Warning: Permanently added '[localhost]:10240' (ECDSA) to the list of known hosts. 2026/01/17 21:32:05 fuzzer started 2026/01/17 21:32:05 dialing manager at localhost:42157 syzkaller login: [ 51.875648] cgroup: Unknown subsys name 'net' [ 51.944583] cgroup: Unknown subsys name 'cpuset' [ 51.966955] cgroup: Unknown subsys name 'rlimit' 2026/01/17 21:32:17 syscalls: 208 2026/01/17 21:32:17 code coverage: enabled 2026/01/17 21:32:17 comparison tracing: enabled 2026/01/17 21:32:17 extra coverage: enabled 2026/01/17 21:32:17 setuid sandbox: enabled 2026/01/17 21:32:17 namespace sandbox: enabled 2026/01/17 21:32:17 Android sandbox: enabled 2026/01/17 21:32:17 fault injection: enabled 2026/01/17 21:32:17 leak checking: enabled 2026/01/17 21:32:17 net packet injection: enabled 2026/01/17 21:32:17 net device setup: enabled 2026/01/17 21:32:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 21:32:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 21:32:17 USB emulation: enabled 2026/01/17 21:32:17 hci packet injection: enabled 2026/01/17 21:32:17 wifi device emulation: enabled 2026/01/17 21:32:17 802.15.4 emulation: enabled 2026/01/17 21:32:17 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 21:32:18 starting 8 fuzzer processes 21:32:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000004c0)) keyctl$instantiate(0xc, r4, 0x0, 0x0, r4) 21:32:18 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) r4 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x16, &(0x7f0000000880)={@initdev, @dev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001480)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9d0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4b1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x6, 0xff, 0x10001}, {0xfff, 0x9, 0xff, 0x6}, {0xfffe, 0x8, 0x80, 0x7}, {0x80, 0x2, 0x1, 0x2}, {0x0, 0x7f, 0x6}, {0xface, 0x1, 0x1, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x20040085}, 0x4000010) 21:32:18 executing program 2: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)='($$U\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='($$U\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_usb_connect$cdc_ncm(0x4, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0xa7, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "35dd9d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa00, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x81, 0x1b, 0x8, 0x3, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x2c, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1b, 0x9, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x3a, 0xfe}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x350, 0x3, 0x9, 0xa2, 0x8}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x1, [@generic={0x9d, 0x10, 0xa, "3c67e87a4fedc223fcb9600998b76bd4a2afeee8d72b2aaa21bfb0a0b97032badddccf6819e7f7441091561db6c79fed2eaec37ec26769f9ed085012e7a77a4687124328cbbc63495d2ba04ef338a7d1d18c1ad4c04daaa8717542104665709ee0199a8193e7abdbf42b3cf1d7baf070ef476cc064b0f3d3c38fdf9af75f4072a9ab1e077c8bde2e0d7c76d841687d2569ba7146482040f234e5"}]}, 0x3, [{0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "df505bf235a4251fa7c5c80380d45ce3ef89e1d2e910b1f6bf661af691cf3c6a0835b9d1bba33d40746bdbe2e7eafba62aefae292812321f73e2c2840c870d3ab062fa4b15369e49522606be42cc1b76c0dfae82166e2dd7c1329d303a6243932b73f78806f6a5b42393252eac8a814f0b92222dd4dab4d6eabf16dc362e8cc0d08cec5025c2b8fb1a735d8b9d655e8f5e6ceda5a59555f0725ac7782013085fde5f97a07fd2c3d43da99005497e87539e96debc88ec3d53e197407528f101f7c97b53a9430678a62fda239bf6498379f5cc4f771eb48446823ca04e9adf001d9792eb"}}, {0x38, &(0x7f0000000400)=@string={0x38, 0x3, "1087d27b23dc5c7407fd129aeeea7e20491394cacb23624154de9a9ccc7751a9f69c0f62561cadede45fcbf3473782ba8373ee7cd3f5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}]}) keyctl$revoke(0x3, r0) modify_ldt$read(0x0, &(0x7f00000004c0)=""/216, 0xd8) keyctl$get_keyring_id(0x0, r0, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000005c0)={0x7, 0x0, 'client1\x00', 0xffffffff80000002, "2507f77e98c32d90", "3e071227037ffb3456ddc6dfe4f4425326f34c680b0ff62766c157b33c2df7c4", 0x1, 0x1ff}) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)='syz') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000780)={0x1ff, 0x1, 0x0, 'queue1\x00', 0x9}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x202480, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfffffffffffffffc, 0x6, 0x8, 0xfffffffffffffffc, 0x28], 0x4, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) keyctl$revoke(0x3, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000a00)={0x1, 0x101, 0x1, 'queue0\x00', 0xfff}) r3 = accept4$inet(r2, &(0x7f0000000ac0)={0x2, 0x0, @broadcast}, &(0x7f0000000b00)=0x10, 0x800) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x8f, 0x4e21, 0x2, 0x0, 0xa0, 0x10, 0x0, 0x0, 0xee01}, {0x8, 0x7, 0x9, 0xfff, 0x6, 0x6, 0x100000000, 0x7}, {0x81, 0x6, 0x7, 0x400}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3503, 0x3, 0x1, 0xc1, 0x9, 0x3, 0x3}}, 0xe8) 21:32:18 executing program 3: socketpair(0x26, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socketpair(0x9, 0x1, 0xfa1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x0, 0x4, "041f64b448ea598c876b619ad7f333469420b319a5e12d0644c0afbd812049b9a6a190063b455e3979190cac21cb1833a2f825637ae1de99f4f5282d65c9c08bd1f46cae2b573321421a"}, 0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'hsr0\x00', 0x2}, 0x18) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@loopback, @initdev, @private}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, 0x8, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001004) r5 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0x66, {0x2, 0x4e20, @loopback}, 'rose0\x00'}) prctl$PR_SVE_GET_VL(0x33, 0x989a) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x104, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x7ff, 0x4e23, 0x0, 0x2, 0x20, 0x30, 0x1d, 0x0, r6}, {0x2, 0x345, 0x2, 0x401, 0x3, 0xa1, 0x3, 0x935}, {0x6, 0x9, 0x100000000, 0x100000000000000}, 0x751, 0x6e6bb5, 0x0, 0x1, 0x1}, 0x80}, [@extra_flags={0x8, 0x18, 0x5}, @replay_thresh={0x8, 0xb, 0x3}, @replay_thresh={0x8, 0xb, 0xfffffffb}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008815) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008894}, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x4}, 0x68) r7 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000900)={0x61, 0x7d, 0x2, {{0x0, 0x47, 0x7f, 0x6, {0x20}, 0x4040000, 0x10001, 0x80, 0x0, 0x1, '!', 0x7, '\\-^$!](', 0x5, 'hsr0\x00', 0x7, 'TPROXY\x00'}, 0x5, '\xaa\xaa\xaa\xaa\xaa', r7}}, 0x61) 21:32:18 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x3ff, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000780)='ip6_vti0\x00', 0x5, 0xfffffffffffffff8, 0xc97b}) [ 63.533072] audit: type=1400 audit(1768685538.963:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:32:18 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x95, 0x75, 0x1, {0x8a, "54e0e0759c5d8738fa19004f1860025be135ccc616f0c46dc368fced9e2d18e9847fafbf2046eb50b2f4abd7f0c49b52cf62f1df9117423e68e7f98b943c44c6539863c446918f68a3d09c9a0e821883e567c4019c24e0a301abc3cb14b65c87352ff89f332231e0128fc53ca54296649ab0fb0833016f11b0410c68348052fd752ba30baf154ecb49b5"}}, 0x95) r0 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0x800, 0x8, {0x40, 0x1, 0x6}, 0x0, 0xffffff80, 0xffff, 0x4, 0x0, '', 0x9, '%\\]+$!