681.464729][T19738] ? kvm_mmu_after_set_cpuid+0x440/0x440 [ 681.470424][T19738] ? __apic_update_ppr+0x350/0x350 [ 681.475591][T19738] ? record_steal_time+0x78/0xb20 [ 681.480669][T19738] vcpu_run+0x3d00/0x6080 [ 681.485082][T19738] ? kvm_arch_vcpu_runnable+0x720/0x720 [ 681.490703][T19738] ? __local_bh_enable_ip+0xa4/0x120 [ 681.496042][T19738] ? lockdep_hardirqs_on+0x7d/0x100 [ 681.501292][T19738] ? fpu_swap_kvm_fpstate+0x1c9/0x420 [ 681.506730][T19738] ? __local_bh_enable_ip+0xa4/0x120 [ 681.512176][T19738] ? kvm_arch_vcpu_ioctl_run+0x42e/0x1660 [ 681.517962][T19738] kvm_arch_vcpu_ioctl_run+0x42e/0x1660 [ 681.523587][T19738] kvm_vcpu_ioctl+0x59f/0x1040 [ 681.528413][T19738] ? kvm_vcpu_kick+0x4d0/0x4d0 [ 681.533245][T19738] ? __fget_files+0x1c1/0x340 [ 681.537996][T19738] ? reacquire_held_locks+0x4b0/0x4b0 [ 681.543552][T19738] ? bpf_lsm_file_ioctl+0x9/0x10 [ 681.548577][T19738] ? kvm_vcpu_kick+0x4d0/0x4d0 22:13:32 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) close(r5) dup(r5) (async) dup(r5) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) write$dsp(r4, &(0x7f0000000000)="f3e80ee30b0fb8d769157b4421564538c68b8c23ff3771316d995185f8593b7b5bdcf4d0d61a042a61af3cffc3ccc00291d6c077e5", 0x35) [ 681.553401][T19738] __x64_sys_ioctl+0x18f/0x210 [ 681.558260][T19738] do_syscall_64+0x3f/0x110 [ 681.562827][T19738] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 681.568778][T19738] RIP: 0033:0x7f430967cae9 [ 681.573238][T19738] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 681.592908][T19738] RSP: 002b:00007f430a47b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.601374][T19738] RAX: ffffffffffffffda RBX: 00007f430979c050 RCX: 00007f430967cae9 [ 681.609397][T19738] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 681.617497][T19738] RBP: 00007f430a47b120 R08: 0000000000000000 R09: 0000000000000000 [ 681.625513][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.633521][T19738] R13: 000000000000006e R14: 00007f430979c050 R15: 00007f43098bfa48 [ 681.641549][T19738] 22:13:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x7}) 22:13:32 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:32 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x6]}, 0x8, 0x80800) (rerun: 64) syz_io_uring_setup(0x9db, &(0x7f0000000300)={0x0, 0x6f67, 0x40, 0x0, 0x132, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000380)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 5) 22:13:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x300}) 22:13:32 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:32 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x6]}, 0x8, 0x80800) syz_io_uring_setup(0x9db, &(0x7f0000000300)={0x0, 0x6f67, 0x40, 0x0, 0x132, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000380)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x500}) 22:13:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:33 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r2, &(0x7f00000000c0)=""/189, 0xbd) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x20000003, 0x43}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x9, 0x2}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000240)={0x40, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000080)) 22:13:33 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x3403, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) r5 = syz_io_uring_complete(r2) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x42, 0x0, @fd=r5, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r8, r9}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r5, 0x0, &(0x7f0000000640)="d8e117210de73e78989a6cbb110f9347d0fa1cb87b1e57d7cf09dce826b1fe9fa8eab7750fcc4b5fecc577783c61e2b8403f036a9abb4b646566699814d50cd7422ca2ca55d508f4b2be3d8b9d5a053e917bc6cb1fdb0e9fbab561e23ee5004356132a53da62d02d129d0102ee26be698e21da0c064f5199dca44bdc70a31dd04edc4e2ecab829b4029e26d82c505fd17072a544afc69d4b5141ff53d2c58f4f4d505ae927a3b1b83cb85b227155226b75763e93c561964f169f66853b9df6bb11314a1c76e4b701804d203bf0be3db1dca32779273559a62d5a21367a63557e3b300424abf9e09361", 0xe9, 0x8094, 0x0, {0x0, r8}}) read$dsp(r5, &(0x7f00000003c0)=""/199, 0xc7) 22:13:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000dca9eee2ff074dbb8f0afe4d3d921863e4c40d6566e1c2584f921fb6c55635952b37ebbb8c79e9d96ecc731de2e4d1ae2da41aaf0eabf52f6a6d949be9afbdf104d276"], 0x208e24b) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000dca9eee2ff074dbb8f0afe4d3d921863e4c40d6566e1c2584f921fb6c55635952b37ebbb8c79e9d96ecc731de2e4d1ae2da41aaf0eabf52f6a6d949be9afbdf104d276"], 0x208e24b) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e120813d28d2"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bc3748790078"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bbb7c040005f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8691c44d8a45"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8aa78d73a456"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:33 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5c15, &(0x7f0000000200)={0x0, 0x5bce, 0x100, 0x3, 0x2e6, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x600}) 22:13:33 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x3403, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) r5 = syz_io_uring_complete(r2) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x42, 0x0, @fd=r5, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r8, r9}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r5, 0x0, &(0x7f0000000640)="d8e117210de73e78989a6cbb110f9347d0fa1cb87b1e57d7cf09dce826b1fe9fa8eab7750fcc4b5fecc577783c61e2b8403f036a9abb4b646566699814d50cd7422ca2ca55d508f4b2be3d8b9d5a053e917bc6cb1fdb0e9fbab561e23ee5004356132a53da62d02d129d0102ee26be698e21da0c064f5199dca44bdc70a31dd04edc4e2ecab829b4029e26d82c505fd17072a544afc69d4b5141ff53d2c58f4f4d505ae927a3b1b83cb85b227155226b75763e93c561964f169f66853b9df6bb11314a1c76e4b701804d203bf0be3db1dca32779273559a62d5a21367a63557e3b300424abf9e09361", 0xe9, 0x8094, 0x0, {0x0, r8}}) read$dsp(r5, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x3403, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000380)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) (async) syz_io_uring_complete(r2) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x42, 0x0, @fd=r5, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r8, r9}}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r7, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r5, 0x0, &(0x7f0000000640)="d8e117210de73e78989a6cbb110f9347d0fa1cb87b1e57d7cf09dce826b1fe9fa8eab7750fcc4b5fecc577783c61e2b8403f036a9abb4b646566699814d50cd7422ca2ca55d508f4b2be3d8b9d5a053e917bc6cb1fdb0e9fbab561e23ee5004356132a53da62d02d129d0102ee26be698e21da0c064f5199dca44bdc70a31dd04edc4e2ecab829b4029e26d82c505fd17072a544afc69d4b5141ff53d2c58f4f4d505ae927a3b1b83cb85b227155226b75763e93c561964f169f66853b9df6bb11314a1c76e4b701804d203bf0be3db1dca32779273559a62d5a21367a63557e3b300424abf9e09361", 0xe9, 0x8094, 0x0, {0x0, r8}}) (async) read$dsp(r5, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x700}) 22:13:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x2, 0x0) 22:13:33 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x3403, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) r5 = syz_io_uring_complete(r2) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) r9 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x42, 0x0, @fd=r5, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r8, r9}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r5, 0x0, &(0x7f0000000640)="d8e117210de73e78989a6cbb110f9347d0fa1cb87b1e57d7cf09dce826b1fe9fa8eab7750fcc4b5fecc577783c61e2b8403f036a9abb4b646566699814d50cd7422ca2ca55d508f4b2be3d8b9d5a053e917bc6cb1fdb0e9fbab561e23ee5004356132a53da62d02d129d0102ee26be698e21da0c064f5199dca44bdc70a31dd04edc4e2ecab829b4029e26d82c505fd17072a544afc69d4b5141ff53d2c58f4f4d505ae927a3b1b83cb85b227155226b75763e93c561964f169f66853b9df6bb11314a1c76e4b701804d203bf0be3db1dca32779273559a62d5a21367a63557e3b300424abf9e09361", 0xe9, 0x8094, 0x0, {0x0, r8}}) read$dsp(r5, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x3403, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000380)) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x8000000) (async) syz_io_uring_complete(r2) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r8}}) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x42, 0x0, @fd=r5, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r8, r9}}) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r7, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r5, 0x0, &(0x7f0000000640)="d8e117210de73e78989a6cbb110f9347d0fa1cb87b1e57d7cf09dce826b1fe9fa8eab7750fcc4b5fecc577783c61e2b8403f036a9abb4b646566699814d50cd7422ca2ca55d508f4b2be3d8b9d5a053e917bc6cb1fdb0e9fbab561e23ee5004356132a53da62d02d129d0102ee26be698e21da0c064f5199dca44bdc70a31dd04edc4e2ecab829b4029e26d82c505fd17072a544afc69d4b5141ff53d2c58f4f4d505ae927a3b1b83cb85b227155226b75763e93c561964f169f66853b9df6bb11314a1c76e4b701804d203bf0be3db1dca32779273559a62d5a21367a63557e3b300424abf9e09361", 0xe9, 0x8094, 0x0, {0x0, r8}}) (async) read$dsp(r5, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x3f00}) 22:13:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000dca9eee2ff074dbb8f0afe4d3d921863e4c40d6566e1c2584f921fb6c55635952b37ebbb8c79e9d96ecc731de2e4d1ae2da41aaf0eabf52f6a6d949be9afbdf104d276"], 0x208e24b) (async, rerun: 64) r2 = dup(r1) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e120813d28d2"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bc3748790078"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bbb7c040005f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8691c44d8a45"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8aa78d73a456"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) (rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 22:13:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x10, 0x0) 22:13:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r2, &(0x7f00000000c0)=""/189, 0xbd) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x20000003, 0x43}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x9, 0x2}) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000240)={0x40, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000080)) 22:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x4000}) 22:13:34 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x21d4, &(0x7f0000000200)={0x0, 0x3943, 0x0, 0x2, 0x37e, 0x0, r1}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:34 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 32) syz_io_uring_setup(0x5c15, &(0x7f0000000200)={0x0, 0x5bce, 0x100, 0x3, 0x2e6, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x400000}) 22:13:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:34 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101000) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x21d4, &(0x7f0000000200)={0x0, 0x3943, 0x0, 0x2, 0x37e, 0x0, r1}) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x541b, 0x0) 22:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x80ffff}) 22:13:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1000000}) 22:13:35 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x21d4, &(0x7f0000000200)={0x0, 0x3943, 0x0, 0x2, 0x37e, 0x0, r1}) (async) io_uring_setup(0x21d4, &(0x7f0000000200)={0x0, 0x3943, 0x0, 0x2, 0x37e, 0x0, r1}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:35 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5c15, &(0x7f0000000200)={0x0, 0x5bce, 0x100, 0x3, 0x2e6, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000340)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5421, 0x0) 22:13:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) read$dsp(r2, &(0x7f00000000c0)=""/189, 0xbd) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x20000003, 0x43}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x9, 0x2}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000240)={0x40, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000080)) 22:13:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x2000000}) 22:13:35 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:35 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x79b0, 0x80}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) sendmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000640)={&(0x7f0000000500)="65b3fb5777ec007b2f872b41a18bd53f1b82886784ab0126da1e496af88245ae1f595dcab3833c7ec157e63f249d35806527e70281df88b911a2a66d052ce446de44b8238bd52cd027885332bb510375ae6e3aa4e1284fd1e04f1372dd9e93ae1ef36d6c5db144de7cb2cad1c7d35f19ed78fe626e08baa896bf67f106f64241d02828f094f7f326328a4feaf86e86adb82fed27616e233e5e0e8bafdb70ce84c62c39d593bda75544dff60dd21352edfdac54c190357073ef776ffc4c0b9f22a71ee3538446f85a982b938e474db7f8a8b7084d4e3c3de994dfc1890947201b23c61f0750954bae1ff6d5c65361ec4d", 0xf0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x13d, &(0x7f00000006c0)={0x0, 0x39b0, 0x400, 0x2, 0x37d, 0x0, r7}, &(0x7f0000000740), &(0x7f0000000780)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x604, &(0x7f00000007c0)={0x0, 0xc874, 0x40, 0x0, 0x1b1, 0x0, r9}, &(0x7f0000000840), &(0x7f0000000880)) syz_clone3(&(0x7f0000001b00)={0x1020800, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x20}, &(0x7f00000009c0)=""/255, 0xff, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0), 0x0, {r4}}, 0x58) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0x79d, 0x1000, 0x2000, r4, 0x77, '\x00', 0x0, r11, 0x0, 0x0, 0x5, 0xb}, 0x48) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r12 = socket$phonet(0x23, 0x2, 