Warning: Permanently added '[localhost]:47578' (ECDSA) to the list of known hosts. 2026/01/17 06:14:27 fuzzer started 2026/01/17 06:14:27 dialing manager at localhost:42157 syzkaller login: [ 51.892266] cgroup: Unknown subsys name 'net' [ 51.948953] cgroup: Unknown subsys name 'cpuset' [ 51.965930] cgroup: Unknown subsys name 'rlimit' 2026/01/17 06:14:38 syscalls: 213 2026/01/17 06:14:38 code coverage: enabled 2026/01/17 06:14:38 comparison tracing: enabled 2026/01/17 06:14:38 extra coverage: enabled 2026/01/17 06:14:38 setuid sandbox: enabled 2026/01/17 06:14:38 namespace sandbox: enabled 2026/01/17 06:14:38 Android sandbox: enabled 2026/01/17 06:14:38 fault injection: enabled 2026/01/17 06:14:38 leak checking: enabled 2026/01/17 06:14:38 net packet injection: enabled 2026/01/17 06:14:38 net device setup: enabled 2026/01/17 06:14:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 06:14:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 06:14:38 USB emulation: enabled 2026/01/17 06:14:38 hci packet injection: enabled 2026/01/17 06:14:38 wifi device emulation: enabled 2026/01/17 06:14:38 802.15.4 emulation: enabled 2026/01/17 06:14:38 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 06:14:40 starting 8 fuzzer processes 06:14:40 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:14:40 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) read$snapshot(r0, &(0x7f0000000380)=""/206, 0xce) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000480)) 06:14:40 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:14:40 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) write$sndseq(r1, &(0x7f0000000840), 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000880)=""/165) 06:14:40 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:14:40 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000900)) [ 62.905072] audit: type=1400 audit(1768630480.171:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:14:40 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'lblc\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getpgrp(0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40102000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x40000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), r2) 06:14:40 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) r7 = semget(0x3, 0x0, 0x108) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f0000001580)=0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) [ 64.049068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.053728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.055675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.060285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.064822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.167109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.171329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.174628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.185781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.190130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.193869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.202310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.206984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.211706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.226937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.233067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.236233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.241766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.243689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.246148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.247355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.249358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.250843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.252150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.257702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.264371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.266665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.267709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.269134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.276723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.296905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.297898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.309723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.311141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.313124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.315589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.331238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.348568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.359837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.363805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.078456] Bluetooth: hci0: command tx timeout [ 66.270529] Bluetooth: hci2: command tx timeout [ 66.271540] Bluetooth: hci1: command tx timeout [ 66.334907] Bluetooth: hci3: command tx timeout [ 66.334938] Bluetooth: hci4: command tx timeout [ 66.335735] Bluetooth: hci5: command tx timeout [ 66.398151] Bluetooth: hci7: command tx timeout [ 66.398658] Bluetooth: hci6: command tx timeout [ 68.126462] Bluetooth: hci0: command tx timeout [ 68.318482] Bluetooth: hci1: command tx timeout [ 68.318917] Bluetooth: hci2: command tx timeout [ 68.382345] Bluetooth: hci3: command tx timeout [ 68.382853] Bluetooth: hci5: command tx timeout [ 68.383081] Bluetooth: hci4: command tx timeout [ 68.446470] Bluetooth: hci7: command tx timeout [ 68.446552] Bluetooth: hci6: command tx timeout [ 70.173846] Bluetooth: hci0: command tx timeout [ 70.366200] Bluetooth: hci2: command tx timeout [ 70.366483] Bluetooth: hci1: command tx timeout [ 70.430584] Bluetooth: hci3: command tx timeout [ 70.430997] Bluetooth: hci5: command tx timeout [ 70.431141] Bluetooth: hci4: command tx timeout [ 70.493604] Bluetooth: hci6: command tx timeout [ 70.494941] Bluetooth: hci7: command tx timeout [ 72.221529] Bluetooth: hci0: command tx timeout [ 72.413860] Bluetooth: hci2: command tx timeout [ 72.414757] Bluetooth: hci1: command tx timeout [ 72.477498] Bluetooth: hci4: command tx timeout [ 72.478603] Bluetooth: hci5: command tx timeout [ 72.478982] Bluetooth: hci3: command tx timeout [ 72.543586] Bluetooth: hci7: command tx timeout [ 72.544023] Bluetooth: hci6: command tx timeout [ 