+!+', 0x8, '(#,*}}(,', 0x2, ':#'}, 0x0, '', r0, 0xee01, 0xee00}}, 0x5b) r1 = getuid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0xe0, 0x2, 0x20, 0x80, 0x33, 0x0, r4}, {0xfffffffffffffffa, 0x2, 0x8, 0x7, 0x3, 0x2, 0x10001, 0x80000000}, {0x8, 0x2, 0xfffffffffffffff9, 0x1}, 0x80000000, 0x0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0xe1, 0x7, 0x1}}, 0xe8) r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000012c0)) write$nbd(r2, &(0x7f0000001300)={0x67446698, 0x0, 0x4, 0x3, 0x4, "8d5c9e70aaf00e4d6123a3fdad317980d75e2b845222a51037f3861bec5ab761b06cf9a8736f45d8bbb3be382850316349eebad132228a073f387b011ba49332fa5bea79b8cefd9c"}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000001380)={0x2e, 0x30, 0xffff7422, 0x1b, 0x1, 0x0, 0x2, 0xb0}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000013c0)={0x32, 0x1b, 0xa, 0x2, 0x9, 0x9, 0x2, 0xde, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001440)={0x19, 0x4, 0x2, 0x18, 0x5, 0x7fffffff, 0x3, 0x2d}) write$P9_RSTATu(r7, &(0x7f0000001480)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x6, 0x800000, {0x2, 0x2, 0x7}, 0x20200000, 0x1f, 0xff, 0xe2, 0x8, '(#,*}}(,', 0x4, '-/{}'}, 0x2, '#*', r4, 0x0, r1}}, 0x56) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000001500)) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001540), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x5fe8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @remote, 0x2, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff, 0xffffffff, 0x10, 0xd, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x169, 0x20, 0x4, 0x2, 0x3, 0x2, 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x5, 0x16, 0xc, 0x7, 0x1, 0x10001, 0x1, 0x57, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001a00)={@local, @multicast2}, &(0x7f0000001a40)=0xc) 21:32:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() r11 = syz_open_dev$vcsn(&(0x7f0000000480), 0xff, 0x8100) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r11, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:32:19 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000700)={{0x1f, 0x1}, 'port0\x00', 0x2, 0x20008, 0xff, 0x77, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0xec}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000007c0)={{0x5, 0x3}, 'port0\x00', 0x0, 0x101000, 0x7ff, 0x1000, 0x55, 0x6, 0x1582, 0x0, 0x7, 0xc1}) [ 64.715885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.718011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.719822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.721093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.723094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.725251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.731614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.732803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.738772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.743519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.839394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.842489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.851489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.862053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.878476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.901032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.903327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.905208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.909588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.911305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.007853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.009881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.010981] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.012800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.013847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.015769] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.018938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.020562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.022509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.024319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.070670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.073450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.075926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.079811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.084145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.085499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.089181] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.098901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.117593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.246038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.806818] Bluetooth: hci0: command tx timeout [ 66.807396] Bluetooth: hci1: command tx timeout [ 66.933827] Bluetooth: hci3: command tx timeout [ 66.997798] Bluetooth: hci2: command tx timeout [ 67.061495] Bluetooth: hci6: command tx timeout [ 67.126452] Bluetooth: hci7: command tx timeout [ 67.189991] Bluetooth: hci4: command tx timeout [ 67.381437] Bluetooth: hci5: command tx timeout [ 68.854377] Bluetooth: hci1: command tx timeout [ 68.854871] Bluetooth: hci0: command tx timeout [ 68.981490] Bluetooth: hci3: command tx timeout [ 69.045442] Bluetooth: hci2: command tx timeout [ 69.110376] Bluetooth: hci6: command tx timeout [ 69.173669] Bluetooth: hci7: command tx timeout [ 69.237429] Bluetooth: hci4: command tx timeout [ 69.429399] Bluetooth: hci5: command tx timeout [ 70.901608] Bluetooth: hci0: command tx timeout [ 70.902045] Bluetooth: hci1: command tx timeout [ 71.029570] Bluetooth: hci3: command tx timeout [ 71.094057] Bluetooth: hci2: command tx timeout [ 71.157495] Bluetooth: hci6: command tx timeout [ 71.222418] Bluetooth: hci7: command tx timeout [ 71.286409] Bluetooth: hci4: command tx timeout [ 71.477388] Bluetooth: hci5: command tx timeout [ 72.949463] Bluetooth: hci1: command tx timeout [ 72.949915] Bluetooth: hci0: command tx timeout [ 73.077503] Bluetooth: hci3: command tx timeout [ 73.142368] Bluetooth: hci2: command tx timeout [ 73.206449] Bluetooth: hci6: command tx timeout [ 73.269921] Bluetooth: hci7: command tx timeout [ 73.333565] Bluetooth: hci4: command tx timeout [ 73.525833] Bluetooth: hci5: command tx timeout [ 