0x1) getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000008c0), 0x10) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x3000000}) 22:13:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5450, 0x0) 22:13:36 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x54, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:36 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:36 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x54, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x4000000}) 22:13:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5451, 0x0) 22:13:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x5000000}) 22:13:36 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$dmmidi(&(0x7f0000000200), 0x54, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) [ 686.169087][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.175478][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 22:13:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x6000000}) 22:13:37 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x79b0, 0x80}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) sendmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000640)={&(0x7f0000000500)="65b3fb5777ec007b2f872b41a18bd53f1b82886784ab0126da1e496af88245ae1f595dcab3833c7ec157e63f249d35806527e70281df88b911a2a66d052ce446de44b8238bd52cd027885332bb510375ae6e3aa4e1284fd1e04f1372dd9e93ae1ef36d6c5db144de7cb2cad1c7d35f19ed78fe626e08baa896bf67f106f64241d02828f094f7f326328a4feaf86e86adb82fed27616e233e5e0e8bafdb70ce84c62c39d593bda75544dff60dd21352edfdac54c190357073ef776ffc4c0b9f22a71ee3538446f85a982b938e474db7f8a8b7084d4e3c3de994dfc1890947201b23c61f0750954bae1ff6d5c65361ec4d", 0xf0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x13d, &(0x7f00000006c0)={0x0, 0x39b0, 0x400, 0x2, 0x37d, 0x0, r7}, &(0x7f0000000740), &(0x7f0000000780)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x604, &(0x7f00000007c0)={0x0, 0xc874, 0x40, 0x0, 0x1b1, 0x0, r9}, &(0x7f0000000840), &(0x7f0000000880)) (async) syz_clone3(&(0x7f0000001b00)={0x1020800, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x20}, &(0x7f00000009c0)=""/255, 0xff, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0), 0x0, {r4}}, 0x58) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0x79d, 0x1000, 0x2000, r4, 0x77, '\x00', 0x0, r11, 0x0, 0x0, 0x5, 0xb}, 0x48) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r12 = socket$phonet(0x23, 0x2, 0x1) getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000008c0), 0x10) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5452, 0x0) 22:13:37 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x79b0, 0x80}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) sendmsg$can_j1939(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000640)={&(0x7f0000000500)="65b3fb5777ec007b2f872b41a18bd53f1b82886784ab0126da1e496af88245ae1f595dcab3833c7ec157e63f249d35806527e70281df88b911a2a66d052ce446de44b8238bd52cd027885332bb510375ae6e3aa4e1284fd1e04f1372dd9e93ae1ef36d6c5db144de7cb2cad1c7d35f19ed78fe626e08baa896bf67f106f64241d02828f094f7f326328a4feaf86e86adb82fed27616e233e5e0e8bafdb70ce84c62c39d593bda75544dff60dd21352edfdac54c190357073ef776ffc4c0b9f22a71ee3538446f85a982b938e474db7f8a8b7084d4e3c3de994dfc1890947201b23c61f0750954bae1ff6d5c65361ec4d", 0xf0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r4, &(0x7f0000000000)=0xc876, 0x400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x13d, &(0x7f00000006c0)={0x0, 0x39b0, 0x400, 0x2, 0x37d, 0x0, r7}, &(0x7f0000000740), &(0x7f0000000780)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r10, r9, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x604, &(0x7f00000007c0)={0x0, 0xc874, 0x40, 0x0, 0x1b1, 0x0, r9}, &(0x7f0000000840), &(0x7f0000000880)) syz_clone3(&(0x7f0000001b00)={0x1020800, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x20}, &(0x7f00000009c0)=""/255, 0xff, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0), 0x0, {r4}}, 0x58) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0x79d, 0x1000, 0x2000, r4, 0x77, '\x00', 0x0, r11, 0x0, 0x0, 0x5, 0xb}, 0x48) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r12 = socket$phonet(0x23, 0x2, 0x1) getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000008c0), 0x10) (async) getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f00000008c0), 0x10) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x7000000}) 22:13:37 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x19, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x1, {0x0, r4}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0xf33, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x687a, &(0x7f0000000200)={0x0, 0x235, 0x800, 0x1, 0x1c}, &(0x7f0000000300), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eefcfffc57fa7115f20000345c4dbb8f0afe4d3d921863000000"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e37905530100c4c1fa706ae3310f01cb66b827010f00d00f011fc4e1f829de8fe8309e9f34000000003e670f01c2b8030000000f23c80f21f835040010000f23f866baf80cb85e75a089ef66bafc0c66ed", 0xfffffddf}], 0x1, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x5, 0x10, r6, 0xfcab1000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x5460, 0x0) 22:13:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x3f000000}) 22:13:37 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0xfff) close(r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r0, 0x7aa22000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x19, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x1, {0x0, r4}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0xf33, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0xf33, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x687a, &(0x7f0000000200)={0x0, 0x235, 0x800, 0x1, 0x1c}, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_setup(0x687a, &(0x7f0000000200)={0x0, 0x235, 0x800, 0x1, 0x1c}, &(0x7f0000000300), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0xfdfdffff}) 22:13:38 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0xfff) close(r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r0, 0x7aa22000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0xfff) (async) close(r0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r0, 0x7aa22000) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:38 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x19, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x1, {0x0, r4}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8933, 0x0) 22:13:38 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0xf33, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x687a, &(0x7f0000000200)={0x0, 0x235, 0x800, 0x1, 0x1c}, &(0x7f0000000300), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:38 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0xfff) close(r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r0, 0x7aa22000) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r0, 0x7aa22000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eefcfffc57fa7115f20000345c4dbb8f0afe4d3d921863000000"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e37905530100c4c1fa706ae3310f01cb66b827010f00d00f011fc4e1f829de8fe8309e9f34000000003e670f01c2b8030000000f23c80f21f835040010000f23f866baf80cb85e75a089ef66bafc0c66ed", 0xfffffddf}], 0x1, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r6) (async) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x5, 0x10, r6, 0xfcab1000) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0xffff8000}) 22:13:38 executing program 5: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000300)={0x0, 0x685c0859, 0x3ff}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x2541, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r6, 0x9000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000004c0)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x6c6c, &(0x7f0000000540)={0x0, 0x9936, 0x200, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)=ANY=[], 0x208e24b) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r11, r10, &(0x7f0000000000)=0xc876, 0x400) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xaece, 0x0) 22:13:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) close(0xffffffffffffffff) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x0, 0x5004) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r7, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r8}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r8}}}], 0x70, 0x4008010}, 0x10884) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="7800d50f310342082d973cefb9aa44361bfaf532addf12e767a8aaccc9a8eb094864f4cdc39fa5157a9bc1c6edfdca68b7526043813e011f9e60e8af29e370ccbc349540c580f85fb007882a7f8569e6addc7048db61a64971233ee5ac6ea8cd7edb2a066a3139f224970537bd3a8aa5e1e4750f282e2be735224c04e35f82e3af8b49e1bd4daa9c4924721288ff572d761bc42d663745418a08000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x418}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [r0, r9, r10, r1, r1]}}], 0xb8, 0x4}, 0x4080) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0xfffffdfd}) 22:13:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eefcfffc57fa7115f20000345c4dbb8f0afe4d3d921863000000"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e37905530100c4c1fa706ae3310f01cb66b827010f00d00f011fc4e1f829de8fe8309e9f34000000003e670f01c2b8030000000f23c80f21f835040010000f23f866baf80cb85e75a089ef66bafc0c66ed", 0xfffffddf}], 0x1, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x5, 0x10, r6, 0xfcab1000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eefcfffc57fa7115f20000345c4dbb8f0afe4d3d921863000000"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="c4e37905530100c4c1fa706ae3310f01cb66b827010f00d00f011fc4e1f829de8fe8309e9f34000000003e670f01c2b8030000000f23c80f21f835040010000f23f866baf80cb85e75a089ef66bafc0c66ed", 0xfffffddf}], 0x1, 0x0, 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r6) (async) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x5, 0x10, r6, 0xfcab1000) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x400448c9, 0x0) 22:13:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0xffffff7f}) 22:13:39 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x5, 0x200000) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) dup(r4) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) signalfd(r5, &(0x7f00000004c0), 0x8) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) accept$unix(r6, 0x0, &(0x7f0000000340)) 22:13:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x400448dd, 0x0) 22:13:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0xc9, 0x0, 0xc}) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x9, 0x56, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x40, 0x40, 0x55, 0x94}}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0600001d1f00000000000000dbdf2507000000e387b8c027981507485eee2f46e18d8dccafc182a8888b1e16fac1c2511ac0d14baff61bfc6b823f539449636e8b6394f9e9cbb63948d0d1afe45732bce2b249fb00000000bc99b34698ec34591b7114a61cf537eeef4f1bedbef76b9bdb3724f1bdfa129fc59e1c37f9d64a0abac7a4f171c5b3d165abe5be744887ec81f365d89b7cbb8dd902f0e857d19ab0af7c831f92ba23bf8420eb5188556e9455fc", @ANYRES32=r7, @ANYBLOB="0200030108000400ffffff7f0800090006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:39 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x0, 0x5004) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000800)=0xfffffffe) (async) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000800)=0xfffffffe) read$dsp(r7, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r8}}}], 0x78, 0xc020}}], 0x1, 0x4000010) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r8}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r8}}}], 0x70, 0x4008010}, 0x10884) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="7800d50f310342082d973cefb9aa44361bfaf532addf12e767a8aaccc9a8eb094864f4cdc39fa5157a9bc1c6edfdca68b7526043813e011f9e60e8af29e370ccbc349540c580f85fb007882a7f8569e6addc7048db61a64971233ee5ac6ea8cd7edb2a066a3139f224970537bd3a8aa5e1e4750f282e2be735224c04e35f82e3af8b49e1bd4daa9c4924721288ff572d761bc42d663745418a08000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x418}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [r0, r9, r10, r1, r1]}}], 0xb8, 0x4}, 0x4080) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ee53dca9eee2ff077961fc57fa7115f20000345d4d22d756bb8f0afe4d3d9218c800000000000000b9db00000047248f0a2f453275eb"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:40 executing program 5: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000300)={0x0, 0x685c0859, 0x3ff}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x2541, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r6) (async) close(r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r6, 0x9000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000004c0)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x6c6c, &(0x7f0000000540)={0x0, 0x9936, 0x200, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r11, r10, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r11, r10, &(0x7f0000000000)=0xc876, 0x400) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x400454ca, 0x0) 22:13:40 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000300)) (rerun: 32) close(0xffffffffffffffff) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x0, 0x5004) (async) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r5) (async) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000800)=0xfffffffe) (rerun: 