98.969312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.984516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.307979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.309225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.062125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.067843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.348950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.349966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.644554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.645268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.798588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.802417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:15:18 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) write$sndseq(r1, &(0x7f0000000840), 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000880)=""/165) 06:15:18 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:18 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) write$sndseq(r1, &(0x7f0000000840), 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000880)=""/165) 06:15:18 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) write$sndseq(r1, &(0x7f0000000840), 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000880)=""/165) 06:15:18 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000900)) 06:15:18 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) write$sndseq(r1, &(0x7f0000000840), 0x0) 06:15:18 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:18 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) r9 = syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000800)=[0x8]) [ 101.981724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.982353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.069734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.070350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.161761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.162400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.244875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.246286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.554721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.555370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.657790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.658405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.676142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.677023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.730301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.731726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.733403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.734040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.809292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.810157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:15:32 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000900)) 06:15:32 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r0) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:32 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x13}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'lblc\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getpgrp(0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000080}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40102000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, r0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x40000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r4) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), r2) 06:15:32 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000740)={{0xdd, 0x7f}, {0x15, 0x5}, 0x38a, 0x6, 0xba}) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:32 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) read$snapshot(r0, &(0x7f0000000380)=""/206, 0xce) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000480)) 06:15:32 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:15:32 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) r7 = semget(0x3, 0x0, 0x108) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f0000001580)=0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:32 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) r7 = semget(0x3, 0x0, 0x108) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f0000001580)=0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:32 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000700)={0x101, @tick=0x1, 0x0, {0x1f}, 0x88, 0x4811fc1881528a83, 0x1}) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:33 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:15:40 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) read$snapshot(r0, &(0x7f0000000380)=""/206, 0xce) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000480)) 06:15:40 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000900)) 06:15:40 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:40 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000640)={{0x3, 0xff}, 'port0\x00', 0x80, 0x10046, 0x10001, 0x0, 0x4, 0x6, 0x3, 0x0, 0x5, 0x8}) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:40 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:40 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) r7 = semget(0x3, 0x0, 0x108) semctl$SETVAL(r7, 0x1, 0x10, &(0x7f0000001580)=0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:40 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:15:40 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:40 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:15:40 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) semget(0x3, 0x0, 0x108) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:40 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:40 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) read$snapshot(r0, &(0x7f0000000380)=""/206, 0xce) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000480)) 06:15:49 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) read$snapshot(r0, &(0x7f0000000380)=""/206, 0xce) 06:15:49 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:49 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:15:49 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) 06:15:49 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:49 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:49 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000001500)=""/120) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:49 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) 06:15:50 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000009c0)={0x3f, 0x80, 0x5}) 06:15:50 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:50 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) semop(r0, &(0x7f00000014c0)=[{0x2, 0x4, 0x800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xffff, 0x1800}, {0x0, 0x9, 0x1000}], 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:50 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) 