[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 37.531088] audit: type=1800 audit(1539220421.471:25): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 37.557687] audit: type=1800 audit(1539220421.471:26): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 37.581383] audit: type=1800 audit(1539220421.471:27): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. 2018/10/11 01:13:52 fuzzer started 2018/10/11 01:13:54 dialing manager at 10.128.0.26:33435 2018/10/11 01:13:54 syscalls: 1 2018/10/11 01:13:54 code coverage: enabled 2018/10/11 01:13:54 comparison tracing: enabled 2018/10/11 01:13:54 setuid sandbox: enabled 2018/10/11 01:13:54 namespace sandbox: enabled 2018/10/11 01:13:54 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/11 01:13:54 fault injection: enabled 2018/10/11 01:13:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/11 01:13:54 net packed injection: enabled 2018/10/11 01:13:54 net device setup: enabled 01:16:35 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x8}, 0xc) rt_sigsuspend(&(0x7f00000000c0)={0x400}, 0x8) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x2, 0x4) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x21022a, 0x4) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfff) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000300)={0x1, 0x6, 0x8, 0xffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000380)=""/235) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000480)=""/66) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000500)=""/91) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000580)=[0x100000000, 0x1]) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x7, 0x58, 0x0, 0x10001, 0xeee, 0x7fffffff], 0x6, 0x400, 0xffffffff, 0xff, 0x8, 0x5, {0x3, 0x400, 0x3ff, 0x80, 0x8001, 0x4, 0x1, 0x3, 0xe8, 0x1, 0x81, 0x6, 0x5, 0xdef, "a2e68cdff8d4b2a75026fb6bc768757a51e607f414a8990bf22603ba942ec9a4"}}) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x6}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000700)={r4, 0x9, 0x4}, 0x8) delete_module(&(0x7f0000000740)='\x00', 0x200) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000780)={0x80000000, 0x1b0cfdbb, 0x4, 0x1000}) lsetxattr$security_capability(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='security.capability\x00', &(0x7f0000000840)=@v2={0x2000000, [{0xc0c, 0xfff}, {0x5, 0xd00}]}, 0x14, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000008c0)={0x4, &(0x7f0000000880)=[{}, {}, {}, {}]}) mknodat(r2, &(0x7f0000000900)='./file0\x00', 0x80, 0x1ff) socket$kcm(0x29, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000a40)={'filter\x00', 0x0, 0x3, 0xa8, [], 0x1, &(0x7f0000000940)=[{}], &(0x7f0000000980)=""/168}, &(0x7f0000000ac0)=0x78) write$P9_ROPEN(r3, &(0x7f0000000b00)={0x18, 0x71, 0x2, {{0x9, 0x3, 0x3}, 0x1}}, 0x18) accept$packet(r2, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001fc0)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002000)={@remote, @ipv4={[], [], @loopback}, @local, 0xc0, 0x0, 0xfffffffffffffc00, 0x400, 0x6, 0x80000000, r5}) syzkaller login: [ 211.707896] IPVS: ftp: loaded support on port[0] = 21 01:16:35 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x50, 0x100000000}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x80]}, &(0x7f00000000c0)=0x8) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000100)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x5}, 0x28, 0x3) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000012c0)={r2, 0x1}, &(0x7f0000001300)=0x8) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000001340), 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001380)={r2, 