32) read$dsp(r7, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000300)="54c35c1c1963799e80d3f8ea1c2943a5baf881d43b8aaa51a14e5cfd769b07f6f664354576221560922633882b626f2165aa54ab98c8f0ea737d390dfd027ff066e65c2b655726f835dfe4d6c9b97d90448dc5340efd8f6c0e8f1887df597a4e21983b71441d180aba8bf25b24f1f84a341519e2e6ccf769b9695d8e3574fd6e931902997ec6cac94b95c15340457dfcd85e4e20333dca033f", 0x99}, {&(0x7f0000000200)="3b4fb563318af1bac77dc747c8ef2776a56e488ee9b4a3d269856a4aca7dfb41107f6d81f3b607929e7c70ca4bd6", 0x2e}, {&(0x7f0000000400)="ea97a15139d4c717a2a7affae95e9318464b13764b574ba4f964ce804f19eeb51e23a7e51dda3ac388079ea6a14a54d84c68673fdc7075291cd6f836b06de995689a67ed631f36039e8f26736d6b6e8e059e89623bec5a4664d66ae48267601576686bb160ec13c952e67d48e043fd4eec2544ac2bbbe11cafd37bbb6240e0707b60413a973b17b8b59292f80acc06557f3a457c0d28a7770c49425a87fe4340f2", 0xa1}], 0x4, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r8}}}], 0x78, 0xc020}}], 0x1, 0x4000010) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="62e33e0ebefbc7e651643ef8d3309bd4fbc1560e47a4f77845bc21eb65b23ebe806fb772551caf698df9256c9872de65956367104d40404d908cea9e0cc870667f3d9a41247c4264cbe91a772b37195fc2b1bc35d0049c2b2626764f148c53a056369fde88b813f83b2deb4f504f3605293a27d728b7d87c34e9a31eedd644b4583af43597be9c56af6ab6fc32cd6f3d2c4bb410dd9713bbc0a0a908a340215dbf194c9b1c531faf18f935277c197808fbcb90373c839c04ec92538f19d88e274bfce52aae9de1372d1fa207bfb9f3bfa0a29501398226df37dd06f82cabeccb388f0af8629c4caf968de903005bbc36ba0f", 0xf2}, {&(0x7f0000000400)="1e7b4329adc3330b85f8050e769752150ef4a35a09136749e4ce870023d619c396f2bd47e7dac64c750932caaaf57412b6519cdc20bad1", 0x37}], 0x2, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r8}}}], 0x70, 0x4008010}, 0x10884) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) (async) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r10) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="7800d50f310342082d973cefb9aa44361bfaf532addf12e767a8aaccc9a8eb094864f4cdc39fa5157a9bc1c6edfdca68b7526043813e011f9e60e8af29e370ccbc349540c580f85fb007882a7f8569e6addc7048db61a64971233ee5ac6ea8cd7edb2a066a3139f224970537bd3a8aa5e1e4750f282e2be735224c04e35f82e3af8b49e1bd4daa9c4924721288ff572d761bc42d663745418a08000d00", @ANYRES32=0x0, @ANYBLOB="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"], 0x418}], 0x1, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [r0, r9, r10, r1, r1]}}], 0xb8, 0x4}, 0x4080) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:40 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x5, 0x200000) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) (async) close(r4) dup(r4) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) close(r5) signalfd(r5, &(0x7f00000004c0), 0x8) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) accept$unix(r6, 0x0, &(0x7f0000000340)) 22:13:40 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) landlock_restrict_self(r0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) landlock_restrict_self(r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e5, &(0x7f0000000280)={0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x810, r0, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) read$dsp(r2, &(0x7f00000003c0)=""/199, 0xc7) 22:13:40 executing program 5: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000300)={0x0, 0x685c0859, 0x3ff}) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) syz_open_dev$mouse(&(0x7f0000000340), 0x2541, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r6, 0x9000) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000004c0)=0x3) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x6c6c, &(0x7f0000000540)={0x0, 0x9936, 0x200, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r11, r10, &(0x7f0000000000)=0xc876, 0x400) (async) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 22:13:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0xc9, 0x0, 0xc}) (async) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x9, 0x56, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x40, 0x40, 0x55, 0x94}}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0600001d1f00000000000000dbdf2507000000e387b8c027981507485eee2f46e18d8dccafc182a8888b1e16fac1c2511ac0d14baff61bfc6b823f539449636e8b6394f9e9cbb63948d0d1afe45732bce2b249fb00000000bc99b34698ec34591b7114a61cf537eeef4f1bedbef76b9bdb3724f1bdfa129fc59e1c37f9d64a0abac7a4f171c5b3d165abe5be744887ec81f365d89b7cbb8dd902f0e857d19ab0af7c831f92ba23bf8420eb5188556e9455fc", @ANYRES32=r7, @ANYBLOB="0200030108000400ffffff7f0800090006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ee53dca9eee2ff077961fc57fa7115f20000345d4d22d756bb8f0afe4d3d9218c800000000000000b9db00000047248f0a2f453275eb"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:40 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)={0x3d4, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1527}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5158}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7466}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7a19}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2394}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3269}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9ac}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x273}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "0e1997704a6f0171857af78231ba66fabea52b9d87d6b551544079f81c9e721da2842e9b312ef0478c842014b89758841baa0ba1f98f215ed2cd3b09b5d3b9cf99f0768f3c1c587bfe42fe6589a264ddc44991832562e4e35e7d54afe6427880f5284c588907dc9d81fa55594fa53dbd1e65dde380515ae8987b7dc5766f99bc2d55225d2b51d1fef4da63b712f78ac1f81d83cb361f19bdeb0a2704d9fa5305"}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x204c010}, 0x4008800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) syz_io_uring_setup(0x1d86, &(0x7f0000000340)={0x0, 0x257c, 0x2000, 0x0, 0x172, 0x0, r3}, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 22:13:41 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x5, 0x200000) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r4) dup(r4) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) signalfd(r5, &(0x7f00000004c0), 0x8) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) accept$unix(r6, 0x0, &(0x7f0000000340)) 22:13:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ee53dca9eee2ff077961fc57fa7115f20000345d4d22d756bb8f0afe4d3d9218c800000000000000b9db00000047248f0a2f453275eb"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ee53dca9eee2ff077961fc57fa7115f20000345d4d22d756bb8f0afe4d3d9218c800000000000000b9db00000047248f0a2f453275eb"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:41 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)={0x3d4, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1527}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5158}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7466}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7a19}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2394}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3269}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9ac}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x273}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "0e1997704a6f0171857af78231ba66fabea52b9d87d6b551544079f81c9e721da2842e9b312ef0478c842014b89758841baa0ba1f98f215ed2cd3b09b5d3b9cf99f0768f3c1c587bfe42fe6589a264ddc44991832562e4e35e7d54afe6427880f5284c588907dc9d81fa55594fa53dbd1e65dde380515ae8987b7dc5766f99bc2d55225d2b51d1fef4da63b712f78ac1f81d83cb361f19bdeb0a2704d9fa5305"}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x204c010}, 0x4008800) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) syz_io_uring_setup(0x1d86, &(0x7f0000000340)={0x0, 0x257c, 0x2000, 0x0, 0x172, 0x0, r3}, &(0x7f00000004c0), &(0x7f0000000500)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 22:13:41 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) (async) landlock_restrict_self(r0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) landlock_restrict_self(r0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e5, &(0x7f0000000280)={0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}) (async) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x810, r0, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) read$dsp(r2, &(0x7f00000003c0)=""/199, 0xc7) 22:13:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0xc9, 0x0, 0xc}) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x9, 0x56, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x40, 0x40, 0x55, 0x94}}) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0600001d1f00000000000000dbdf2507000000e387b8c027981507485eee2f46e18d8dccafc182a8888b1e16fac1c2511ac0d14baff61bfc6b823f539449636e8b6394f9e9cbb63948d0d1afe45732bce2b249fb00000000bc99b34698ec34591b7114a61cf537eeef4f1bedbef76b9bdb3724f1bdfa129fc59e1c37f9d64a0abac7a4f171c5b3d165abe5be744887ec81f365d89b7cbb8dd902f0e857d19ab0af7c831f92ba23bf8420eb5188556e9455fc", @ANYRES32=r7, @ANYBLOB="0200030108000400ffffff7f0800090006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000003c0)={0xc9, 0x0, 0xc}) (async) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x9, 0x56, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x40, 0x40, 0x55, 0x94}}) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0600001d1f00000000000000dbdf2507000000e387b8c027981507485eee2f46e18d8dccafc182a8888b1e16fac1c2511ac0d14baff61bfc6b823f539449636e8b6394f9e9cbb63948d0d1afe45732bce2b249fb00000000bc99b34698ec34591b7114a61cf537eeef4f1bedbef76b9bdb3724f1bdfa129fc59e1c37f9d64a0abac7a4f171c5b3d165abe5be744887ec81f365d89b7cbb8dd902f0e857d19ab0af7c831f92ba23bf8420eb5188556e9455fc", @ANYRES32=r7, @ANYBLOB="0200030108000400ffffff7f0800090006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) 22:13:41 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3bd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x645, &(0x7f0000000200)={0x0, 0xc6f1, 0x0, 0x0, 0xfffffff7}, &(0x7f0000000040), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000340), 0x0, &(0x7f0000000500)={r4, r5+60000000}, &(0x7f0000000540)={[0x6]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) io_uring_enter(r6, 0xf87, 0x2d9e, 0xc, &(0x7f0000000000)={[0x4]}, 0x8) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0x0, 0x74, &(0x7f0000000040)=""/116}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40086602, 0x0) 22:13:41 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000dc0)={0x3d4, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1527}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6c1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5158}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_SOCK={0xf0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7466}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7a19}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2394}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3269}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9ac}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x273}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "0e1997704a6f0171857af78231ba66fabea52b9d87d6b551544079f81c9e721da2842e9b312ef0478c842014b89758841baa0ba1f98f215ed2cd3b09b5d3b9cf99f0768f3c1c587bfe42fe6589a264ddc44991832562e4e35e7d54afe6427880f5284c588907dc9d81fa55594fa53dbd1e65dde380515ae8987b7dc5766f99bc2d55225d2b51d1fef4da63b712f78ac1f81d83cb361f19bdeb0a2704d9fa5305"}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x204c010}, 0x4008800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_setup(0x1d86, &(0x7f0000000340)={0x0, 0x257c, 0x2000, 0x0, 0x172, 0x0, r3}, &(0x7f00000004c0), &(0x7f0000000500)) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x32507dee8fac752c}) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r5 = dup(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:42 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x4bb5, &(0x7f0000000300)={0x0, 0x5631, 0x40, 0xfffffffd, 0x4002}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x77e1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x707080, 0x0) io_uring_enter(r4, 0x1d63, 0xffff, 0x8, &(0x7f0000000240)={[0x10000]}, 0x8) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) 22:13:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x40186366, 0x0) 22:13:42 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3bd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_io_uring_setup(0x645, &(0x7f0000000200)={0x0, 0xc6f1, 0x0, 0x0, 0xfffffff7}, &(0x7f0000000040), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000340), 0x0, &(0x7f0000000500)={r4, r5+60000000}, &(0x7f0000000540)={[0x6]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) io_uring_enter(r6, 0xf87, 0x2d9e, 0xc, &(0x7f0000000000)={[0x4]}, 0x8) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x401c5820, 0x0) 22:13:42 executing program 1: landlock_restrict_self(0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0xc876, 0x400) (async) landlock_restrict_self(r0, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) landlock_restrict_self(r0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e5, &(0x7f0000000280)={0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async, rerun: 64) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x810, r0, 0x10000000) (rerun: 64) syz_io_uring_submit(r4, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) read$dsp(r2, &(0x7f00000003c0)=""/199, 0xc7) 22:13:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async, rerun: 32) r2 = dup(r1) (rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0x0, 0x74, &(0x7f0000000040)=""/116}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 22:13:43 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x4bb5, &(0x7f0000000300)={0x0, 