06:15:50 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) 06:15:50 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) 06:15:50 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) 06:15:50 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001480)=""/41) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:58 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) syz_open_dev$evdev(&(0x7f0000000940), 0xd3a, 0x60101) 06:15:58 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa56}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffb4d}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008080}, 0x64004001) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:58 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000280)) 06:15:58 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) 06:15:58 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:15:58 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000540)) 06:15:58 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000074) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:58 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) 06:15:59 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:15:59 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) 06:15:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) r8 = syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000003c0)=""/29) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:59 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00'}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:15:59 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) 06:15:59 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) 06:15:59 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:15:59 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) syz_open_dev$evdev(&(0x7f0000000380), 0x10001, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:15:59 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4ca}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x20008040) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:08 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f00000008c0)={0x153c9430, 0x200, 0x826, {0x5, 0x5}, 0x8000, 0x1}) 06:16:08 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:08 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r2, r3/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r4, r5/1000+60000}, 0x0, 0xf000, 0x5}, {{r6, r7/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0x9, 0x3}, 0x0, 0x8d, 0xae901596, {0x9, 0x9}, 0xd, 0x8001}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:08 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:08 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/51) 06:16:08 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) sched_rr_get_interval(0x0, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:08 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) r5 = semget(0x0, 0x3, 0x400) semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000001200)=""/227) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:08 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:08 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x2, 0x0, 0x2}, {{r1, r2/1000+10000}, 0x1, 0x1f, 0x400}, {{0x77359400}, 0x1, 0x12, 0x3}, {{r3, r4/1000+60000}, 0x0, 0xf000, 0x5}, {{r5, r6/1000+60000}, 0x15, 0x5, 0x7}, {{0x0, 0x2710}, 0x2, 0xfff, 0xfffffffe}], 0x90) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:16 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) semget(0x0, 0x3, 0x400) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:16 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 06:16:16 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r5, 0xa10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15b2}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:16 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) sched_rr_get_interval(0x0, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:16 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:16 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:16 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x480340) 06:16:16 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) sched_rr_get_interval(0x0, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:16 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) r4 = semget(0x0, 0x4, 0x0) semctl$GETZCNT(r4, 0x3, 0xf, &(0x7f0000000200)=""/4096) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:16 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:16 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:16 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:16 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) semget(0x0, 0x4, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:16 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') clock_gettime(0x0, &(0x7f0000000180)) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:16 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x8) 06:16:16 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:24 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) socketpair(0x2c, 0x2, 0x2, &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) 06:16:24 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x49, 0x4}, 'port1\x00', 0x8, 0x20400, 0x9, 0x80000001, 0xfffffffc, 0x6, 0x9, 0x0, 0x2, 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) 06:16:24 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xe5) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:24 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:24 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:24 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:24 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:24 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000480)=""/71) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:24 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:24 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:24 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) 06:16:24 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:24 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) 06:16:24 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:24 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:24 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000840)) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:24 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:24 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:24 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) [ 167.461348] [ 167.461519] ===================================== [ 167.461913] WARNING: bad unlock balance detected! [ 167.462279] 