97.223808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.224505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.446382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.446964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.770688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.771324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.898611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.899249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.826658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.827281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.930410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.931038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.966301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.967190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.061475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.062086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.170474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.171104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.206663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.207265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.276729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.277366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.364497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.365108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.458164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.460028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.484525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.485117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.748729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.749442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.794999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.795651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:33:07 executing program 3: socketpair(0x26, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socketpair(0x9, 0x1, 0xfa1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x0, 0x4, "041f64b448ea598c876b619ad7f333469420b319a5e12d0644c0afbd812049b9a6a190063b455e3979190cac21cb1833a2f825637ae1de99f4f5282d65c9c08bd1f46cae2b573321421a"}, 0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'hsr0\x00', 0x2}, 0x18) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@loopback, @initdev, @private}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, 0x8, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001004) r5 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0x66, {0x2, 0x4e20, @loopback}, 'rose0\x00'}) prctl$PR_SVE_GET_VL(0x33, 0x989a) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x104, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x7ff, 0x4e23, 0x0, 0x2, 0x20, 0x30, 0x1d, 0x0, r6}, {0x2, 0x345, 0x2, 0x401, 0x3, 0xa1, 0x3, 0x935}, {0x6, 0x9, 0x100000000, 0x100000000000000}, 0x751, 0x6e6bb5, 0x0, 0x1, 0x1}, 0x80}, [@extra_flags={0x8, 0x18, 0x5}, @replay_thresh={0x8, 0xb, 0x3}, @replay_thresh={0x8, 0xb, 0xfffffffb}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008815) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008894}, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x4}, 0x68) r7 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000900)={0x61, 0x7d, 0x2, {{0x0, 0x47, 0x7f, 0x6, {0x20}, 0x4040000, 0x10001, 0x80, 0x0, 0x1, '!', 0x7, '\\-^$!](', 0x5, 'hsr0\x00', 0x7, 'TPROXY\x00'}, 0x5, '\xaa\xaa\xaa\xaa\xaa', r7}}, 0x61) 21:33:07 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) r4 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x16, &(0x7f0000000880)={@initdev, @dev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001480)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9d0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4b1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x6, 0xff, 0x10001}, {0xfff, 0x9, 0xff, 0x6}, {0xfffe, 0x8, 0x80, 0x7}, {0x80, 0x2, 0x1, 0x2}, {0x0, 0x7f, 0x6}, {0xface, 0x1, 0x1, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x20040085}, 0x4000010) 21:33:07 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000700)={{0x1f, 0x1}, 'port0\x00', 0x2, 0x20008, 0xff, 0x77, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0xec}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000007c0)={{0x5, 0x3}, 'port0\x00', 0x0, 0x101000, 0x7ff, 0x1000, 0x55, 0x6, 0x1582, 0x0, 0x7, 0xc1}) 21:33:07 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x3ff, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000780)='ip6_vti0\x00', 0x5, 0xfffffffffffffff8, 0xc97b}) 21:33:07 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() r11 = syz_open_dev$vcsn(&(0x7f0000000480), 0xff, 0x8100) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r11, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:33:07 executing program 2: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)='($$U\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='($$U\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_usb_connect$cdc_ncm(0x4, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0xa7, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "35dd9d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa00, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x81, 0x1b, 0x8, 0x3, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x2c, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1b, 0x9, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x3a, 0xfe}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x350, 0x3, 0x9, 0xa2, 0x8}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x1, [@generic={0x9d, 0x10, 0xa, "3c67e87a4fedc223fcb9600998b76bd4a2afeee8d72b2aaa21bfb0a0b97032badddccf6819e7f7441091561db6c79fed2eaec37ec26769f9ed085012e7a77a4687124328cbbc63495d2ba04ef338a7d1d18c1ad4c04daaa8717542104665709ee0199a8193e7abdbf42b3cf1d7baf070ef476cc064b0f3d3c38fdf9af75f4072a9ab1e077c8bde2e0d7c76d841687d2569ba7146482040f234e5"}]}, 0x3, [{0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "df505bf235a4251fa7c5c80380d45ce3ef89e1d2e910b1f6bf661af691cf3c6a0835b9d1bba33d40746bdbe2e7eafba62aefae292812321f73e2c2840c870d3ab062fa4b15369e49522606be42cc1b76c0dfae82166e2dd7c1329d303a6243932b73f78806f6a5b42393252eac8a814f0b92222dd4dab4d6eabf16dc362e8cc0d08cec5025c2b8fb1a735d8b9d655e8f5e6ceda5a59555f0725ac7782013085fde5f97a07fd2c3d43da99005497e87539e96debc88ec3d53e197407528f101f7c97b53a9430678a62fda239bf6498379f5cc4f771eb48446823ca04e9adf001d9792eb"}}, {0x38, &(0x7f0000000400)=@string={0x38, 0x3, "1087d27b23dc5c7407fd129aeeea7e20491394cacb23624154de9a9ccc7751a9f69c0f62561cadede45fcbf3473782ba8373ee7cd3f5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}]}) keyctl$revoke(0x3, r0) modify_ldt$read(0x0, &(0x7f00000004c0)=""/216, 0xd8) keyctl$get_keyring_id(0x0, r0, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000005c0)={0x7, 0x0, 'client1\x00', 0xffffffff80000002, "2507f77e98c32d90", "3e071227037ffb3456ddc6dfe4f4425326f34c680b0ff62766c157b33c2df7c4", 0x1, 0x1ff}) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)='syz') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000780)={0x1ff, 0x1, 0x0, 'queue1\x00', 0x9}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x202480, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfffffffffffffffc, 0x6, 0x8, 0xfffffffffffffffc, 0x28], 0x4, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) keyctl$revoke(0x3, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000a00)={0x1, 0x101, 0x1, 'queue0\x00', 0xfff}) r3 = accept4$inet(r2, &(0x7f0000000ac0)={0x2, 0x0, @broadcast}, &(0x7f0000000b00)=0x10, 0x800) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x8f, 0x4e21, 0x2, 0x0, 0xa0, 0x10, 0x0, 0x0, 0xee01}, {0x8, 0x7, 0x9, 0xfff, 0x6, 0x6, 0x100000000, 0x7}, {0x81, 0x6, 0x7, 0x400}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3503, 0x3, 0x1, 0xc1, 0x9, 0x3, 0x3}}, 0xe8) 21:33:07 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x95, 0x75, 0x1, {0x8a, "54e0e0759c5d8738fa19004f1860025be135ccc616f0c46dc368fced9e2d18e9847fafbf2046eb50b2f4abd7f0c49b52cf62f1df9117423e68e7f98b943c44c6539863c446918f68a3d09c9a0e821883e567c4019c24e0a301abc3cb14b65c87352ff89f332231e0128fc53ca54296649ab0fb0833016f11b0410c68348052fd752ba30baf154ecb49b5"}}, 0x95) r0 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0x800, 0x8, {0x40, 0x1, 0x6}, 0x0, 0xffffff80, 0xffff, 0x4, 0x0, '', 0x9, '%\\]+$!