0x5631, 0x40, 0xfffffffd, 0x4002}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x77e1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x707080, 0x0) io_uring_enter(r4, 0x1d63, 0xffff, 0x8, &(0x7f0000000240)={[0x10000]}, 0x8) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x4bb5, &(0x7f0000000300)={0x0, 0x5631, 0x40, 0xfffffffd, 0x4002}, &(0x7f0000000100), &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x77e1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x707080, 0x0) (async) io_uring_enter(r4, 0x1d63, 0xffff, 0x8, &(0x7f0000000240)={[0x10000]}, 0x8) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) (async) 22:13:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x32507dee8fac752c}) (async, rerun: 64) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) (async) r5 = dup(r1) (async, rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) 22:13:43 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10108}, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x50, r0, 0x1c515000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:43 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3bd}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x645, &(0x7f0000000200)={0x0, 0xc6f1, 0x0, 0x0, 0xfffffff7}, &(0x7f0000000040), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ppoll(&(0x7f0000000340), 0x0, &(0x7f0000000500)={r4, r5+60000000}, &(0x7f0000000540)={[0x6]}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) io_uring_enter(r6, 0xf87, 0x2d9e, 0xc, &(0x7f0000000000)={[0x4]}, 0x8) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:43 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10108}, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x50, r0, 0x1c515000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10108}, &(0x7f0000000200), &(0x7f0000000140)) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x50, r0, 0x1c515000) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x32507dee8fac752c}) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r5 = dup(r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) close(r2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x32507dee8fac752c}) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) 22:13:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) 22:13:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x5, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0x0, 0x74, &(0x7f0000000040)=""/116}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:44 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x4bb5, &(0x7f0000000300)={0x0, 0x5631, 0x40, 0xfffffffd, 0x4002}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async, rerun: 64) syz_io_uring_setup(0x77e1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 64) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x707080, 0x0) io_uring_enter(r4, 0x1d63, 0xffff, 0x8, &(0x7f0000000240)={[0x10000]}, 0x8) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0xc876, 0x400) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) 22:13:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x8) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x90c40, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwrite64(r0, &(0x7f0000000240)="a383d68f33e7b4931710cd43c91834aa2a3666c35e395c5031f3b3b45a3dd2915cd124c75f8921f6085390bbf02ef4f001ef4e8916cb1a1220e175556d64b3b2798bfc8cac7feebfe11b1fa4ebfbb3f2f686526d0d5b0751a9d22a893678b0fb3fe72d773ec03b551d8bcf1c89e94ad974aad7205ff4ca815b5f1a6ec23c89e4b91d6dfb4ccfbe351c78edd1b8086a8c1044bf1f2535", 0x96, 0xdd) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x105402, 0x1) fremovexattr(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f09000000000004002b4000"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000011b6362662c72f0d73ae0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff070000000000002e2f66696c653000"]) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendfile(r6, r7, &(0x7f00000000c0)=0x7, 0x40) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:44 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10108}, &(0x7f0000000200), &(0x7f0000000140)=0x0) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x50, r0, 0x1c515000) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 22:13:44 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) read$dsp(r0, &(0x7f00000004c0)=""/218, 0xda) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:44 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001800)=@IORING_OP_SENDMSG={0x9, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=@ax25={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)="4c68fe4916025b9cd79e2a815727827c30a44df416e358b94de092410eba1ad54ae7056ab73ce9433ddc6467fd2f5b91b7462120f4a4228e4d9cc96c11c3f7fbc68dead3ecead450573c0a062e2f0e26d1c2d1aaa265291da86bd94ee31dc4fb7a867ca5d46664a8ae57f6a877802ad936bcb6d0", 0x74}, {&(0x7f00000004c0)="47906eaffcfb144f63f62f25795167ec912e9e100c63d724befeefb96b67f60125a99cddf92528636fa12013f214462b494d697e1810437b9c972f8433e0feceed4128bb1fe853954d13b8f2704d80876e167cc7036ed686a8b87075905ec49c631296a496e0c1e01ead235cb20d2f9cda4a6d8c20954aec3355dcf086156550b9", 0x81}, {}, {&(0x7f0000000640)="4c8a1320d582747f15779cf0bd874bddf229f27ed49e8a69f31b908db1d6c8144f49471896a09b5dd68a53adc1c2e129a0d45af6250a9cd596945cc0ed7c686fa8761fbaba1cb3ba3e335507b4ecc0f09f6bf17e39b5b9c4d5956587cf91fc1a4bfea5c5b254c56a6432080123b3192c0de1ac30be9da223e0962e05c7a5fbb5be00d6de4e7f2288447aca634d1e59446b402be21fc0409fad737d8b8f9a76f3f8c18c24ed151eeb3f7fe5cc4f9fe0c1", 0xb0}, {&(0x7f0000000700)="03e5eb843eda3087c3f955855bea15dda7354cf024ebe28cd4e2e9a2091be488a5eda33f9454747dacf39213967955d117854f18ac4f96b6190e92271e2a953acf88c19bfd312d32fd8b0bb3a4da3a7dde381b9b72e80a29865d10398a791220cd83a07e467c212a0b1cc0bfd75e266fa5bfca4cd41e1009c31580e088a1bf228fd31545ef6022b1ba21dd5d1d7a1fa2a638bbf71f36b3af24787b379da28a7c04a83d81c82c525df6903b3b0565ebd3f0c74fb71560ad33900926b97e967ca3f2bac9381d24b2129b42326e330258c8b19a75d98c671e72926cc4d557467547f7ff43234517911793d05fe2514031ce15b60caa14ef05b08792bdca841aca845dcf8f7b4709e7eabe1a32bda4bc727ef0a8ba52e8e688887e6b71d5b03420d193789de4716c7c503bd0defef26d1214ae1f3f0b2b2582138eb85769385477458b83ed4619d2f833931333ba8a8ecbb54ec19c08c7467e97b1169c4e2f41726a011119196a602a32e5a54564cfd88ccb133dd02105b4929df20e8b9745801696e5361d8ee83730a6ae59f541c0a64fe27f41e044e1c9aa8f3ddbb7284951d0fb922d4e2148d9ca602475602b8328b5ab51871dbc9740c8421b7ddc182e2e576aa78e52b8ab31f13ae566d13b08c7de94399355260fa8775fd35d245b0e085d4eeebb374b7020c3de600fd4347dcd66300114b3fd61786c98cc80914f82bc32af07cb6fd07faa558c7f198ed81583bf9036b294fae07a12e90e72335fcb8568a23c8d4bde327e158d4f24672694b00bff20139a2528ec37df9e592a23693398f4346e5fdfb99fa20ea2282e4a62f9e19c32a1a2d98598b7c58233f3f4b28201cf9a3945dae3f7ce4290069cf839441f199f4e013e044cecfe15ce484e7fb46132b8b77d65757a323f91842121119b522e1c354ecade7fed49b44081146c55e11e6b41dcdd760efca81b498f5c0384ceae34adc8c10a520350bd35afeba49549832ef2056439b86bd35fdc3db476549efd2a72da26d6bb3ab55065465adcc8ea6d674ed8458731593281b1bb42d62daa0387aab3578224d0e856db4672d608496bd93f957b29b3d6622907bc96b46e902277578384312ddee595a6d20d6f9126b24affeab21e928cad2b40e06761234e1a3db267d74551f1a7f913f9be6d0af802ff6336e03cb904cbaffd3c7c649b01aeab401974cebf4f2aa060f3b3652d7d3e6bc21ceae36d8376dfb5f097b12400f277558b2ec16b7f4cae01dc4c2d5a16b3913d3273aa809d27cff4cd3bbb91c80f52f8c2a98af88dc0f7e8ee5a7588e0deb10a7b679cd6b2815ce8fb0ba2370a2fe0074aa324f5a5adbeb898be9d75eed0c04dc732213485e8f602997ec331605cc1ff130b18cb565de2ea7483348deb84344700c25e0662e90f46a707012caa6aaf4893b90e31c1970e38da0593a6293d30d5cbfb304c84f55db707c99a8cb39af2f6fc2cbcf2f6f1e00520eac50cd838b0c9102eb52268c34c67e1dbd54e266046a026fa5b96f2600b509cef6fbe723dd574fdd7f7092f51b6ce47778bd33af917b2619859a952d04b404dbe39964a097a1a10991f244ccf432f38093624bdb4f100bdfd64f55691e81314bb1d19c73c7fc333beacd6f8cf71152871fd385a37c62c625b5fe2603b81fa17366e5486fc7eb2d77c492c062fe9263251535625138053e40100539c34b550dcae8da306a56926e22d9bf23736b45ab0d103bd8f8d1ec28bcc7f0d339ab63f511932246419133e6489854b0ae7e2040c851e87bb07b98212de424c50172a905a135ce34a16ab8b2509c80adadce09d94dd8962555debf997d54e339d412a0da2ac5fe30fe18df85b35e528c656ce1db9973e640902aa8bf0e6eaf0d7b82993c1bea3bfbb8dae1ee5ad2bb5c97312c692731d1ac2f9e788cb80fcc8f1852dfd401e7fd53f1439ac2e8b4c300c7bd707d7012dc9b8c261fd9f42c6fd0ae275163ca89b5dd708b4dcb3db8ff0a282d2c97a75de6b3305eee79a790f9e7ef2e26bd3957bf53b599afd0d9f1563ad1039be767bd17003313c9726a63c9857a790dcd9977ed09590d69c3dc76e83c97be9a5e78dd38d957efbf554a4981b3fe63891a6dd2b197020cb5135364c1c35038f837a0dabfb34b711d6e8ee82130c02cfd05e810efe666d1235eaaeb5f4ceac00259bfc4b67132a1ef52f4aff6eb89895795c3253773215aab32cb80ad41b9444c48b66debf3fd0e1a10474013b85a84042a0ee2429e83d4aab4e4fed4dd9e6fed09ac2ea4e296bd541d8f4dfec4cd7aceccb261a4658f3ceb384fccc80bd4f3d35c6dbaa3370310b35d9ea7d4322ec81f8f29d0e0501698b712b55642ec1564956f111f6c1bd1da8dad60e728151aed36fb8e93450a9097aebbf92823ff035c02ae25f69b6ee520bfb9666486734f951867caf121c7a7d4c4d3046ca88689ad6c9e610bc3b858791939aa1bcc515b28ffe6105a79ac915412eb4017a91eab0fb6102a3168550374d2dac9518ad57b7fea7bae96231f7b269e953311b8943f5280221b1d83312e6c0f636ea02512983fddcd329a0520d7c500022ca3c37a56df3454a5fefe20551d7357fabc63e6ed2d495debe8b43d9530f452a89bf0c2367ac4cc7be76e031a2c05d8a909c3d65047758e4f6a63564d5f7fb4ba1ffb9c92d7540ca55886fa443ec6588d32f6ac2e75cdfe225beb915fd2a666bbe124499f0093a8f31011708acf47c5815453ce6eae90b1494d0b24f6b3b8e8802c33cf5637465e2d604f64a9092456bbb5a74c51d3201486234a9ca28ff3986e29754e30c012988a979cbdedb7aeb90f743d56addb01271816d93433963446f29925f47e77b09734071dba0b8fddca7c39ff983cd1bcff77e9951deeb355acdc2f9c6be917574238c5965623449908f8fca7330d3d2029aa0826ec4e883febda56ecccd1329e46aa6b636d10872a5a5bbe67b1dddff9a2376796002d0a20d6bccc7fc41fe564ea389b9bffaea29f734ac9dcc0ef3380bced5bddc4d44d7aa0b3f846aea65291254305eb96082ca26454a0fb8525fa6d1731dccba854ef6181e93a74bff06ace846c0e5fe8af69e2eda6cfa98edd932a929b45bea55535743cb46621f23e4ba84ceffe2fa1d24ad148268ef1013a150408bfc1c5ce919431642383c17c30253f9dcf395a5dbd55dd8240425b9406404f4c696af7a346a4da541f425042cb433a22468422ab0ec133a53e1abe40d1a5634f3a8911ae51aa3bc6e2a028f2e44f7fe2e613488a4eae7cbc115292dc00f17f22435a9d3e3ae827ad65a17320d079cb91357dc07f5557b1da07a6a837e5c118bea1241804b133626a6204cd02b183e023e3afcca9750fe4fa284791fb33fa5113805bab07163d37c285036e0c237f55abca708cfc20e3a0e950e91aeeee741fd3cf4826b35b183edf18281b42545a5f03162ffd20c5d8476c3e5d1161ed39c8ba6d103be52993cc9b89a781e009a26fa689f948c8d16b0e1d36884c7239a3d9f7a743447cf1420f8b58122b93d89e21a95136cc0a0d67fcce972a3feff20e2351e9badaba2053cc9973749bea94a9e9325c8aeb82729e7a5bb87310cee16c04836f41a9196ec7a9c3c171da1488280390af89edbaa77600f78c89ec7ad61464060630affb0a3246eae586a0d39c138a09c9d0088ae5d9a12711a2f820fbe1a0d3a81eb2040599aea4733d9b16afa6685cb5beee13849efdee94619d09d47e83680d78cdbb6ccaacb129c4b37b028b4c89e916b1de4bbf3630bf3c366b3953a90fa3f15cdb8450cf8b304da5fc117ccaca4f22a5473a85628a8d7fd9f9225dfc967abc202a2af6af0428be11314752240145f90fda97b9171765566871138a5f5cf267be1d165c1bc2158d26e2d4dad91cfd92d95c99a3b6643c5397518e45a553762cef10f97ef9d6090bda205ac0828f6049937a14133163592cf3698dcf3c84780b2040c7e6db2eb1ea654f1a99a8e4719ef38b64301fc052c27314298c20b35275488f4ee8ea248b5e062ca015a2233f608e5d50e7c4873d411ab713db5ff364b1835f2fb03db07971e5b3643603e757dab9b0c5494edccf217e7ccc12f5a2d5c75d3fbdc065d08ecd5471595451697b55f30c59e976ce13bc90b47c81ad9fe47654ecc6636cabd2325d16d504e4de7d6460b233362ad721d8758bcd2a2b6bfe6737667aacefd48f4a729b7d1271e0363765a52a1ff0d74bbaa9453b9865a45ce1002607df8bac1ac3628be0693629cd8f53eef0b7357cbb206c1566f4be986524463464d872ce8c57a5fbabdd58cb83734db4f930db38231a6dc76a237affaf9c2ebd1de0aecb1aeb0d0d0bfd65c67dc0d3f1abd5f401a6fe6caef2e4815037c60bf4dd73cb77e27e565ba25b2571fa2e8f45e73ba7714ecb3df83ac3679bde1a2abea11d71380bc92bbf510d1dbc7e5043f5fd9a1bf6238a30d71f78b9733900f428887f1d005e9945f694cfa3a52cc38204b5cec7e26a6b483a95bd5a67aa1b40fd4ea0c46c44c4803cc8068b676ffcf13ac6679a7e4eca53590875d88cfd2f78765bd1ea9e04ccff25323586e12adc7abc05688b84361c545719f07a8f58f3e2c26fd6c11a9c0f35abc078224ebb1ecf5be54e004ad8513e9bef9978ea1b2a6ae83fc04265ba512c7d9231befdcb1a6b80b9d753004e6640d859a863c387b39d78ab9844f3e6445bb5198e24b0f8bf76c67624f81411835c10876b4a682e2bddea4dc7a8198edde13189cc018ee30112a59883d807db89cfd49157beabaee94f78b4d111a08d18fb98b8bd42c7d571844ec1e280da650f32b98e9d8195b79e911becc8c8dde098d95b70b85d3b022c8c6868a84f6fd2d1bd7f82b583061a7542d0ed9fe343406097e84037e099d8386891e50327f1ad6f7ba40827f9f028f34c20fb042803f0348dc78f1c5d3067b6e03dcf9abea9cf8349cb4827d86cb8881c388c6b491a419a9dadab7b69f5e54c004cabe694e4d73cb3b22d7e0806b5000b85cf41e9e28d25780390c477f65e8bdc9e1e6a97744e2fece9a7bdadbd64f280d63da9abe24ab101cdfadb889a0aed58c7889c6f90be8f89875d7f3281a1f8d58e9601c112d7741f4c89cd8507f7821adea183345339eae35826385476a32945877e1b52545f71857ba1ea23321eec9e38b9800944cafae055bc33bcf264043ea22f70ad9bb5620c4ea6e453ff569b904ce1e0da7fcc5d47cc30020884f11e1169dc242021ee292d5fcaa8377d2499bb3a0c9511221e7e68c2bbb7d3cea3f2e719bf564b33cad91ecca125d468507cf949cb170a5b8e210b9d30488f96416bdf78acdcab0d430589de8aebcd05203a8cd1f7445da38599c5336af5e3140126495eed7042e9a967698bb8b8e577f3b64ad1fd59c028ace08e708979516525c70238600908ac314d551f1f2eaec899dfbe863ec92dd20eaf181bce655ae19dedbfc8ae59b70b9fe42b59ff7fbdfd906144cacca65c9964061ffed5f2a7a022526a4aaee3f8eea466687589e5362f810eba0f5ed11b90ca9059df2405bdaae5bc5539c0fe83ff8916aff9e3d0e4a5a1dacaa4c72784cf1f118283a9e15c822b3475ee0489fa595dbd8ed1884180fb9613c3b9edb43bfbbbadfdcea77943d6666402701b2e459e4b0a0721800e8fa9303831b8fc3020a032fd829d6a22cb9c06e188d61293e4eaf4578c8c559d7391b2ddc43820fc3c7ddef0750c941de1e77a731b7a61ea979e141d82156b4b9fbb4c79c82e521571f049150b71b3b2b91e7b4fe745e62", 