0x19, "3d5135d098ad7d2495c4bdc4ae09538050f2ebc4913e4f01af"}, &(0x7f00000013c0)=0x21) socket$inet(0x2, 0x5, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(r0, &(0x7f0000001400), &(0x7f0000001480)=0x6e) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000014c0)=""/248) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000300}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x24}}, 0x4044) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) setxattr$security_smack_entry(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='security.SMACK64IPOUT\x00', &(0x7f0000001780)='U+', 0x2, 0x2) socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0, 0x0}, &(0x7f0000001800)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001880)={{0x3, 0x0, 0x7fffffff, 0x4, 'syz1\x00', 0xfff}, 0x2, 0x1f5fb833c48bf379, 0x6a, r6, 0x7, 0xbcf, 'syz1\x00', &(0x7f0000001840)=['\x00', '\x00', 'security.SMACK64IPOUT\x00', '\x00', '\x00', '\x00', 'cpuset\x00'], 0x22, [], [0x1c7, 0x7, 0x6, 0x6]}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000019c0)=r3, 0x4) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={r6, r7, r8}, 0xc) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001a40)={0x0, 0xe, 0xf7}) r9 = msgget$private(0x0, 0x50) msgctl$IPC_SET(r9, 0x1, &(0x7f0000001a80)={{0x8817, r7, r8, r7, r8, 0x120, 0x800}, 0x8, 0x5, 0x0, 0x1, 0x0, 0x8001, r6, r6}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001b00)={0x3, 0x3, 0x0, 0x3, 0x1}) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7f) [ 211.947764] IPVS: ftp: loaded support on port[0] = 21 01:16:36 executing program 2: socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001780)=@broute={'broute\x00', 0x20, 0x4, 0x16f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x2, 0x1f, '\x00', 'syzkaller1\x00', 'team_slave_0\x00', 'bpq0\x00', @dev={[], 0xb}, [0x0, 0xcb7880b810ab49d4, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff], 0x898, 0xa10, 0xa48, [@devgroup={'devgroup\x00', 0x18, {{0x4, 0x3f, 0x4, 0x4, 0x5}}}, @u32={'u32\x00', 0x7c0, {{[{[{0x8, 0x3}, {0x7}, {0x6, 0x3}, {0x5}, {0x21e, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x9, 0x3}, {0x5, 0x1}, {0x7fffffff}, {0x2, 0x2}], [{0x57, 0x5}, {0x6, 0x3}, {0xfffffffffffffffe, 0xffffffffffffffff}, {0x40, 0x6}, {0x7, 0x3}, {0x81, 0x4f7d}, {0x8, 0x4}, {0x6, 0x2}, {0x8, 0x1}, {0x89, 0x2}, {0x0, 0x41e}], 0x9, 0x5}, {[{0x7ea, 0x1}, {0x8, 0x3}, {0x2bd, 0x3}, {0xfffffffffffff428, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x3}, {0xfffffffffffffffa}, {0x100000000}, {0x4f6, 0x3}], [{0x3, 0x2}, {0x4, 0x3}, {0x800, 0xfffffffffffffffd}, {0x6, 0x81}, {0x20, 0x1}, {0x7, 0xc2f}, {0x0, 0x4}, {0x100, 0x40}, {0xffffffffffffffff, 0x6}, {0x4, 0x3}, {0x0, 0x8dbb}], 0x9, 0x7}, {[{0x3, 0x1}, {0x2, 0x3}, {0xffff, 0x2}, {0xffff, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0x2}, {0x8, 0x3}, {0x76e76891}, {0xa8, 0x3}, {0x7, 0x1}], [{0x4be2, 0xfffffffffffff800}, {0x551, 0x7fffffff}, {0x7, 0x30}, {0x401, 0x81}, {0xb2}, {0x4, 0x100}, {0x0, 0x7}, {0x11f9, 0x8}, {0x2, 0xfff}, {0x100000001}, {0x80000001, 0xfffffffffffffeff}], 0x5, 0x9}, {[{0x6}, {0xfb24, 0x1}, {0x2, 0x3}, {0x1}, {0x2}, {0x5, 0x3}, {0x3}, {0x5, 0x1}, {0xc6, 0x3}, {0x4}, {0x80, 0x3}], [{0x7fff, 0x7}, {0x2000, 0x4}, {0x400, 0x100000000}, {0x20, 0x2}, {0x5, 0x3}, {0x6a, 0x7}, {0xc789, 0x8}, {0x3, 0x7fff}, {0x5, 0x7}, {0x59, 0x401}, {0x9, 0x2}], 0x5, 0x2}, {[{0x7fffffff, 0x2}, {0xff, 0x1}, {0x7, 0x3}, {0x10001, 0x3}, {0x6, 0x1}, {0x84}, {0x5, 0x3}, {0x2, 0x2}, {0xed2, 0x3}, {0x6, 0x221d381644c604ed}, {0x3}], [{0x3ff, 0x800}, {0x1, 0x6}, {0x65, 0x3}, {0x56b, 0x100000001}, {0x1, 0x2}, {0x5, 0x1f}, {0x1ff, 0x6}, {0x3, 0x489d}, {0x8, 0xc00000000000000}, {0x100000001, 0xd80000}, {0x7, 0x8001}], 0x3, 