+!+', 0x8, '(#,*}}(,', 0x2, ':#'}, 0x0, '', r0, 0xee01, 0xee00}}, 0x5b) r1 = getuid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0xe0, 0x2, 0x20, 0x80, 0x33, 0x0, r4}, {0xfffffffffffffffa, 0x2, 0x8, 0x7, 0x3, 0x2, 0x10001, 0x80000000}, {0x8, 0x2, 0xfffffffffffffff9, 0x1}, 0x80000000, 0x0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0xe1, 0x7, 0x1}}, 0xe8) r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000012c0)) write$nbd(r2, &(0x7f0000001300)={0x67446698, 0x0, 0x4, 0x3, 0x4, "8d5c9e70aaf00e4d6123a3fdad317980d75e2b845222a51037f3861bec5ab761b06cf9a8736f45d8bbb3be382850316349eebad132228a073f387b011ba49332fa5bea79b8cefd9c"}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000001380)={0x2e, 0x30, 0xffff7422, 0x1b, 0x1, 0x0, 0x2, 0xb0}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000013c0)={0x32, 0x1b, 0xa, 0x2, 0x9, 0x9, 0x2, 0xde, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001440)={0x19, 0x4, 0x2, 0x18, 0x5, 0x7fffffff, 0x3, 0x2d}) write$P9_RSTATu(r7, &(0x7f0000001480)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x6, 0x800000, {0x2, 0x2, 0x7}, 0x20200000, 0x1f, 0xff, 0xe2, 0x8, '(#,*}}(,', 0x4, '-/{}'}, 0x2, '#*', r4, 0x0, r1}}, 0x56) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000001500)) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001540), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x5fe8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @remote, 0x2, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff, 0xffffffff, 0x10, 0xd, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x169, 0x20, 0x4, 0x2, 0x3, 0x2, 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x5, 0x16, 0xc, 0x7, 0x1, 0x10001, 0x1, 0x57, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001a00)={@local, @multicast2}, &(0x7f0000001a40)=0xc) 21:33:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000004c0)) keyctl$instantiate(0xc, r4, 0x0, 0x0, r4) 21:33:07 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000700)={{0x1f, 0x1}, 'port0\x00', 0x2, 0x20008, 0xff, 0x77, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0xec}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000007c0)={{0x5, 0x3}, 'port0\x00', 0x0, 0x101000, 0x7ff, 0x1000, 0x55, 0x6, 0x1582, 0x0, 0x7, 0xc1}) 21:33:07 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) r4 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x16, &(0x7f0000000880)={@initdev, @dev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001480)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9d0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4b1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x6, 0xff, 0x10001}, {0xfff, 0x9, 0xff, 0x6}, {0xfffe, 0x8, 0x80, 0x7}, {0x80, 0x2, 0x1, 0x2}, {0x0, 0x7f, 0x6}, {0xface, 0x1, 0x1, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x20040085}, 0x4000010) 21:33:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000004c0)) keyctl$instantiate(0xc, r4, 0x0, 0x0, r4) 21:33:07 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x3ff, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000780)='ip6_vti0\x00', 0x5, 0xfffffffffffffff8, 0xc97b}) 21:33:07 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) r4 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast, 0x0}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x16, &(0x7f0000000880)={@initdev, @dev, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001480)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000000a40)={0x9d0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4b1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x6, 0xff, 0x10001}, {0xfff, 0x9, 0xff, 0x6}, {0xfffe, 0x8, 0x80, 0x7}, {0x80, 0x2, 0x1, 0x2}, {0x0, 0x7f, 0x6}, {0xface, 0x1, 0x1, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x20040085}, 0x4000010) 21:33:07 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000004c0)) keyctl$instantiate(0xc, r4, 0x0, 0x0, r4) 21:33:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000700)={{0x1f, 0x1}, 'port0\x00', 0x2, 0x20008, 0xff, 0x77, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0xec}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000007c0)={{0x5, 0x3}, 'port0\x00', 0x0, 0x101000, 0x7ff, 0x1000, 0x55, 0x6, 0x1582, 0x0, 0x7, 0xc1}) 21:33:16 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x95, 0x75, 0x1, {0x8a, "54e0e0759c5d8738fa19004f1860025be135ccc616f0c46dc368fced9e2d18e9847fafbf2046eb50b2f4abd7f0c49b52cf62f1df9117423e68e7f98b943c44c6539863c446918f68a3d09c9a0e821883e567c4019c24e0a301abc3cb14b65c87352ff89f332231e0128fc53ca54296649ab0fb0833016f11b0410c68348052fd752ba30baf154ecb49b5"}}, 0x95) r0 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0x800, 0x8, {0x40, 0x1, 0x6}, 0x0, 0xffffff80, 0xffff, 0x4, 0x0, '', 0x9, '%\\]+$!+!+', 0x8, '(#,*}}(,', 0x2, ':#'}, 0x0, '', r0, 0xee01, 0xee00}}, 0x5b) r1 = getuid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0xe0, 0x2, 0x20, 0x80, 0x33, 0x0, r4}, {0xfffffffffffffffa, 0x2, 0x8, 0x7, 0x3, 0x2, 0x10001, 0x80000000}, {0x8, 0x2, 0xfffffffffffffff9, 0x1}, 0x80000000, 0x0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0xe1, 0x7, 0x1}}, 0xe8) r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000012c0)) write$nbd(r2, &(0x7f0000001300)={0x67446698, 0x0, 0x4, 0x3, 0x4, "8d5c9e70aaf00e4d6123a3fdad317980d75e2b845222a51037f3861bec5ab761b06cf9a8736f45d8bbb3be382850316349eebad132228a073f387b011ba49332fa5bea79b8cefd9c"}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000001380)={0x2e, 0x30, 0xffff7422, 0x1b, 0x1, 0x0, 0x2, 0xb0}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000013c0)={0x32, 0x1b, 0xa, 0x2, 0x9, 0x9, 0x2, 0xde, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001440)={0x19, 0x4, 0x2, 0x18, 0x5, 0x7fffffff, 0x3, 0x2d}) write$P9_RSTATu(r7, &(0x7f0000001480)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x6, 0x800000, {0x2, 0x2, 0x7}, 0x20200000, 0x1f, 0xff, 0xe2, 0x8, '(#,*}}(,', 0x4, '-/{}'}, 0x2, '#*', r4, 0x0, r1}}, 0x56) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000001500)) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001540), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x5fe8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @remote, 0x2, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff, 0xffffffff, 0x10, 0xd, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x169, 0x20, 0x4, 0x2, 0x3, 0x2, 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x5, 0x16, 0xc, 0x7, 0x1, 0x10001, 0x1, 0x57, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001a00)={@local, @multicast2}, &(0x7f0000001a40)=0xc) 21:33:16 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x3ff, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000780)='ip6_vti0\x00', 0x5, 0xfffffffffffffff8, 0xc97b}) 21:33:16 executing program 2: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)='($$U\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='($$U\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_usb_connect$cdc_ncm(0x4, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0xa7, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "35dd9d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa00, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x81, 