0x1000}], 0x5, &(0x7f0000001700)=[{0x88, 0x1f, 0xff, "0a6183af187d37f7c9c5cb387286b302dae3a6baf333e8e3843a658d80776730dabf7140cb688d9ceec19b0b34df8f63c0ef088b54658371e8140003327929b1211d4f7a8fab36651cc6e44aabcafb8883e83edd6308f327f129dfd691652969e875960b6883a6c332e5e0c513ef954043613176"}], 0x88}, 0x0, 0x4000}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:44 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:44 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) read$dsp(r0, &(0x7f00000004c0)=""/218, 0xda) (async) read$dsp(r0, &(0x7f00000004c0)=""/218, 0xda) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 22:13:45 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) 22:13:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001800)=@IORING_OP_SENDMSG={0x9, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=@ax25={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)="4c68fe4916025b9cd79e2a815727827c30a44df416e358b94de092410eba1ad54ae7056ab73ce9433ddc6467fd2f5b91b7462120f4a4228e4d9cc96c11c3f7fbc68dead3ecead450573c0a062e2f0e26d1c2d1aaa265291da86bd94ee31dc4fb7a867ca5d46664a8ae57f6a877802ad936bcb6d0", 0x74}, {&(0x7f00000004c0)="47906eaffcfb144f63f62f25795167ec912e9e100c63d724befeefb96b67f60125a99cddf92528636fa12013f214462b494d697e1810437b9c972f8433e0feceed4128bb1fe853954d13b8f2704d80876e167cc7036ed686a8b87075905ec49c631296a496e0c1e01ead235cb20d2f9cda4a6d8c20954aec3355dcf086156550b9", 0x81}, {}, {&(0x7f0000000640)="4c8a1320d582747f15779cf0bd874bddf229f27ed49e8a69f31b908db1d6c8144f49471896a09b5dd68a53adc1c2e129a0d45af6250a9cd596945cc0ed7c686fa8761fbaba1cb3ba3e335507b4ecc0f09f6bf17e39b5b9c4d5956587cf91fc1a4bfea5c5b254c56a6432080123b3192c0de1ac30be9da223e0962e05c7a5fbb5be00d6de4e7f2288447aca634d1e59446b402be21fc0409fad737d8b8f9a76f3f8c18c24ed151eeb3f7fe5cc4f9fe0c1", 0xb0}, {&(0x7f0000000700)="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", 0x1000}], 0x5, &(0x7f0000001700)=[{0x88, 0x1f, 0xff, "0a6183af187d37f7c9c5cb387286b302dae3a6baf333e8e3843a658d80776730dabf7140cb688d9ceec19b0b34df8f63c0ef088b54658371e8140003327929b1211d4f7a8fab36651cc6e44aabcafb8883e83edd6308f327f129dfd691652969e875960b6883a6c332e5e0c513ef954043613176"}], 0x88}, 0x0, 0x4000}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x8) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x90c40, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pwrite64(r0, &(0x7f0000000240)="a383d68f33e7b4931710cd43c91834aa2a3666c35e395c5031f3b3b45a3dd2915cd124c75f8921f6085390bbf02ef4f001ef4e8916cb1a1220e175556d64b3b2798bfc8cac7feebfe11b1fa4ebfbb3f2f686526d0d5b0751a9d22a893678b0fb3fe72d773ec03b551d8bcf1c89e94ad974aad7205ff4ca815b5f1a6ec23c89e4b91d6dfb4ccfbe351c78edd1b8086a8c1044bf1f2535", 0x96, 0xdd) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x105402, 0x1) fremovexattr(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f09000000000004002b4000"]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000011b6362662c72f0d73ae0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff070000000000002e2f66696c653000"]) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendfile(r6, r7, &(0x7f00000000c0)=0x7, 0x40) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x5, 0x8) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x90c40, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) pwrite64(r0, &(0x7f0000000240)="a383d68f33e7b4931710cd43c91834aa2a3666c35e395c5031f3b3b45a3dd2915cd124c75f8921f6085390bbf02ef4f001ef4e8916cb1a1220e175556d64b3b2798bfc8cac7feebfe11b1fa4ebfbb3f2f686526d0d5b0751a9d22a893678b0fb3fe72d773ec03b551d8bcf1c89e94ad974aad7205ff4ca815b5f1a6ec23c89e4b91d6dfb4ccfbe351c78edd1b8086a8c1044bf1f2535", 0x96, 0xdd) (async) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x105402, 0x1) (async) fremovexattr(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f09000000000004002b4000"]) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000011b6362662c72f0d73ae0018000000", @ANYRES32, @ANYBLOB="ff070000000000002e2f66696c653000"]) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendfile(r6, r7, &(0x7f00000000c0)=0x7, 0x40) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:45 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) read$dsp(r0, &(0x7f00000004c0)=""/218, 0xda) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 64) 22:13:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001800)=@IORING_OP_SENDMSG={0x9, 0x5d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={&(0x7f0000000200)=@ax25={{0x3, @default, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)="4c68fe4916025b9cd79e2a815727827c30a44df416e358b94de092410eba1ad54ae7056ab73ce9433ddc6467fd2f5b91b7462120f4a4228e4d9cc96c11c3f7fbc68dead3ecead450573c0a062e2f0e26d1c2d1aaa265291da86bd94ee31dc4fb7a867ca5d46664a8ae57f6a877802ad936bcb6d0", 0x74}, {&(0x7f00000004c0)="47906eaffcfb144f63f62f25795167ec912e9e100c63d724befeefb96b67f60125a99cddf92528636fa12013f214462b494d697e1810437b9c972f8433e0feceed4128bb1fe853954d13b8f2704d80876e167cc7036ed686a8b87075905ec49c631296a496e0c1e01ead235cb20d2f9cda4a6d8c20954aec3355dcf086156550b9", 0x81}, {}, {&(0x7f0000000640)="4c8a1320d582747f15779cf0bd874bddf229f27ed49e8a69f31b908db1d6c8144f49471896a09b5dd68a53adc1c2e129a0d45af6250a9cd596945cc0ed7c686fa8761fbaba1cb3ba3e335507b4ecc0f09f6bf17e39b5b9c4d5956587cf91fc1a4bfea5c5b254c56a6432080123b3192c0de1ac30be9da223e0962e05c7a5fbb5be00d6de4e7f2288447aca634d1e59446b402be21fc0409fad737d8b8f9a76f3f8c18c24ed151eeb3f7fe5cc4f9fe0c1", 0xb0}, {&(0x7f0000000700)="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", 0x1000}], 0x5, &(0x7f0000001700)=[{0x88, 0x1f, 0xff, "0a6183af187d37f7c9c5cb387286b302dae3a6baf333e8e3843a658d80776730dabf7140cb688d9ceec19b0b34df8f63c0ef088b54658371e8140003327929b1211d4f7a8fab36651cc6e44aabcafb8883e83edd6308f327f129dfd691652969e875960b6883a6c332e5e0c513ef954043613176"}], 0x88}, 0x0, 0x4000}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 22:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:45 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, &(0x7f0000000180)="1db2bf8106db87b332474cd0fb059f37d75c8bf974f52d9b0ca5704cc929552b6551fa9ae03e01b228c7083bdf04a134f6d4f431e39447b3b8", 0x39, 0x20000040, 0x0, {0x0, r8}}) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5e, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x8) (async) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x90c40, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) pwrite64(r0, &(0x7f0000000240)="a383d68f33e7b4931710cd43c91834aa2a3666c35e395c5031f3b3b45a3dd2915cd124c75f8921f6085390bbf02ef4f001ef4e8916cb1a1220e175556d64b3b2798bfc8cac7feebfe11b1fa4ebfbb3f2f686526d0d5b0751a9d22a893678b0fb3fe72d773ec03b551d8bcf1c89e94ad974aad7205ff4ca815b5f1a6ec23c89e4b91d6dfb4ccfbe351c78edd1b8086a8c1044bf1f2535", 0x96, 0xdd) (async) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x105402, 0x1) (async) fremovexattr(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="6f09000000000004002b4000"]) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000011b6362662c72f0d73ae0018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff070000000000002e2f66696c653000"]) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendfile(r6, r7, &(0x7f00000000c0)=0x7, 0x40) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x80086301, 0x0) 22:13:46 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 32) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (rerun: 32) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5e, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa14ebf20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff6a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:46 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x100, 0x400, 0x0, 0x340}, &(0x7f0000000200), &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x0, {0x1, 0x1, 0x3}, {0x2, 0x1}, 0xfd, 0xfe}, {0x2, 0x3, {0x1, 0x1}, {0x0, 0x1}, 0x1, 0x2}, {0x2, 0x0, {0x2, 0x0, 0x2}, {0x2, 0x1, 0x2}, 0xfe}], 0x60) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408000, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000580)={&(0x7f0000001000)}, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100100018369b760809f7e3bf3d7c9ba980ef0014aa4b9f2e28966b00c09970dce24f192d20927492833c35a25c948f38fe038ab07a622067d25186f528530a0c1300"/80, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:46 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa14ebf20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff6a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:46 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5e, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:46 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 32) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000000)) (rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, &(0x7f0000000180)="1db2bf8106db87b332474cd0fb059f37d75c8bf974f52d9b0ca5704cc929552b6551fa9ae03e01b228c7083bdf04a134f6d4f431e39447b3b8", 0x39, 0x20000040, 0x0, {0x0, r8}}) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (rerun: 32) 22:13:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x80086601, 0x0) 22:13:46 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) shutdown(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x22, 0x0, r6, &(0x7f0000000300)={0x800, 0x1, 0x8}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x54be9}) syz_io_uring_setup(0x22d2, &(0x7f0000000200)={0x0, 0xbd27, 0x20, 0x0, 0x34d, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:47 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa14ebf20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff6a) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async, rerun: 32) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:47 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, &(0x7f0000000180)="1db2bf8106db87b332474cd0fb059f37d75c8bf974f52d9b0ca5704cc929552b6551fa9ae03e01b228c7083bdf04a134f6d4f431e39447b3b8", 0x39, 0x20000040, 0x0, {0x0, r8}}) (async) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, &(0x7f0000000180)="1db2bf8106db87b332474cd0fb059f37d75c8bf974f52d9b0ca5704cc929552b6551fa9ae03e01b228c7083bdf04a134f6d4f431e39447b3b8", 0x39, 0x20000040, 0x0, {0x0, r8}}) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 22:13:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="7beb5abb3da55291f19501e6e431cb0a85fb8a71062e92ad69e9f8488fd1f6e7ac21ca96e0f9f3f8c6acd67e21008c4b94efaa5c23a5d7ea39b2a020e497da42a10fad55daf6dbdf3d728d0d6d3abf817aecaef7bc04aaf188fd890b2ce8aa7e9243569c4c13", @ANYRES16=r2], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f01c866b99d0300000f32650f01c90f306766f20ff0a6006000000fdf0cb80b008ed866b800000100ba430066ed0f21f86635000004000f23f8f20f2a590066b9c40900000f32"}], 0x1, 0xe, 0x0, 0xd) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x88001) r5 = dup2(r4, r0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:47 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x100, 0x400, 0x0, 0x340}, &(0x7f0000000200), &(0x7f0000000140)=0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x0, {0x1, 0x1, 0x3}, {0x2, 0x1}, 0xfd, 0xfe}, {0x2, 0x3, {0x1, 0x1}, {0x0, 0x1}, 0x1, 0x2}, {0x2, 0x0, {0x2, 0x0, 0x2}, {0x2, 0x1, 0x2}, 0xfe}], 0x60) (async) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 32) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408000, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000580)={&(0x7f0000001000)}, 0x1) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100100018369b760809f7e3bf3d7c9ba980ef0014aa4b9f2e28966b00c09970dce24f192d20927492833c35a25c948f38fe038ab07a622067d25186f528530a0c1300"/80, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) (async) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 22:13:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x801c581f, 0x0) 22:13:48 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) shutdown(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x22, 0x0, r6, &(0x7f0000000300)={0x800, 0x1, 0x8}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x54be9}) (async) syz_io_uring_setup(0x22d2, &(0x7f0000000200)={0x0, 0xbd27, 0x20, 0x0, 0x34d, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="7beb5abb3da55291f19501e6e431cb0a85fb8a71062e92ad69e9f8488fd1f6e7ac21ca96e0f9f3f8c6acd67e21008c4b94efaa5c23a5d7ea39b2a020e497da42a10fad55daf6dbdf3d728d0d6d3abf817aecaef7bc04aaf188fd890b2ce8aa7e9243569c4c13", @ANYRES16=r2], 0x208e24b) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f01c866b99d0300000f32650f01c90f306766f20ff0a6006000000fdf0cb80b008ed866b800000100ba430066ed0f21f86635000004000f23f8f20f2a590066b9c40900000f32"}], 0x1, 0xe, 0x0, 0xd) (rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x88001) (async) r5 = dup2(r4, r0) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) (async) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 22:13:48 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x7752, &(0x7f0000000200)={0x0, 0xf6d1, 0x100, 0x0, 0x193, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 22:13:48 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000004c0)={0x0, 0x100, 0x400, 0x0, 0x340}, &(0x7f0000000200), &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x0, {0x1, 0x1, 0x3}, {0x2, 0x1}, 0xfd, 0xfe}, {0x2, 0x3, {0x1, 0x1}, {0x0, 0x1}, 0x1, 0x2}, {0x2, 0x0, {0x2, 0x0, 0x2}, {0x2, 0x1, 0x2}, 0xfe}], 0x60) (async) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x408000, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000580)={&(0x7f0000001000)}, 