6.19.0-rc5-next-20260116 #1 Not tainted [ 167.462660] ------------------------------------- [ 167.463018] syz-executor.4/4283 is trying to release lock (rcu_read_lock) at: [ 167.463563] [] __wait_on_freeing_inode+0x105/0x350 [ 167.464056] but there are no more locks to release! [ 167.464426] [ 167.464426] other info that might help us debug this: [ 167.464909] 4 locks held by syz-executor.4/4283: [ 167.465263] #0: ffff88800f50e3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 167.466242] #1: ffff88801a8a3388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 167.467970] #2: ffff88800f65a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 167.469583] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 167.471123] [ 167.471123] stack backtrace: [ 167.472387] CPU: 1 UID: 0 PID: 4283 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 167.472402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 167.472409] Call Trace: [ 167.472413] [ 167.472418] dump_stack_lvl+0xca/0x120 [ 167.472445] ? __wait_on_freeing_inode+0x105/0x350 [ 167.472459] print_unlock_imbalance_bug+0x118/0x130 [ 167.472475] ? __wait_on_freeing_inode+0x105/0x350 [ 167.472489] lock_release+0x1ee/0x270 [ 167.472504] __wait_on_freeing_inode+0x10a/0x350 [ 167.472518] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 167.472533] ? __pfx_var_wake_function+0x10/0x10 [ 167.472550] ? lock_is_held_type+0x9e/0x120 [ 167.472562] insert_inode_locked+0x25f/0x890 [ 167.472579] __ext4_new_inode+0x223d/0x4cd0 [ 167.472597] ? __pfx___ext4_new_inode+0x10/0x10 [ 167.472611] ? __pfx___dquot_initialize+0x10/0x10 [ 167.472629] ? __pfx_avc_has_perm+0x10/0x10 [ 167.472645] ext4_symlink+0x623/0xb40 [ 167.472664] ? __pfx_ext4_symlink+0x10/0x10 [ 167.472679] ? security_inode_permission+0x72/0xe0 [ 167.472692] vfs_symlink+0x44b/0x840 [ 167.472708] filename_symlinkat+0x158/0x440 [ 167.472722] ? __pfx_filename_symlinkat+0x10/0x10 [ 167.472736] ? strncpy_from_user+0x21b/0x2f0 [ 167.472753] __x64_sys_symlink+0x82/0x110 [ 167.472766] do_syscall_64+0xbf/0x420 [ 167.472779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.472791] RIP: 0033:0x7fc645608427 [ 167.472800] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.472811] RSP: 002b:00007fff7c97e708 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 167.472822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc645608427 [ 167.472829] RDX: 00007fff7c97e7e3 RSI: 00007fc645663022 RDI: 00007fff7c97e7d0 [ 167.472837] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff7c97e5a0 [ 167.472844] R10: 00007fff7c97e457 R11: 0000000000000202 R12: 0000000000000001 [ 167.472851] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff7c97e7d0 [ 167.472861] [ 167.489951] ------------[ cut here ]------------ [ 167.490325] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4283 [ 167.491688] Modules linked in: [ 167.491981] CPU: 1 UID: 0 PID: 4283 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 167.492794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 167.493427] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 167.493935] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 167.495366] RSP: 0018:ffff888040d079a0 EFLAGS: 00010286 [ 167.495823] RAX: 00000000ffffffff RBX: ffff88803ee68000 RCX: ffffffff815660f7 [ 167.496373] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88803ee683fc [ 167.496966] RBP: ffff88803ee68000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 167.497557] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803ee68000 [ 167.498112] R13: 0000000000000001 R14: ffffffff85c0ce80 R15: ffff88801abe0ca0 [ 167.498703] FS: 0000555575930400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 167.499323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.499820] CR2: 00007fc645688544 CR3: 000000001cef4000 CR4: 0000000000350ef0 [ 167.500373] Call Trace: [ 167.500648] [ 167.501282] __wait_on_freeing_inode+0x10f/0x350 [ 167.501977] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 167.503038] ? __pfx_var_wake_function+0x10/0x10 [ 167.504237] ? lock_is_held_type+0x9e/0x120 [ 167.505309] insert_inode_locked+0x25f/0x890 [ 167.506926] __ext4_new_inode+0x223d/0x4cd0 [ 167.509352] ? __pfx___ext4_new_inode+0x10/0x10 [ 167.510585] ? __pfx___dquot_initialize+0x10/0x10 [ 167.511296] ? __pfx_avc_has_perm+0x10/0x10 [ 167.513038] ext4_symlink+0x623/0xb40 [ 167.515239] ? __pfx_ext4_symlink+0x10/0x10 [ 167.516220] ? security_inode_permission+0x72/0xe0 [ 167.517832] vfs_symlink+0x44b/0x840 [ 167.519079] filename_symlinkat+0x158/0x440 [ 167.520181] ? __pfx_filename_symlinkat+0x10/0x10 [ 167.520924] ? strncpy_from_user+0x21b/0x2f0 [ 167.522774] __x64_sys_symlink+0x82/0x110 [ 167.523506] do_syscall_64+0xbf/0x420 [ 167.524256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.524786] RIP: 0033:0x7fc645608427 [ 167.525134] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.526586] RSP: 002b:00007fff7c97e708 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 167.527165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc645608427 [ 167.527759] RDX: 00007fff7c97e7e3 RSI: 00007fc645663022 RDI: 00007fff7c97e7d0 [ 167.528303] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff7c97e5a0 [ 167.528889] R10: 00007fff7c97e457 R11: 0000000000000202 R12: 0000000000000001 [ 167.529479] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff7c97e7d0 [ 167.532022] [ 167.532211] irq event stamp: 303 [ 167.532513] hardirqs last enabled at (303): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 167.533291] hardirqs last disabled at (302): [] _raw_spin_lock_irqsave+0x53/0x60 [ 167.534086] softirqs last enabled at (298): [] kernel_fpu_end+0x59/0x70 [ 167.534821] softirqs last disabled at (296): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 167.535625] ---[ end trace 0000000000000000 ]--- 06:16:24 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) 06:16:24 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_POLL_REMOVE={0x7, 0x7, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:24 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:32 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) 06:16:32 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) 06:16:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:32 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:32 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2e8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x872d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004800) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x34}}, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40004000) 06:16:32 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) r2 = semget(0x0, 0x2, 0x108) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x5, 