0x1b, 0x8, 0x3, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x2c, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1b, 0x9, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x3a, 0xfe}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x350, 0x3, 0x9, 0xa2, 0x8}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x1, [@generic={0x9d, 0x10, 0xa, "3c67e87a4fedc223fcb9600998b76bd4a2afeee8d72b2aaa21bfb0a0b97032badddccf6819e7f7441091561db6c79fed2eaec37ec26769f9ed085012e7a77a4687124328cbbc63495d2ba04ef338a7d1d18c1ad4c04daaa8717542104665709ee0199a8193e7abdbf42b3cf1d7baf070ef476cc064b0f3d3c38fdf9af75f4072a9ab1e077c8bde2e0d7c76d841687d2569ba7146482040f234e5"}]}, 0x3, [{0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "df505bf235a4251fa7c5c80380d45ce3ef89e1d2e910b1f6bf661af691cf3c6a0835b9d1bba33d40746bdbe2e7eafba62aefae292812321f73e2c2840c870d3ab062fa4b15369e49522606be42cc1b76c0dfae82166e2dd7c1329d303a6243932b73f78806f6a5b42393252eac8a814f0b92222dd4dab4d6eabf16dc362e8cc0d08cec5025c2b8fb1a735d8b9d655e8f5e6ceda5a59555f0725ac7782013085fde5f97a07fd2c3d43da99005497e87539e96debc88ec3d53e197407528f101f7c97b53a9430678a62fda239bf6498379f5cc4f771eb48446823ca04e9adf001d9792eb"}}, {0x38, &(0x7f0000000400)=@string={0x38, 0x3, "1087d27b23dc5c7407fd129aeeea7e20491394cacb23624154de9a9ccc7751a9f69c0f62561cadede45fcbf3473782ba8373ee7cd3f5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}]}) keyctl$revoke(0x3, r0) modify_ldt$read(0x0, &(0x7f00000004c0)=""/216, 0xd8) keyctl$get_keyring_id(0x0, r0, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000005c0)={0x7, 0x0, 'client1\x00', 0xffffffff80000002, "2507f77e98c32d90", "3e071227037ffb3456ddc6dfe4f4425326f34c680b0ff62766c157b33c2df7c4", 0x1, 0x1ff}) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)='syz') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000780)={0x1ff, 0x1, 0x0, 'queue1\x00', 0x9}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x202480, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfffffffffffffffc, 0x6, 0x8, 0xfffffffffffffffc, 0x28], 0x4, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) keyctl$revoke(0x3, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000a00)={0x1, 0x101, 0x1, 'queue0\x00', 0xfff}) r3 = accept4$inet(r2, &(0x7f0000000ac0)={0x2, 0x0, @broadcast}, &(0x7f0000000b00)=0x10, 0x800) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x8f, 0x4e21, 0x2, 0x0, 0xa0, 0x10, 0x0, 0x0, 0xee01}, {0x8, 0x7, 0x9, 0xfff, 0x6, 0x6, 0x100000000, 0x7}, {0x81, 0x6, 0x7, 0x400}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3503, 0x3, 0x1, 0xc1, 0x9, 0x3, 0x3}}, 0xe8) 21:33:16 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)) getsockopt$inet_mreqn(r1, 0x0, 0x16, &(0x7f0000000880)={@initdev, @dev}, &(0x7f00000008c0)=0xc) 21:33:16 executing program 3: socketpair(0x26, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socketpair(0x9, 0x1, 0xfa1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x0, 0x4, "041f64b448ea598c876b619ad7f333469420b319a5e12d0644c0afbd812049b9a6a190063b455e3979190cac21cb1833a2f825637ae1de99f4f5282d65c9c08bd1f46cae2b573321421a"}, 0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'hsr0\x00', 0x2}, 0x18) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@loopback, @initdev, @private}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, 0x8, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001004) r5 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0x66, {0x2, 0x4e20, @loopback}, 'rose0\x00'}) prctl$PR_SVE_GET_VL(0x33, 0x989a) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x104, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x7ff, 0x4e23, 0x0, 0x2, 0x20, 0x30, 0x1d, 0x0, r6}, {0x2, 0x345, 0x2, 0x401, 0x3, 0xa1, 0x3, 0x935}, {0x6, 0x9, 0x100000000, 0x100000000000000}, 0x751, 0x6e6bb5, 0x0, 0x1, 0x1}, 0x80}, [@extra_flags={0x8, 0x18, 0x5}, @replay_thresh={0x8, 0xb, 0x3}, @replay_thresh={0x8, 0xb, 0xfffffffb}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008815) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008894}, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x4}, 0x68) r7 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000900)={0x61, 0x7d, 0x2, {{0x0, 0x47, 0x7f, 0x6, {0x20}, 0x4040000, 0x10001, 0x80, 0x0, 0x1, '!', 0x7, '\\-^$!](', 0x5, 'hsr0\x00', 0x7, 'TPROXY\x00'}, 0x5, '\xaa\xaa\xaa\xaa\xaa', r7}}, 0x61) 21:33:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000004c0)) 21:33:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() r11 = syz_open_dev$vcsn(&(0x7f0000000480), 0xff, 0x8100) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r11, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:33:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000700)={{0x1f, 0x1}, 'port0\x00', 0x2, 0x20008, 0xff, 0x77, 0xfffffffa, 0x0, 0x0, 0x0, 0x2, 0xec}) 21:33:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000480)={0x2b, 0x9, 0xf, 0x4, 0xb, 0x8, 0x2, 0x55, 0x1}) 21:33:16 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x0) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) 21:33:16 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)) [ 121.250862] [ 121.251215] ===================================== [ 121.251963] WARNING: bad unlock balance detected! [ 121.252682] 6.19.0-rc5-next-20260116 #1 Not tainted [ 121.253435] ------------------------------------- [ 121.254189] syz-executor.5/288 is trying to release lock (rcu_read_lock) at: [ 121.257674] [] __wait_on_freeing_inode+0x105/0x350 [ 121.261839] but there are no more locks to release! [ 121.262572] [ 121.262572] other info that might help us debug this: [ 121.263566] 4 locks held by syz-executor.5/288: [ 121.264304] #0: ffff88800f9943f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 121.265683] #1: ffff88801b562a00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 121.267246] #2: ffff88800f9a0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 121.268682] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 121.270136] [ 121.270136] stack backtrace: [ 121.270822] CPU: 0 UID: 0 PID: 288 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 121.270853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.270865] Call Trace: [ 121.270872] [ 121.270880] dump_stack_lvl+0xca/0x120 [ 121.270926] ? __wait_on_freeing_inode+0x105/0x350 [ 121.270953] print_unlock_imbalance_bug+0x118/0x130 [ 121.270979] ? __wait_on_freeing_inode+0x105/0x350 [ 121.271005] lock_release+0x1ee/0x270 [ 121.271032] __wait_on_freeing_inode+0x10a/0x350 [ 121.271058] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 121.271087] ? __pfx_var_wake_function+0x10/0x10 [ 121.271118] ? lock_is_held_type+0x9e/0x120 [ 121.271139] insert_inode_locked+0x25f/0x890 [ 121.271174] __ext4_new_inode+0x223d/0x4cd0 [ 121.271205] ? __pfx___ext4_new_inode+0x10/0x10 [ 121.271230] ? __pfx_avc_has_perm+0x10/0x10 [ 121.271255] ? __pfx___dquot_initialize+0x10/0x10 [ 121.271292] ext4_mkdir+0x331/0xb30 [ 121.271325] ? __pfx_ext4_mkdir+0x10/0x10 [ 121.271353] ? security_inode_permission+0x72/0xe0 [ 121.271377] vfs_mkdir+0x6d8/0xc00 [ 121.271407] filename_mkdirat+0x118/0x430 [ 121.271430] ? __pfx_filename_mkdirat+0x10/0x10 [ 121.271454] ? strncpy_from_user+0x21b/0x2f0 [ 121.271483] __x64_sys_mkdir+0x6e/0xd0 [ 121.271506] do_syscall_64+0xbf/0x420 [ 121.271529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.271551] RIP: 0033:0x7f3343b1cc27 [ 121.271568] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.271587] RSP: 002b:00007ffd6f99cea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 121.271607] RAX: ffffffffffffffda RBX: 00007ffd6f99cf30 RCX: 00007f3343b1cc27 [ 121.271621] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd6f99cf30 [ 121.271634] RBP: 00007ffd6f99cf0c R08: 0000000000000000 R09: 0000000000000003 [ 121.271647] R10: 00007ffd6f99cc47 R11: 0000000000000202 R12: 0000000000000032 [ 121.271659] R13: 000000000001d8e6 R14: 0000000000000013 R15: 00007ffd6f99cf70 [ 121.271679] [ 121.300629] ------------[ cut here ]------------ [ 121.301456] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.5/288 [ 121.303223] Modules linked in: [ 121.303856] CPU: 0 UID: 0 PID: 288 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 121.305510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 121.306888] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 121.307910] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 121.310816] RSP: 0018:ffff88801b16f9e0 EFLAGS: 00010286 [ 121.311762] RAX: 00000000ffffffff RBX: ffff888016040000 RCX: ffffffff815660f7 [ 121.312998] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880160403fc [ 121.314288] RBP: ffff888016040000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 121.315507] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016040000 [ 121.316713] R13: 0000000000000001 R14: ffffffff85c0ec80 R15: ffff888009648ca0 [ 121.317915] FS: 0000555563eff400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 121.319264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.320280] CR2: 00007ffdbea7bff8 CR3: 000000000bd8e000 CR4: 0000000000350ef0 [ 121.321495] Call Trace: [ 121.321977] [ 121.323294] __wait_on_freeing_inode+0x10f/0x350 [ 121.324784] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 121.326941] ? __pfx_var_wake_function+0x10/0x10 [ 121.329422] ? lock_is_held_type+0x9e/0x120 [ 121.331604] insert_inode_locked+0x25f/0x890 [ 121.334791] __ext4_new_inode+0x223d/0x4cd0 [ 121.339592] ? __pfx___ext4_new_inode+0x10/0x10 [ 121.341496] ? __pfx_avc_has_perm+0x10/0x10 [ 121.342736] ? __pfx___dquot_initialize+0x10/0x10 [ 121.350235] ext4_mkdir+0x331/0xb30 [ 121.354075] ? __pfx_ext4_mkdir+0x10/0x10 [ 121.355300] ? security_inode_permission+0x72/0xe0 [ 121.358562] vfs_mkdir+0x6d8/0xc00 [ 121.361207] filename_mkdirat+0x118/0x430 [ 121.363235] ? __pfx_filename_mkdirat+0x10/0x10 [ 121.364788] ? strncpy_from_user+0x21b/0x2f0 [ 121.368422] __x64_sys_mkdir+0x6e/0xd0 [ 121.369603] do_syscall_64+0xbf/0x420 [ 121.371110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.372133] RIP: 0033:0x7f3343b1cc27 [ 121.372887] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.375659] RSP: 002b:00007ffd6f99cea8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 121.376933] RAX: ffffffffffffffda RBX: 00007ffd6f99cf30 RCX: 00007f3343b1cc27 [ 121.378045] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffd6f99cf30 [ 121.379144] RBP: 00007ffd6f99cf0c R08: 0000000000000000 R09: 0000000000000003 [ 121.380253] R10: 00007ffd6f99cc47 R11: 0000000000000202 R12: 0000000000000032 [ 121.381421] R13: 000000000001d8e6 R14: 0000000000000013 R15: 00007ffd6f99cf70 [ 121.386427] [ 121.386784] irq event stamp: 176191 [ 121.387297] hardirqs last enabled at (176191): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 121.388955] hardirqs last disabled at (176190): [] _raw_spin_lock_irqsave+0x53/0x60 [ 121.390466] softirqs last enabled at (176186): [] kernel_fpu_end+0x59/0x70 [ 121.391882] softirqs last disabled at (176184): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 121.393476] ---[ end trace 0000000000000000 ]--- 21:33:16 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000400)={{0x2}, {0x4, 0x7f}, 0x1, 0x6, 0x6}) 21:33:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() r11 = syz_open_dev$vcsn(&(0x7f0000000480), 0xff, 0x8100) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r11, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:33:16 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)='dummy0\x00', 0x1, 0x6d340a3b, 0x5}) 21:33:25 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) r2 = syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r5 = getuid() write$P9_RSTATu(r4, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r5}}, 0x51) write$P9_RCREATE(r4, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000005c0)={{0x81}, {0x8, 0x81}, 0x101, 0x2, 0x20}) write$P9_RREAD(r3, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) 21:33:25 executing program 2: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)='($$U\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='($$U\x00', 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_usb_connect$cdc_ncm(0x4, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0xa7, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "35dd9d"}, {0x5, 0x24, 0x0, 0x3f}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xa00, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x81, 0x1b, 0x8, 0x3, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x2c, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1b, 0x9, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x3a, 0xfe}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x350, 0x3, 0x9, 0xa2, 0x8}, 0xa2, &(0x7f0000000240)={0x5, 0xf, 0xa2, 0x1, [@generic={0x9d, 0x10, 0xa, "3c67e87a4fedc223fcb9600998b76bd4a2afeee8d72b2aaa21bfb0a0b97032badddccf6819e7f7441091561db6c79fed2eaec37ec26769f9ed085012e7a77a4687124328cbbc63495d2ba04ef338a7d1d18c1ad4c04daaa8717542104665709ee0199a8193e7abdbf42b3cf1d7baf070ef476cc064b0f3d3c38fdf9af75f4072a9ab1e077c8bde2e0d7c76d841687d2569ba7146482040f234e5"}]}, 0x3, [{0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "df505bf235a4251fa7c5c80380d45ce3ef89e1d2e910b1f6bf661af691cf3c6a0835b9d1bba33d40746bdbe2e7eafba62aefae292812321f73e2c2840c870d3ab062fa4b15369e49522606be42cc1b76c0dfae82166e2dd7c1329d303a6243932b73f78806f6a5b42393252eac8a814f0b92222dd4dab4d6eabf16dc362e8cc0d08cec5025c2b8fb1a735d8b9d655e8f5e6ceda5a59555f0725ac7782013085fde5f97a07fd2c3d43da99005497e87539e96debc88ec3d53e197407528f101f7c97b53a9430678a62fda239bf6498379f5cc4f771eb48446823ca04e9adf001d9792eb"}}, {0x38, &(0x7f0000000400)=@string={0x38, 0x3, "1087d27b23dc5c7407fd129aeeea7e20491394cacb23624154de9a9ccc7751a9f69c0f62561cadede45fcbf3473782ba8373ee7cd3f5"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}]}) keyctl$revoke(0x3, r0) modify_ldt$read(0x0, &(0x7f00000004c0)=""/216, 0xd8) keyctl$get_keyring_id(0x0, r0, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000005c0)={0x7, 0x0, 'client1\x00', 0xffffffff80000002, "2507f77e98c32d90", "3e071227037ffb3456ddc6dfe4f4425326f34c680b0ff62766c157b33c2df7c4", 0x1, 0x1ff}) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$assume_authority(0x10, r1) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)='syz') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000780)={0x1ff, 0x1, 0x0, 'queue1\x00', 