0x1) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000340)=ANY=[], 0x208e24b) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r8, r7, &(0x7f0000000000)=0xc876, 0x400) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r7, 0x7b3, &(0x7f0000000340)) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100100018369b760809f7e3bf3d7c9ba980ef0014aa4b9f2e28966b00c09970dce24f192d20927492833c35a25c948f38fe038ab07a622067d25186f528530a0c1300"/80, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYBLOB="7beb5abb3da55291f19501e6e431cb0a85fb8a71062e92ad69e9f8488fd1f6e7ac21ca96e0f9f3f8c6acd67e21008c4b94efaa5c23a5d7ea39b2a020e497da42a10fad55daf6dbdf3d728d0d6d3abf817aecaef7bc04aaf188fd890b2ce8aa7e9243569c4c13", @ANYRES16=r2], 0x208e24b) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f01c866b99d0300000f32650f01c90f306766f20ff0a6006000000fdf0cb80b008ed866b800000100ba430066ed0f21f86635000004000f23f8f20f2a590066b9c40900000f32"}], 0x1, 0xe, 0x0, 0xd) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x88001) (async) r5 = dup2(r4, r0) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:48 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) shutdown(0xffffffffffffffff, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r7, r6, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x22, 0x0, r6, &(0x7f0000000300)={0x800, 0x1, 0x8}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x54be9}) (async) syz_io_uring_setup(0x22d2, &(0x7f0000000200)={0x0, 0xbd27, 0x20, 0x0, 0x34d, 0x0, r3}, &(0x7f0000000380), &(0x7f0000000340)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 22:13:48 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x7752, &(0x7f0000000200)={0x0, 0xf6d1, 0x100, 0x0, 0x193, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (rerun: 32) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f056dca9eee2ff077961fc57fa7115f20000345d4d638361c5ac6d386c416faf5ee83e5e37eafde2d60bd1f38081e2d032516acda2"], 0x208e24b) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:49 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000200)=@v3={0x3000000, [{0x2, 0x80000001}, {0x5, 0x20}], 0xee01}, 0x18, 0x1) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5cf, 0x2, 0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000040), &(0x7f0000000140)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_aout(r6, &(0x7f0000000640)={{0x108, 0x7f, 0x1, 0x299, 0x370, 0x81, 0x2ce, 0x20}, "5a753f897638edf7f7a5f64871e72fa631b32773a47f38d328ced1fbb095e67093688c016ceaecf891dce6edb0e435", ['\x00', '\x00']}, 0x24f) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f056dca9eee2ff077961fc57fa7115f20000345d4d638361c5ac6d386c416faf5ee83e5e37eafde2d60bd1f38081e2d032516acda2"], 0x208e24b) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:49 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r4) (async) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000200)=@v3={0x3000000, [{0x2, 0x80000001}, {0x5, 0x20}], 0xee01}, 0x18, 0x1) (async, rerun: 32) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (rerun: 32) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5cf, 0x2, 0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000040), &(0x7f0000000140)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_aout(r6, &(0x7f0000000640)={{0x108, 0x7f, 0x1, 0x299, 0x370, 0x81, 0x2ce, 0x20}, "5a753f897638edf7f7a5f64871e72fa631b32773a47f38d328ced1fbb095e67093688c016ceaecf891dce6edb0e435", ['\x00', '\x00']}, 0x24f) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 22:13:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="f056dca9eee2ff077961fc57fa7115f20000345d4d638361c5ac6d386c416faf5ee83e5e37eafde2d60bd1f38081e2d032516acda2"], 0x208e24b) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:49 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r4) (async) close(r4) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000200)=@v3={0x3000000, [{0x2, 0x80000001}, {0x5, 0x20}], 0xee01}, 0x18, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5cf, 0x2, 0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000040), &(0x7f0000000140)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_aout(r6, &(0x7f0000000640)={{0x108, 0x7f, 0x1, 0x299, 0x370, 0x81, 0x2ce, 0x20}, "5a753f897638edf7f7a5f64871e72fa631b32773a47f38d328ced1fbb095e67093688c016ceaecf891dce6edb0e435", ['\x00', '\x00']}, 0x24f) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 64) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 22:13:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa0100000000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:49 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000680), 0x8, 0x80000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4aa2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1, &(0x7f0000000580)=""/77, 0x4d}, 0x9}], 0x1, 0x18000, &(0x7f0000000640)) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) io_uring_enter(r5, 0xcef, 0x1e6e, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) 22:13:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 22:13:49 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x7752, &(0x7f0000000200)={0x0, 0xf6d1, 0x100, 0x0, 0x193, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000340)) (rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:50 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000200), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000640)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1f, 0x0, 0x1ffe000, 0x0, &(0x7f00000004c0)="c35b2a9ea7663ed619864d24418ea9871deac57410da8ec653b7822b699b499c9cdddf5ccc901357e45370ec2aca79b7acc77c8014c5022064631af4911a5b684274e998f89f76574431bab160aef25cc8209ac0e3cb22d15ed4fd062f4082cfdb03f7b126c9f1f2b0f519231e86393cdc88ac851667e9e1dd0fe4e06c368f99283b12784a9179e8db947d8fe7feddb9d39f85ad9032b370e9d3b67832bb95814e623e0b82b411ef526a61735bf536fcfba99c970906e23a13f0428a0c6f8dbff7ffb4ae819a5b6b8fe59d40276bc3ac2aff7e4e", 0x3, 0x0, 0x0, {0x1, r5}}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 22:13:50 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000680), 0x8, 0x80000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4aa2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1, &(0x7f0000000580)=""/77, 0x4d}, 0x9}], 0x1, 0x18000, &(0x7f0000000640)) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) io_uring_enter(r5, 0xcef, 0x1e6e, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000680), 0x8, 0x80000) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4aa2, 0x10}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1, &(0x7f0000000580)=""/77, 0x4d}, 0x9}], 0x1, 0x18000, &(0x7f0000000640)) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) io_uring_enter(r5, 0xcef, 0x1e6e, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) (async) 22:13:50 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x80000001) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa0100000000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:50 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r4, r3, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 22:13:50 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000680), 0x8, 0x80000) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000006c0)) (async) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x4aa2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/161, 0xa1}], 0x1, &(0x7f0000000580)=""/77, 0x4d}, 0x9}], 0x1, 0x18000, &(0x7f0000000640)) (async) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) io_uring_enter(r5, 0xcef, 0x1e6e, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) 22:13:50 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000200), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000640)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1f, 0x0, 0x1ffe000, 0x0, &(0x7f00000004c0)="c35b2a9ea7663ed619864d24418ea9871deac57410da8ec653b7822b699b499c9cdddf5ccc901357e45370ec2aca79b7acc77c8014c5022064631af4911a5b684274e998f89f76574431bab160aef25cc8209ac0e3cb22d15ed4fd062f4082cfdb03f7b126c9f1f2b0f519231e86393cdc88ac851667e9e1dd0fe4e06c368f99283b12784a9179e8db947d8fe7feddb9d39f85ad9032b370e9d3b67832bb95814e623e0b82b411ef526a61735bf536fcfba99c970906e23a13f0428a0c6f8dbff7ffb4ae819a5b6b8fe59d40276bc3ac2aff7e4e", 0x3, 0x0, 0x0, {0x1, r5}}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:50 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x80000001) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x80000001) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 22:13:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa0100000000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa0100000000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 22:13:50 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x44a1, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) 22:13:51 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x44a1, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async, rerun: 32) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x80000001) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000240)=0x80000001) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="f30fc737b805000000b9009800000f01c1e000b9800000c00f3235000100000f300f01c2660f3880180f01c867660f382b5062660f38cf8902000000660f3881a1b4370000", 0x45}], 0x1, 0x0, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x13, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, @dstype3={0x7, 0x7}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:51 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000200), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000640)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1f, 0x0, 0x1ffe000, 0x0, &(0x7f00000004c0)="c35b2a9ea7663ed619864d24418ea9871deac57410da8ec653b7822b699b499c9cdddf5ccc901357e45370ec2aca79b7acc77c8014c5022064631af4911a5b684274e998f89f76574431bab160aef25cc8209ac0e3cb22d15ed4fd062f4082cfdb03f7b126c9f1f2b0f519231e86393cdc88ac851667e9e1dd0fe4e06c368f99283b12784a9179e8db947d8fe7feddb9d39f85ad9032b370e9d3b67832bb95814e623e0b82b411ef526a61735bf536fcfba99c970906e23a13f0428a0c6f8dbff7ffb4ae819a5b6b8fe59d40276bc3ac2aff7e4e", 0x3, 0x0, 0x0, {0x1, r5}}) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2dde, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000200), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000640)={0x0, 0x0, 0x10}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f00000002c0)) (async) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r5}}) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1f, 0x0, 0x1ffe000, 0x0, &(0x7f00000004c0)="c35b2a9ea7663ed619864d24418ea9871deac57410da8ec653b7822b699b499c9cdddf5ccc901357e45370ec2aca79b7acc77c8014c5022064631af4911a5b684274e998f89f76574431bab160aef25cc8209ac0e3cb22d15ed4fd062f4082cfdb03f7b126c9f1f2b0f519231e86393cdc88ac851667e9e1dd0fe4e06c368f99283b12784a9179e8db947d8fe7feddb9d39f85ad9032b370e9d3b67832bb95814e623e0b82b411ef526a61735bf536fcfba99c970906e23a13f0428a0c6f8dbff7ffb4ae819a5b6b8fe59d40276bc3ac2aff7e4e", 0x3, 0x0, 0x0, {0x1, r5}}) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 22:13:51 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x80010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:51 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x44a1, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:51 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x5, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x80010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 22:13:52 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x5, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x80010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x80010, r4, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r7}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:52 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x5, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) (async) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="f30fc737b805000000b9009800000f01c1e000b9800000c00f3235000100000f300f01c2660f3880180f01c867660f382b5062660f38cf8902000000660f3881a1b4370000", 0x45}], 0x1, 0x0, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x13, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, @dstype3={0x7, 0x7}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:52 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x2) 22:13:52 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) r4 = syz_io_uring_setup(0x1a94, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x3, 0x5b, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) 22:13:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x3) 22:13:52 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c8a8612c366bc7c5de0751342a4afbfd6d5d99b1568a7ff6f711bfa4165cf52c3403f5a6f251d394dc6bda0355157057f42c7db2a599f2cc0f25d2d3297cccc7c8d74f1521a4a", @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf253e0000000c009900040000005f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000841}, 0x60) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=r2, @ANYBLOB="0966696c6530007102ffb661473b9f3141715b808319e84da88404c28010a22c65d347"]) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) r9 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3e8}, &(0x7f0000000200)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r12, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r14, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r14) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r16 