0xba90, 0xba, 0x5, 0xcdf]) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:32 executing program 4: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0x2, 0x9d34, 0x1, 'queue0\x00', 0x10001}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netstat\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x80000000, 0xfffffffd, 0x0, 'queue1\x00', 0x101}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000200)=""/188) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)=0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000340)={0x0, 0x3, 0x0, {0x3, 0x10001}, 0x1bddbe10, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0xc5, 0xd0}, {0x1, 0x6}, 0x4, 0xc, 0x8}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000440)) inotify_rm_watch(r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x4000) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000680)={0x12, 0xf0, &(0x7f0000000580)="dba0d244deb848b106590db6cd7382df7529e40485f11b4248d619506bf9258adf369926eac6a32384eb2961ae4afd0ab44228b7975f7de9f740558cdda28c42bb99aa09f9b424999527623751ee979ad0309977d57796d3eed3a30d66d7c01e7e43e99f3d97a01a9835d09e69965f57d1f3f8152d48bbc617cec3a5666c9cf0940378bd381ab85c74deecba84bf1762728b3c6bfb42c2eb35b4ee6108101f20a4239e7d8fb477bbc710c611c914ef5fbbda3f0258bee27e7400984397cf992cd888ca5a6f7734183ae5233308d8de47c04aa8b6ef0968efd0105ac615e88b80e4914d83cc424d6e4bd5d68a0a7fdee3"}) 06:16:32 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='clear_refs\x00') ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:32 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) 06:16:32 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x22, @time={0x1000, 0x7fff}, 0x4b, {0x1, 0x5}, 0x1f, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000600)={{0x1f, 0xae}, 0x0, 0x6, 0x1, {0x6, 0xf8}, 0x40, 0xffffffc4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000680)={0x0, 0x2, 0xffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) 06:16:32 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={0x4, 0x100070, 0x100000}, 0x20) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000100)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) 06:16:32 executing program 6: r0 = semget(0x0, 0x0, 0x746) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000000)=""/232) r1 = semget(0x0, 0x2, 0x0) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000100)=0x7ff) semget(0x0, 0x2, 0x108) syz_open_dev$evdev(&(0x7f0000000180), 0xc293, 0x400) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000015c0)='devices.deny\x00', 0x2, 0x0) 06:16:32 executing program 1: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/188) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x10001, 0x2, 0x3, 0x3f, 0x6b8a, 0xffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/107) syz_open_dev$evdev(&(0x7f00000007c0), 0xffffffff, 0xe0000) 06:16:32 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x9, 0x2040, 0x6, 0x6, 0x101, 0xb7, 0x3, 0x63af31a3}, &(0x7f0000000040)={0x3, 0xc89d, 0x1, 0xd0d, 0x4, 0x5, 0xa7, 0x1}, &(0x7f0000000080)={0x7, 0x896, 0x8, 0x80000000, 0x8, 0x1, 0x7fffffff, 0x9}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/100, 0x64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0xff, 0x0, 0x4, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8000, 0x7, 0x5}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000300)=0xfffffffb, 0x4) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000340)) clock_gettime(0x2, &(0x7f0000000380)) pselect6(0x40, &(0x7f00000003c0)={0xbee2, 0x2, 0x4, 0xff, 0x8ec, 0x22, 0x0, 0x1}, &(0x7f0000000400)={0x573, 0x1, 0x7, 0x7fffffff, 0x1e8, 0xceac, 0x80, 0x800}, &(0x7f0000000440)={0xfffffffffffffffd, 0xffffffff, 0xbf, 0x3, 0x181e7620, 0x7fffffff, 0x9, 0xfffffffffffffffd}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x410000) write$sndseq(r0, &(0x7f0000000580)=[{0x0, 0x3, 0x0, 0x9d, @time={0x2, 0xff}, {0x5, 0x6}, {0x7f, 0x75}, @addr={0x7f, 0x9}}], 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/vlan/config\x00') getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0xe0, &(0x7f00000006c0)=0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x5, 0x0, @fd_index=0x9, 0x9, &(0x7f00000007c0)=[{&(0x7f0000000700)="6e36ad23f81a3c129ba720b5502c190af0086c8ea30bb4f448be86b7a37678b033b3647fc3ef5047fff3476e24403e97e99200d075574c906c0d205ea0bb60d9adfc3b3efb820d9b383ba40cc80083d4953926aa425a50021cef8e3424a05805cad3fd6a4f74f42a489fecf9640b8570829003b843b8404e8131325ff185671da248403ed6c72423a5f53da6e6810a393318447f37480ec24cbd34a727a0db0c36a8548d5e27dea3ea1fe1", 0xab}], 0x1, 0x1b, 0x1, {0x2}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000880)=0x1, 0x4) r2 = fork() sched_rr_get_interval(r2, &(0x7f00000008c0)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) 06:16:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x3, 0x1f}, 'port0\x00', 0x40, 0x1, 0x8001, 0x6, 0x8, 0x1f, 0xffffa6de, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0xfd, 0x20}, 'port0\x00', 0x36da978285cb57ca, 0x81001, 0x8, 0x5, 0x2, 0x7, 0x68e, 0x0, 0x6, 0x9b}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000180)={0xffff, 0x2, 0xef5}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000240)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000002c0)={{0x4}, 'port0\x00', 0x3a, 0x10829, 0x4fd7ebd2, 0x14b, 0x7fff, 0xf1, 0xf4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000003c0)={{0x0, 0x20}, 'port1\x00', 0x12, 0x80002, 0x8, 0x7, 0x40000000, 0x3, 0xecf, 0x0, 0x2, 0xb0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000480)={0x0, 0x40, 0x7f, 0x2, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000540)={0x6c5e961, 0x1000, 0x0, 'queue1\x00', 0x20}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000007c0), 0x121c00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000800)={0x6e8, 0x2, {0x1, 0x0, 0xe8d, 0x1, 0x404}}) VM DIAGNOSIS: 06:16:24 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d280 RCX=ffffffff8169dc2a RDX=ffff88800f8a5280 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88800f64f6e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a51 R13=ffff88806cf3d288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8169dc06 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbb740bf8c0 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555575930708 CR3=000000000e731000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000004f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016a8046 R10=000000000000004f R11=6572617764726148 R12=000000000000004f R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555575930400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc645688544 CR3=000000001cef4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000