0x9}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x202480, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfffffffffffffffc, 0x6, 0x8, 0xfffffffffffffffc, 0x28], 0x4, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) keyctl$revoke(0x3, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000a00)={0x1, 0x101, 0x1, 'queue0\x00', 0xfff}) r3 = accept4$inet(r2, &(0x7f0000000ac0)={0x2, 0x0, @broadcast}, &(0x7f0000000b00)=0x10, 0x800) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x8f, 0x4e21, 0x2, 0x0, 0xa0, 0x10, 0x0, 0x0, 0xee01}, {0x8, 0x7, 0x9, 0xfff, 0x6, 0x6, 0x100000000, 0x7}, {0x81, 0x6, 0x7, 0x400}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3503, 0x3, 0x1, 0xc1, 0x9, 0x3, 0x3}}, 0xe8) 21:33:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:33:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLOCK(r5, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) 21:33:25 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000600)={0x160, @tick, 0x5d, {0x7f, 0xb5}, 0x0, 0x0, 0xfe}) 21:33:25 executing program 3: socketpair(0x26, 0x6, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) socketpair(0x9, 0x1, 0xfa1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x0, 0x4, "041f64b448ea598c876b619ad7f333469420b319a5e12d0644c0afbd812049b9a6a190063b455e3979190cac21cb1833a2f825637ae1de99f4f5282d65c9c08bd1f46cae2b573321421a"}, 0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'hsr0\x00', 0x2}, 0x18) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000180)={@loopback, @initdev, @private}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, 0x8, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001004) r5 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0x66, {0x2, 0x4e20, @loopback}, 'rose0\x00'}) prctl$PR_SVE_GET_VL(0x33, 0x989a) r6 = getuid() sendmsg$nl_xfrm(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x104, 0x70bd2d, 0x25dfdbfc, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x7ff, 0x4e23, 0x0, 0x2, 0x20, 0x30, 0x1d, 0x0, r6}, {0x2, 0x345, 0x2, 0x401, 0x3, 0xa1, 0x3, 0x935}, {0x6, 0x9, 0x100000000, 0x100000000000000}, 0x751, 0x6e6bb5, 0x0, 0x1, 0x1}, 0x80}, [@extra_flags={0x8, 0x18, 0x5}, @replay_thresh={0x8, 0xb, 0x3}, @replay_thresh={0x8, 0xb, 0xfffffffb}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008815) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000640)={'TPROXY\x00'}, &(0x7f0000000680)=0x1e) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008894}, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x4}, 0x68) r7 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000900)={0x61, 0x7d, 0x2, {{0x0, 0x47, 0x7f, 0x6, {0x20}, 0x4040000, 0x10001, 0x80, 0x0, 0x1, '!', 0x7, '\\-^$!](', 0x5, 'hsr0\x00', 0x7, 'TPROXY\x00'}, 0x5, '\xaa\xaa\xaa\xaa\xaa', r7}}, 0x61) 21:33:25 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000007c0)={@dev, @initdev}, &(0x7f0000000800)=0xc) 21:33:25 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x95, 0x75, 0x1, {0x8a, "54e0e0759c5d8738fa19004f1860025be135ccc616f0c46dc368fced9e2d18e9847fafbf2046eb50b2f4abd7f0c49b52cf62f1df9117423e68e7f98b943c44c6539863c446918f68a3d09c9a0e821883e567c4019c24e0a301abc3cb14b65c87352ff89f332231e0128fc53ca54296649ab0fb0833016f11b0410c68348052fd752ba30baf154ecb49b5"}}, 0x95) r0 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0x800, 0x8, {0x40, 0x1, 0x6}, 0x0, 0xffffff80, 0xffff, 0x4, 0x0, '', 0x9, '%\\]+$!+!+', 0x8, '(#,*}}(,', 0x2, ':#'}, 0x0, '', r0, 0xee01, 0xee00}}, 0x5b) r1 = getuid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0xe0, 0x2, 0x20, 0x80, 0x33, 0x0, r4}, {0xfffffffffffffffa, 0x2, 0x8, 0x7, 0x3, 0x2, 0x10001, 0x80000000}, {0x8, 0x2, 0xfffffffffffffff9, 0x1}, 0x80000000, 0x0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0xe1, 0x7, 0x1}}, 0xe8) r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000012c0)) write$nbd(r2, &(0x7f0000001300)={0x67446698, 0x0, 0x4, 0x3, 0x4, "8d5c9e70aaf00e4d6123a3fdad317980d75e2b845222a51037f3861bec5ab761b06cf9a8736f45d8bbb3be382850316349eebad132228a073f387b011ba49332fa5bea79b8cefd9c"}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000001380)={0x2e, 0x30, 0xffff7422, 0x1b, 0x1, 0x0, 0x2, 0xb0}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000013c0)={0x32, 0x1b, 0xa, 0x2, 0x9, 0x9, 0x2, 0xde, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001440)={0x19, 0x4, 0x2, 0x18, 0x5, 0x7fffffff, 0x3, 0x2d}) write$P9_RSTATu(r7, &(0x7f0000001480)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x6, 0x800000, {0x2, 0x2, 0x7}, 0x20200000, 0x1f, 0xff, 0xe2, 0x8, '(#,*}}(,', 0x4, '-/{}'}, 0x2, '#*', r4, 0x0, r1}}, 0x56) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000001500)) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001540), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x5fe8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @remote, 0x2, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff, 0xffffffff, 0x10, 0xd, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x169, 0x20, 0x4, 0x2, 0x3, 0x2, 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x5, 0x16, 0xc, 0x7, 0x1, 0x10001, 0x1, 0x57, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001a00)={@local, @multicast2}, &(0x7f0000001a40)=0xc) 21:33:25 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x6, 0x7}, 'port0\x00', 0x110, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x7ff, 0x0, 0x2, 0x80}) 21:33:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) 21:33:25 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r4 = getuid() write$P9_RSTATu(r3, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r4}}, 0x51) write$P9_RCREATE(r3, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) read$eventfd(r0, &(0x7f0000000580), 0x8) write$P9_RREAD(r2, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) 21:33:25 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x18, 0x33, 0x12, 0x11, 0x0, 0x9, 0x4}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x440203, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x0, 0x9}) r2 = syz_io_uring_complete(0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = syz_io_uring_complete(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x38, 0x61, 0x39, 0x32, 0x62, 0x62, 0x62, 0x36, 0x33, 0x35, 0x66, 0x31, 0x66, 0x34, 0x33, 0x34]}, &(0x7f0000000180)={0x0, "303192c331f96022c4c256906e107ab4a40667882043e16732fcd71e2b242de75afa96ef9413e82509a03fe38a73b06dbe69b858844e56fb6c01f796db322c0d", 0x30}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x0, 0x3ff, 0x1, 'queue0\x00', 0x4}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000002c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000300)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000340)={0x1, 0x0, {0x3b, 0x30, 0x17, 0x17, 0x9, 0x5, 0x5, 0x9b, 0x1}}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x72e859406a8c940b}, 0x8) 21:33:25 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast}, &(0x7f0000000740)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)) 21:33:25 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{0x84, 0x8}, 'port1\x00', 0x1, 0x410, 0x9, 0x5, 0x80e, 0x4, 0x3ff, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x3, 0x0, {0xffffffffffffffff, 0x1, 0x2946cdf, 0x3, 0x3}, 0x2}) r0 = syz_io_uring_complete(0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x2, 0x2, 0x0, 