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r16, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r16) syz_io_uring_submit(r7, r11, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x55, 0x0, @fd=r14, 0x0, 0x0, 0x100000, 0x8, 0x0, {0x0, r15, r16}}) r17 = accept4$alg(r5, 0x0, 0x0, 0x80800) setsockopt(r17, 0x7, 0x4, &(0x7f0000000380)="132f479eaacade936af7864b6c067b35c6afa09206ba7ad4f6e79b9e4497e35ec7", 0x21) read$dsp(r4, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="f30fc737b805000000b9009800000f01c1e000b9800000c00f3235000100000f300f01c2660f3880180f01c867660f382b5062660f38cf8902000000660f3881a1b4370000", 0x45}], 0x1, 0x0, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x13, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, @dstype3={0x7, 0x7}], 0x2) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x144d, &(0x7f0000000340)={0x0, 0x40007196, 0x0, 0x2, 0x800}, &(0x7f0000000240), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000200)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x210}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) r4 = syz_io_uring_setup(0x1a94, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x3, 0x5b, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendfile(r3, r1, &(0x7f0000000040)=0x8, 0x3ff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x9, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x4) 22:13:53 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x80000) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c8a8612c366bc7c5de0751342a4afbfd6d5d99b1568a7ff6f711bfa4165cf52c3403f5a6f251d394dc6bda0355157057f42c7db2a599f2cc0f25d2d3297cccc7c8d74f1521a4a", @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf253e0000000c009900040000005f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000841}, 0x60) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=r2, @ANYBLOB="0966696c6530007102ffb661473b9f3141715b808319e84da88404c28010a22c65d347"]) (async) fstat(0xffffffffffffffff, &(0x7f0000000300)) (async) r6 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) (async) r9 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3e8}, &(0x7f0000000200)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r12, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r14, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r14) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) r16 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r16, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r16) (async, rerun: 32) syz_io_uring_submit(r7, r11, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x55, 0x0, @fd=r14, 0x0, 0x0, 0x100000, 0x8, 0x0, {0x0, r15, r16}}) (rerun: 32) r17 = accept4$alg(r5, 0x0, 0x0, 0x80800) setsockopt(r17, 0x7, 0x4, &(0x7f0000000380)="132f479eaacade936af7864b6c067b35c6afa09206ba7ad4f6e79b9e4497e35ec7", 0x21) (async) read$dsp(r4, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x144d, &(0x7f0000000340)={0x0, 0x40007196, 0x0, 0x2, 0x800}, &(0x7f0000000240), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000200)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x210}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) syz_io_uring_setup(0x144d, &(0x7f0000000340)={0x0, 0x40007196, 0x0, 0x2, 0x800}, &(0x7f0000000240), &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000200)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x210}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) 22:13:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='gid_map\x00') read$FUSE(r1, &(0x7f00000015c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0x0, r2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) r4 = syz_io_uring_setup(0x1a94, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x3, 0x5b, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r4, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r3) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x9, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:53 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c8a8612c366bc7c5de0751342a4afbfd6d5d99b1568a7ff6f711bfa4165cf52c3403f5a6f251d394dc6bda0355157057f42c7db2a599f2cc0f25d2d3297cccc7c8d74f1521a4a", @ANYRES16=r1, @ANYBLOB="020026bd7000fedbdf253e0000000c009900040000005f000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000841}, 0x60) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=r2, @ANYBLOB="0966696c6530007102ffb661473b9f3141715b808319e84da88404c28010a22c65d347"]) fstat(0xffffffffffffffff, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) (async) r9 = syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3e8}, &(0x7f0000000200)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r6, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)=0x0) (async) syz_io_uring_setup(0x3690, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f0000000200)) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r12, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r13, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0, 0x12143}) (async) r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r14, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r14) (async) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) r16 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r16, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r16) (async) syz_io_uring_submit(r7, r11, &(0x7f00000004c0)=@IORING_OP_TEE={0x21, 0x55, 0x0, @fd=r14, 0x0, 0x0, 0x100000, 0x8, 0x0, {0x0, r15, r16}}) (async) r17 = accept4$alg(r5, 0x0, 0x0, 0x80800) setsockopt(r17, 0x7, 0x4, &(0x7f0000000380)="132f479eaacade936af7864b6c067b35c6afa09206ba7ad4f6e79b9e4497e35ec7", 0x21) (async) read$dsp(r4, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) io_uring_enter(r1, 0x1f6a, 0xde59, 0x14, &(0x7f0000000000)={[0x8]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x144d, &(0x7f0000000340)={0x0, 0x40007196, 0x0, 0x2, 0x800}, &(0x7f0000000240), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000200)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x210}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x5) 22:13:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendfile(r3, r1, &(0x7f0000000040)=0x8, 0x3ff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r3) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x9, 0x7}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001c00)={0x6, {0x0, 0x1, 0x20, 0xa893, 0x7}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5449, &(0x7f0000000200)={0x0, 0x99a3, 0x200, 0x3, 0x39c, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) r10 = signalfd(r6, &(0x7f0000001c40)={[0x1]}, 0x8) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r11) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001c80)={0x0, r11, 0x2, 0x5, 0x9, 0x9}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000001bc0)={0x4e, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/22, 0x16}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/102, 0x66}, {&(0x7f0000001840)=""/205, 0xcd}, {&(0x7f0000001940)=""/179, 0xb3}, {&(0x7f0000001a00)=""/147, 0x93}], &(0x7f0000001b80)=[0x81, 0x1f, 0x0, 0x9], 0xa}, 0x20) syz_io_uring_submit(r7, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) io_uring_enter(r1, 0x1f6a, 0xde59, 0x14, &(0x7f0000000000)={[0x8]}, 0x8) (async) io_uring_enter(r1, 0x1f6a, 0xde59, 0x14, &(0x7f0000000000)={[0x8]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x6) 22:13:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="f053dca9eee2ff077961fc57fa7115f20000345d4dbb8f0afe4d3d921863"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendfile(r3, r1, &(0x7f0000000040)=0x8, 0x3ff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:54 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x3b3, &(0x7f0000000340)={0x0, 0x6d15, 0x20, 0x800000, 0x10000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a4a03, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r9, 0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x21, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) r10 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x523002, 0xf8) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYBLOB="020000002d6178734d67705d3e9eacb5fa06bd62256d3efc069e0e759d155a8a61ab55aaf88ae08128f46319fa3f023cc2e5cefe70c4dfa78f9b78c2882a9e3245ded5"]) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="2e480fc7a808000000660f3a1724d82e0f0fa10001c0fe970f005c4dcf0f20d835200000000f22d845afb9800000c00f3235000100000f30640f01cb66baa00066ed3e0f30", 0x45}], 0x1, 0x5, &(0x7f0000000240)=[@cr0={0x0, 0x20000000}, @dstype0={0x6, 0xf}], 0x2) close(r1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x80, 0x400) r5 = dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) io_uring_enter(r1, 0x1f6a, 0xde59, 0x14, &(0x7f0000000000)={[0x8]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x7) 22:13:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES16=r2], 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:54 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x100, &(0x7f0000000340)=[r5, r6], 0x2, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x5, 0x2, 0x80) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x9) 22:13:55 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 64) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r5) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x100, &(0x7f0000000340)=[r5, r6], 0x2, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x5, 0x2, 0x80) (async, rerun: 64) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001c00)={0x6, {0x0, 0x1, 0x20, 0xa893, 0x7}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x5449, &(0x7f0000000200)={0x0, 0x99a3, 0x200, 0x3, 0x39c, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) (async) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) (async) r10 = signalfd(r6, &(0x7f0000001c40)={[0x1]}, 0x8) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async, rerun: 64) close(r11) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001c80)={0x0, r11, 0x2, 0x5, 0x9, 0x9}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000001bc0)={0x4e, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/22, 0x16}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/102, 0x66}, {&(0x7f0000001840)=""/205, 0xcd}, {&(0x7f0000001940)=""/179, 0xb3}, {&(0x7f0000001a00)=""/147, 0x93}], &(0x7f0000001b80)=[0x81, 0x1f, 0x0, 0x9], 0xa}, 0x20) syz_io_uring_submit(r7, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES16=r2], 0x208e24b) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:55 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) (async, rerun: 32) syz_io_uring_setup(0x3b3, &(0x7f0000000340)={0x0, 0x6d15, 0x20, 0x800000, 0x10000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) (async, rerun: 32) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (rerun: 32) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a4a03, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r9, 0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x21, 0x0, 0x1, {0x0, r8}}) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) r10 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x523002, 0xf8) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYBLOB="020000002d6178734d67705d3e9eacb5fa06bd62256d3efc069e0e759d155a8a61ab55aaf88ae08128f46319fa3f023cc2e5cefe70c4dfa78f9b78c2882a9e3245ded5"]) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xe) 22:13:55 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r5) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x100, &(0x7f0000000340)=[r5, r6], 0x2, 0x0, 0x0, {0x0, r7}}) (async) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/147, 0x93}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/162, 0xa2}], 0x5, 0x2, 0x80) (async) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) 22:13:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc876, 0x400) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="2e480fc7a808000000660f3a1724d82e0f0fa10001c0fe970f005c4dcf0f20d835200000000f22d845afb9800000c00f3235000100000f30640f01cb66baa00066ed3e0f30", 0x45}], 0x1, 0x5, &(0x7f0000000240)=[@cr0={0x0, 0x20000000}, @dstype0={0x6, 0xf}], 0x2) (rerun: 32) close(r1) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x80, 0x400) r5 = dup(r4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) 22:13:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001c00)={0x6, {0x0, 0x1, 0x20, 0xa893, 0x7}}) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) syz_io_uring_setup(0x5449, &(0x7f0000000200)={0x0, 0x99a3, 0x200, 0x3, 0x39c, 0x0, r4}, &(0x7f0000000300), &(0x7f0000000340)) (async) r6 = syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)=ANY=[], 0x208e24b) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r9, r8, &(0x7f0000000000)=0xc876, 0x400) (async) r10 = signalfd(r6, &(0x7f0000001c40)={[0x1]}, 0x8) (async, rerun: 32) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) preadv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) close(r11) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000001c80)={0x0, r11, 0x2, 0x5, 0x9, 0x9}) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xe, &(0x7f0000001bc0)={0x4e, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/22, 0x16}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/102, 0x66}, {&(0x7f0000001840)=""/205, 0xcd}, {&(0x7f0000001940)=""/179, 0xb3}, {&(0x7f0000001a00)=""/147, 0x93}], &(0x7f0000001b80)=[0x81, 0x1f, 0x0, 0x9], 0xa}, 0x20) (async) syz_io_uring_submit(r7, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000003c0)=""/199, 0xc7) 22:13:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) close(r2) (async) close(r2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRES16=r2], 0x208e24b) dup(r1) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22:13:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x1000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0xf) 22:13:55 executing program 1: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 22:13:55 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)) syz_io_uring_setup(0x3b3, &(0x7f0000000340)={0x0, 0x6d15, 0x20, 0x800000, 0x10000}, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_setup(0x3b3, &(0x7f0000000340)={0x0, 0x6d15, 0x20, 0x800000, 0x10000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[], 0x208e24b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) (async) sendfile(r5, r4, &(0x7f0000000000)=0xc876, 0x400) syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) (async) r6 = syz_io_uring_setup(0x4240, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000280), &(0x7f0000000500)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd, 0x9c65, 0x0, 0x5, 0x0, 0x0, {0x0, r7}}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a4a03, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r9, 0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x21, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r1, 0x4e07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x523002, 0xf8) (async) r10 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x523002, 0xf8) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYBLOB="020000002d6178734d67705d3e9eacb5fa06bd62256d3efc069e0e759d155a8a61ab55aaf88ae08128f46319fa3f023cc2e5cefe70c4dfa78f9b78c2882a9e3245ded5"]) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) (async) read$dsp(r0, &(0x7f00000003c0)=""/199, 0xc7) [ 705.271577][T20853] ================================================================== [ 705.279721][T20853] BUG: KASAN: slab-use-after-free in __lock_acquire+0x4208/0x5de0 [ 705.287566][T20853] Read of size 8 at addr ffff88802bd85020 by task syz-executor.2/20853 [ 705.295830][T20853] [ 705.298169][T20853] CPU: 1 PID: 20853 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 705.308267][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 705.318432][T20853] Call Trace: [ 705.321725][T20853] [ 705.324668][T20853] dump_stack_lvl+0xd9/0x1b0 [ 705.329275][T20853] print_report+0xc4/0x620 [ 705.333710][T20853] ? __virt_addr_valid+0x5e/0x2d0 [ 705.338739][T20853] ? __phys_addr+0xc6/0x140 [ 705.343246][T20853] kasan_report+0xda/0x110 [ 705.347667][T20853] ? __lock_acquire+0x4208/0x5de0 [ 705.352707][T20853] ? __lock_acquire+0x4208/0x5de0 [ 705.357751][T20853] __lock_acquire+0x4208/0x5de0 [ 705.362612][T20853] ? reacquire_held_locks+0x20b/0x4b0 [ 705.367997][T20853] ? find_held_lock+0x2d/0x110 [ 705.372766][T20853] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 705.378767][T20853] ? mntput_no_expire+0x794/0xaf0 [ 705.383988][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 705.389369][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 705.394747][T20853] ? do_raw_spin_lock+0x12e/0x2b0 [ 705.399783][T20853] ? spin_bug+0x1d0/0x1d0 [ 705.404127][T20853] lock_acquire+0x1ae/0x510 [ 705.408725][T20853] ? ptp_release+0xb2/0x2b0 [ 705.413391][T20853] ? lock_sync+0x190/0x190 [ 705.417811][T20853] ? do_raw_spin_lock+0x12e/0x2b0 [ 705.422865][T20853] ? mnt_get_count+0x1e0/0x1e0 [ 705.427644][T20853] _raw_spin_lock_irqsave+0x3a/0x50 [ 705.432865][T20853] ? ptp_release+0xb2/0x2b0 [ 705.437374][T20853] ptp_release+0xb2/0x2b0 [ 705.441713][T20853] ptp_read+0xf6/0x830 [ 705.445783][T20853] ? preempt_count_sub+0x150/0x150 [ 705.450896][T20853] ? ptp_poll+0x1b0/0x1b0 [ 705.455253][T20853] ? down_read+0x13e/0x470 [ 705.459757][T20853] ? down_write_killable+0x250/0x250 [ 705.465043][T20853] ? fsnotify_perm.part.0+0x23c/0x5c0 [ 705.470422][T20853] ? fsnotify_perm.part.0+0x247/0x5c0 [ 705.475793][T20853] ? apparmor_file_permission+0x258/0x540 [ 705.481673][T20853] ? ptp_poll+0x1b0/0x1b0 [ 705.486001][T20853] posix_clock_read+0x138/0x1b0 [ 705.490870][T20853] ? posix_clock_compat_ioctl+0x30/0x30 [ 705.496529][T20853] do_iter_read+0x567/0x830 [ 705.501046][T20853] vfs_readv+0x12d/0x1a0 [ 705.505314][T20853] ? vfs_iter_read+0xb0/0xb0 [ 705.509945][T20853] ? find_held_lock+0x2d/0x110 [ 705.514728][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 705.520110][T20853] ? __might_fault+0xe6/0x1a0 [ 705.524793][T20853] ? __fget_files+0x1c6/0x340 [ 705.529480][T20853] __x64_sys_preadv+0x228/0x300 [ 705.534337][T20853] ? __ia32_sys_writev+0xb0/0xb0 [ 705.539366][T20853] ? syscall_enter_from_user_mode+0x26/0x80 [ 705.545265][T20853] do_syscall_64+0x3f/0x110 [ 705.549775][T20853] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 705.555671][T20853] RIP: 0033:0x7f258007cae9 [ 705.560082][T20853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 705.579704][T20853] RSP: 002b:00007f257ebfe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 705.588122][T20853] RAX: ffffffffffffffda RBX: 00007f258019bf80 RCX: 00007f258007cae9 [ 705.596107][T20853] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 705.604088][T20853] RBP: 00007f25800c847a R08: 0000000000000000 R09: 0000000000000000 [ 705.612061][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.620031][T20853] R13: 000000000000000b R14: 00007f258019bf80 R15: 00007f25802bfa48 [ 705.628010][T20853] [ 705.631023][T20853] [ 705.633336][T20853] Allocated by task 20853: [ 705.637736][T20853] kasan_save_stack+0x33/0x50 [ 705.642506][T20853] kasan_set_track+0x25/0x30 [ 705.647114][T20853] __kasan_kmalloc+0xa2/0xb0 [ 705.651702][T20853] ptp_open+0xe3/0x4f0 [ 705.655769][T20853] posix_clock_open+0x17e/0x240 [ 705.660706][T20853] chrdev_open+0x26d/0x6e0 [ 705.665127][T20853] do_dentry_open+0x8d4/0x18d0 [ 705.669888][T20853] path_openat+0x1d4e/0x2c40 [ 705.674474][T20853] do_filp_open+0x1de/0x430 [ 705.678975][T20853] do_sys_openat2+0x176/0x1e0 [ 705.683652][T20853] __x64_sys_openat+0x175/0x210 [ 705.688500][T20853] do_syscall_64+0x3f/0x110 [ 705.693009][T20853] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 705.698907][T20853] [ 705.701219][T20853] Freed by task 20854: [ 705.705271][T20853] kasan_save_stack+0x33/0x50 [ 705.709962][T20853] kasan_set_track+0x25/0x30 [ 705.714554][T20853] kasan_save_free_info+0x2b/0x40 [ 705.719581][T20853] ____kasan_slab_free+0x15b/0x1b0 [ 705.724694][T20853] slab_free_freelist_hook+0x114/0x1e0 [ 705.730149][T20853] __kmem_cache_free+0xc0/0x180 [ 705.735005][T20853] ptp_release+0x204/0x2b0 [ 705.739420][T20853] ptp_read+0xf6/0x830 [ 705.743485][T20853] posix_clock_read+0x138/0x1b0 [ 705.748356][T20853] do_iter_read+0x567/0x830 [ 705.752879][T20853] vfs_readv+0x12d/0x1a0 [ 705.757134][T20853] __x64_sys_preadv+0x228/0x300 [ 705.762011][T20853] do_syscall_64+0x3f/0x110 [ 705.766531][T20853] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 705.772426][T20853] [ 705.774757][T20853] The buggy address belongs to the object at ffff88802bd84000 [ 705.774757][T20853] which belongs to the cache kmalloc-8k of size 8192 [ 705.788903][T20853] The buggy address is located 4128 bytes inside of [ 705.788903][T20853] freed 8192-byte region [ffff88802bd84000, ffff88802bd86000) [ 705.802962][T20853] [ 705.805283][T20853] The buggy address belongs to the physical page: [ 705.811684][T20853] page:ffffea0000af6000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd80 [ 705.821843][T20853] head:ffffea0000af6000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 705.830785][T20853] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 705.838762][T20853] page_type: 0xffffffff() [ 705.843085][T20853] raw: 00fff00000000840 ffff888013042280 dead000000000122 0000000000000000 [ 705.851680][T20853] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 705.860272][T20853] page dumped because: kasan: bad access detected [ 705.866866][T20853] page_owner tracks the page as allocated [ 705.872571][T20853] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20858, tgid 20855 (syz-executor.0), ts 705252225857, free_ts 705239407854 [ 705.895845][T20853] post_alloc_hook+0x2cf/0x340 [ 705.900622][T20853] get_page_from_freelist+0xa25/0x36c0 [ 705.906181][T20853] __alloc_pages+0x1d0/0x4a0 [ 705.910780][T20853] alloc_pages_mpol+0x258/0x5f0 [ 705.915632][T20853] allocate_slab+0x251/0x380 [ 705.920219][T20853] ___slab_alloc+0x8c7/0x1580 [ 705.924894][T20853] __slab_alloc.constprop.0+0x56/0xa0 [ 705.930269][T20853] __kmem_cache_alloc_node+0x131/0x310 [ 705.935729][T20853] kmalloc_trace+0x25/0xe0 [ 705.940144][T20853] ptp_open+0xe3/0x4f0 [ 705.944220][T20853] posix_clock_open+0x17e/0x240 [ 705.949080][T20853] chrdev_open+0x26d/0x6e0 [ 705.953497][T20853] do_dentry_open+0x8d4/0x18d0 [ 705.958258][T20853] path_openat+0x1d4e/0x2c40 [ 705.962847][T20853] do_filp_open+0x1de/0x430 [ 705.967347][T20853] do_sys_openat2+0x176/0x1e0 [ 705.972027][T20853] page last free stack trace: [ 705.976773][T20853] free_unref_page_prepare+0x4f8/0xa90 [ 705.982233][T20853] free_unref_page+0x33/0x3b0 [ 705.986916][T20853] io_ring_exit_work+0xf8d/0x1600 [ 705.992033][T20853] process_one_work+0x884/0x15c0 [ 705.996976][T20853] worker_thread+0x8b9/0x1290 [ 706.001656][T20853] kthread+0x33c/0x440 [ 706.005723][T20853] ret_from_fork+0x45/0x80 [ 706.010170][T20853] ret_from_fork_asm+0x11/0x20 [ 706.014939][T20853] [ 706.017255][T20853] Memory state around the buggy address: [ 706.022874][T20853] ffff88802bd84f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 706.031039][T20853] ffff88802bd84f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 706.039093][T20853] >ffff88802bd85000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 706.047144][T20853] ^ [ 706.052331][T20853] ffff88802bd85080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 706.060385][T20853] ffff88802bd85100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 706.068439][T20853] ================================================================== [ 706.076491][T20853] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 706.083676][T20853] CPU: 1 PID: 20853 Comm: syz-executor.2 Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 706.093736][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 706.103783][T20853] Call Trace: [ 706.107059][T20853] [ 706.109985][T20853] dump_stack_lvl+0xd9/0x1b0 [ 706.114584][T20853] panic+0x6dc/0x790 [ 706.118485][T20853] ? panic_smp_self_stop+0xa0/0xa0 [ 706.123654][T20853] ? rcu_is_watching+0x12/0xb0 [ 706.128423][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 706.133801][T20853] ? dump_page+0x6dd/0x1310 [ 706.138306][T20853] ? check_panic_on_warn+0x1f/0xb0 [ 706.143424][T20853] check_panic_on_warn+0xab/0xb0 [ 706.148365][T20853] end_report+0x108/0x150 [ 706.152696][T20853] kasan_report+0xea/0x110 [ 706.157115][T20853] ? __lock_acquire+0x4208/0x5de0 [ 706.162146][T20853] ? __lock_acquire+0x4208/0x5de0 [ 706.167180][T20853] __lock_acquire+0x4208/0x5de0 [ 706.172036][T20853] ? reacquire_held_locks+0x20b/0x4b0 [ 706.177418][T20853] ? find_held_lock+0x2d/0x110 [ 706.182186][T20853] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 706.188193][T20853] ? mntput_no_expire+0x794/0xaf0 [ 706.193224][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 706.198833][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 706.204208][T20853] ? do_raw_spin_lock+0x12e/0x2b0 [ 706.209241][T20853] ? spin_bug+0x1d0/0x1d0 [ 706.213580][T20853] lock_acquire+0x1ae/0x510 [ 706.218091][T20853] ? ptp_release+0xb2/0x2b0 [ 706.222607][T20853] ? lock_sync+0x190/0x190 [ 706.227026][T20853] ? do_raw_spin_lock+0x12e/0x2b0 [ 706.232070][T20853] ? mnt_get_count+0x1e0/0x1e0 [ 706.236869][T20853] _raw_spin_lock_irqsave+0x3a/0x50 [ 706.242082][T20853] ? ptp_release+0xb2/0x2b0 [ 706.246612][T20853] ptp_release+0xb2/0x2b0 [ 706.250946][T20853] ptp_read+0xf6/0x830 [ 706.255013][T20853] ? preempt_count_sub+0x150/0x150 [ 706.260123][T20853] ? ptp_poll+0x1b0/0x1b0 [ 706.265060][T20853] ? down_read+0x13e/0x470 [ 706.269475][T20853] ? down_write_killable+0x250/0x250 [ 706.274760][T20853] ? fsnotify_perm.part.0+0x23c/0x5c0 [ 706.280132][T20853] ? fsnotify_perm.part.0+0x247/0x5c0 [ 706.285499][T20853] ? apparmor_file_permission+0x258/0x540 [ 706.291225][T20853] ? ptp_poll+0x1b0/0x1b0 [ 706.295558][T20853] posix_clock_read+0x138/0x1b0 [ 706.300419][T20853] ? posix_clock_compat_ioctl+0x30/0x30 [ 706.305973][T20853] do_iter_read+0x567/0x830 [ 706.310491][T20853] vfs_readv+0x12d/0x1a0 [ 706.314748][T20853] ? vfs_iter_read+0xb0/0xb0 [ 706.319343][T20853] ? find_held_lock+0x2d/0x110 [ 706.324113][T20853] ? reacquire_held_locks+0x4b0/0x4b0 [ 706.329494][T20853] ? __might_fault+0xe6/0x1a0 [ 706.334178][T20853] ? __fget_files+0x1c6/0x340 [ 706.338862][T20853] __x64_sys_preadv+0x228/0x300 [ 706.343726][T20853] ? __ia32_sys_writev+0xb0/0xb0 [ 706.348668][T20853] ? syscall_enter_from_user_mode+0x26/0x80 [ 706.354566][T20853] do_syscall_64+0x3f/0x110 [ 706.359080][T20853] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 706.364975][T20853] RIP: 0033:0x7f258007cae9 [ 706.369473][T20853] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 706.389080][T20853] RSP: 002b:00007f257ebfe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 706.397491][T20853] RAX: ffffffffffffffda RBX: 00007f258019bf80 RCX: 00007f258007cae9 [ 706.405473][T20853] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 706.413452][T20853] RBP: 00007f25800c847a R08: 0000000000000000 R09: 0000000000000000 [ 706.421428][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.429399][T20853] R13: 000000000000000b R14: 00007f258019bf80 R15: 00007f25802bfa48 [ 706.437375][T20853] [ 706.440584][T20853] Kernel Offset: disabled [ 706.444900][T20853] Rebooting in 86400 seconds..