'queue1\x00', 0x3}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x482a00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000280)={0x9, 0x1, 0x5}) r2 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x66d, 0x10, 0x0, 0x289, 0x0, r0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r4 = eventfd2(0x9, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000380)=r4, 0x1) r5 = pidfd_getfd(r0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000003c0)={{0x20, 0xfc}, 'port1\x00', 0x9, 0x1001, 0xffffffff, 0x5, 0x4, 0xe91, 0x4, 0x0, 0x1, 0x1}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x1, 0x2}, 'port1\x00', 0xed, 0x1000, 0x7ff, 0x2, 0x7, 0x8, 0x4, 0x0, 0x7, 0xff}) 21:33:25 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100000001, 0x2000) syz_io_uring_setup(0x24a5, &(0x7f0000000100)={0x0, 0xa570, 0x0, 0x0, 0x2a8, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) pidfd_send_signal(r6, 0x32, &(0x7f0000000240)={0x21, 0x2, 0x4}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400a00) r8 = pidfd_getfd(r2, r7, 0x0) r9 = eventfd2(0x4, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000300)=r9, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000340), r7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x104, &(0x7f0000000380)=0x88, 0x0, 0x4) r10 = syz_io_uring_complete(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f00000003c0)={{0xa0, 0x5}, 'port0\x00', 0x80, 0x10000, 0xfffffff9, 0xba5, 0x55, 0x7f, 0x3, 0x0, 0x1, 0xb6}) inotify_init() syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x40, 0x10800, 0x12345}, 0x200) 21:33:25 executing program 6: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x3}, 0x9}}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) r0 = syz_io_uring_complete(0x0) r1 = getuid() write$P9_RSTATu(r0, &(0x7f0000000200)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x5d4, 0x400, {0x48, 0x4, 0x6}, 0x41050000, 0xffff, 0x5, 0x3, 0x1, '#', 0x2, '-&', 0x2, '\x10.', 0x1, '-'}, 0x1, '!', 0xee01, 0x0, r1}}, 0x4f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x110, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000280)='veth1\x00', 0x2d8, 0x6, 0x3ff}) eventfd(0x6) syz_io_uring_complete(0x0) accept$inet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000400)={0x7, 0x0, 0x0, 'queue0\x00', 0x6}) r4 = getuid() write$P9_RSTATu(r3, &(0x7f00000004c0)={0x51, 0x7d, 0x2, {{0x0, 0x3c, 0xffff, 0x9, {0x20, 0x4, 0x6}, 0x800000, 0x37d, 0xeb, 0x81, 0x2, '\x10.', 0x2, '-&', 0x2, '\x10.', 0x3, '.:{'}, 0x0, '', r1, 0x0, r4}}, 0x51) write$P9_RCREATE(r3, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x10, 0x2, 0x1}, 0x8}}, 0x18) write$P9_RREAD(r2, &(0x7f0000000680)={0xd2, 0x75, 0x1, {0xc7, "5d584e044376aaf3a0ec13c8450005a6cae13f921ffbe5596f5ef27a5cfca3fc8006408370b647d23e2fe4e958f2c58ab104f6a400174dade92af5ae67d0d44eb45b2d6266f0ba070d0493fe498477b1ba90b99dbcb0a87ec23aa224b05b85a91e4abed80cc2dfab950b7273a01ea348648fbe0499586f214829cf2f54ea4857178824c8a02073082c795ea13e9eae9a5e4493648ae31449a4263a7ebae0170b3c3741d7ccc4e979a068418801be6c51a600d369cb472c32b4575c71f5bad62a38309adf71b3f6"}}, 0xd2) 21:33:25 executing program 4: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0x95, 0x75, 0x1, {0x8a, "54e0e0759c5d8738fa19004f1860025be135ccc616f0c46dc368fced9e2d18e9847fafbf2046eb50b2f4abd7f0c49b52cf62f1df9117423e68e7f98b943c44c6539863c446918f68a3d09c9a0e821883e567c4019c24e0a301abc3cb14b65c87352ff89f332231e0128fc53ca54296649ab0fb0833016f11b0410c68348052fd752ba30baf154ecb49b5"}}, 0x95) r0 = getuid() write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000000c0)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0x800, 0x8, {0x40, 0x1, 0x6}, 0x0, 0xffffff80, 0xffff, 0x4, 0x0, '', 0x9, '%\\]+$!+!+', 0x8, '(#,*}}(,', 0x2, ':#'}, 0x0, '', r0, 0xee01, 0xee00}}, 0x5b) r1 = getuid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) r4 = getuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000011c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0xe0, 0x2, 0x20, 0x80, 0x33, 0x0, r4}, {0xfffffffffffffffa, 0x2, 0x8, 0x7, 0x3, 0x2, 0x10001, 0x80000000}, {0x8, 0x2, 0xfffffffffffffff9, 0x1}, 0x80000000, 0x0, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0xe1, 0x7, 0x1}}, 0xe8) r5 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000012c0)) write$nbd(r2, &(0x7f0000001300)={0x67446698, 0x0, 0x4, 0x3, 0x4, "8d5c9e70aaf00e4d6123a3fdad317980d75e2b845222a51037f3861bec5ab761b06cf9a8736f45d8bbb3be382850316349eebad132228a073f387b011ba49332fa5bea79b8cefd9c"}, 0x58) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000001380)={0x2e, 0x30, 0xffff7422, 0x1b, 0x1, 0x0, 0x2, 0xb0}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000013c0)={0x32, 0x1b, 0xa, 0x2, 0x9, 0x9, 0x2, 0xde, 0x1}) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001440)={0x19, 0x4, 0x2, 0x18, 0x5, 0x7fffffff, 0x3, 0x2d}) write$P9_RSTATu(r7, &(0x7f0000001480)={0x56, 0x7d, 0x2, {{0x0, 0x3f, 0x6, 0x800000, {0x2, 0x2, 0x7}, 0x20200000, 0x1f, 0xff, 0xe2, 0x8, '(#,*}}(,', 0x4, '-/{}'}, 0x2, '#*', r4, 0x0, r1}}, 0x56) ioctl$RTC_EPOCH_READ(r7, 0x8008700d, &(0x7f0000001500)) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000001540), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0x5fe8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @remote, 0x2, 0x1}}}, {{@arp={@multicast2, @multicast2, 0xff, 0xffffffff, 0x10, 0xd, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x169, 0x20, 0x4, 0x2, 0x3, 0x2, 'virt_wifi0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f00000019c0)={0x5, 0x16, 0xc, 0x7, 0x1, 0x10001, 0x1, 0x57, 0xffffffffffffffff}) 21:33:25 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xc7, 0x9, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0xff, 0x80}, 'port1\x00', 0x10, 0x20050, 0x0, 0x4, 0x3, 0x3f, 0xda, 0x0, 0x6, 0x80}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000180)={0x1, 0x2, 0x6}) syz_io_uring_setup(0x4f29, &(0x7f00000001c0)={0x0, 0x9b88, 0x2, 0x3, 0xe1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, 0x0, 0x1}, 0x1) pipe2$9p(&(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x5, 0x1ff, 0x0, 'queue0\x00', 0x6}) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000480)) keyctl$get_security(0x11, 0x0, &(0x7f00000004c0)=""/120, 0x78) r3 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x842) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x4}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000600)={0xe6, 0x4, 0x1, 'queue1\x00', 0x4}) syz_io_uring_complete(0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@loopback, @broadcast}, &(0x7f0000000740)=0xc) VM DIAGNOSIS: 21:33:16 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801b16f4e8 R8 =0000000000000000 R9 =ffffed1001520046 R10=0000000000000031 R11=6666666666663c5b R12=0000000000000031 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555563eff400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdbea7bff8 CR3=000000000bd8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880190cfb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003219f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880190cfb48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555901c1400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f377c991620 CR3=000000001e5ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000