0x6}, {[{0x81}, {0x8, 0x3}, {0xffff, 0x1}, {0x7fff, 0x2}, {0x7f, 0x3}, {0x5}, {0x0, 0x3}, {0x3ff, 0x3}, {0x1, 0x1}, {0x7fff, 0x3}, {0x64, 0x2}], [{0x3, 0x40}, {0x9, 0x7f}, {0x9, 0x5}, {0xfff, 0x5}, {0x100000000, 0xb5c8}, {0x2, 0xb419}, {0xffffffff7fffffff, 0x400}, {0x8, 0x81}, {0x80, 0xfffffffffffffffa}, {0x6, 0x5}, {0x6, 0x7f}], 0x8, 0x2}, {[{0x4}, {0x476a, 0x3}, {0x80, 0x3}, {0x7ff}, {0x80, 0x3}, {0x3, 0x3}, {0x3d54, 0x3}, {0x7}, {0x80000000000000}, {0x3, 0x3}, {0x3f}], [{0x208, 0xffffffff}, {0x0, 0x9}, {0x0, 0xffffffffffffff82}, {0x8000, 0x1}, {0x20, 0x4}, {0x2, 0xc090}, {0x5, 0x6}, {0x6, 0xd706}, {0x10001, 0x7}, {0xffffffff, 0x100000000}, {0x80000001, 0x7ff}], 0x5, 0x3}, {[{0x7, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x21c9}, {0x5, 0x3}, {0x5}, {0x69492b90, 0x1}, {0x80000001, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x10001, 0x1}], [{0x200, 0x3ac3}, {0xffffffffffffff00, 0x1f}, {0xfff, 0x7ff}, {0x81, 0x401}, {0x1, 0x2}, {0xffffffffffffffe0}, {0x7, 0x2}, {0x8, 0xc4d}, {0x9, 0x6}, {0x4, 0x1}, {0x0, 0x1}], 0xa}, {[{0x4, 0x1}, {0xffffffffffffffc0}, {0x4, 0x1}, {0x1bc9}, {0xacbc, 0x2}, {0x7, 0x2}, {0xfffffffffffffff8, 0x60ba8220cc66f98f}, {0x100, 0x2}, {0x9}, {0x8, 0x1}, {0x80000001, 0x3}], [{0x8, 0x3fd}, {0x9, 0x7}, {0x3, 0x100000001}, {0x101, 0x401}, {0x7}, {0x8, 0x9}, {0x800, 0x3}, {0x4086c1ab, 0x8}, {0x5, 0x3}, {0x4, 0x800}, {0x100000001, 0x2}], 0xa, 0x8}, {[{0x9, 0x1}, {0x7d3, 0x3}, {0x3, 0x1}, {0x1000, 0x3}, {0xb42}, {0x7, 0x3}, {0x8001}, {0x7, 0x3}, {0xa0, 0x3}, {0x4, 0x1}, {0x5}], [{0x8, 0x81}, {0x6, 0x7}, {0x2, 0x9}, {0x4, 0x80000001}, {0x681, 0x9}, {0x7f, 0x1}, {0x0, 0x81}, {0xfffffffffffffffe, 0x6}, {0x8d2}, {0x4, 0x8}, {0x7, 0x2}], 0xb, 0x2}, {[{0x2}, {0xe65}, {0x7f, 0x2}, {0x10001, 0x2}, {0x6, 0x3}, {0x2d11, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x9, 0x2}, {0x1, 0x2}, {0x8000, 0x1}], [{0x0, 0x5}, {0xfff, 0x4}, {0x56a, 0x2}, {0x0, 0x2}, {0x400, 0x38}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x80}, {0x3, 0x7}, {0x7, 0x1a}, {0x8, 0x9}], 0x3, 0xb}], 0x9}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"6e7e9cde6013a4c7ff166d956fd8818835105556fc1418cd1474c16bfc20"}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:audit_spool_t:s0\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0xc}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x5, 0x40, 0xe8b7, 'ifb0\x00', 'dummy0\x00', 'veth1_to_team\x00', 'bcsh0\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xb0, 0x128, 0x1a0, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x2, 0x1}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x5, 0x0, 0x0, 0x0, "72b91de2f205596062e59d19d91958c9e5de069fa03361ba9b9fe703213619486fca62f46e5c095ff52e0de35c2f14dcca51d24530ec6d6e1c371834cf24ad44"}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0xc6, 0x3, 0x1, 0x0, "3c6fb625e5e023cf47a33121e456627860db2d030b5147e97dae8978666fe4d0f62dee30cb73bc43888bd75b7f4f1512aed0d51615aca40ba36abe65d59b8a5d"}}}}, {{{0xb, 0x6, 0x88e5, 'veth0_to_team\x00', 'ipddp0\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', @random="5122e1f5218a", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={[], 0xf}, [0xff, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x81ff, 'vlan0\x00', 'syzkaller1\x00', 'ifb0\x00', 'yam0\x00', @remote, [0x0, 0xff, 0xff, 0xff], @dev={[], 0x18}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x930, 0x9a8, 0x9d8, [@among={'among\x00', 0x868, {{0x7, 0x8, 0x3, {[0x7, 0x7, 0x77ffb67b, 0x5, 0x2, 0x0, 0xfffffffffffffc95, 0x100000000, 0x8, 0x9, 0x2, 0x100000001, 0x22, 0x5, 0x6773e1c0, 0x4, 0x400, 0x0, 0x3e8c, 0x12, 0x7, 0x7, 0xe64d, 0x1ff, 0x5, 0x25, 0x3, 0x1ff, 0x9, 0x9, 0x400000000, 0xfffffffffffffc01, 0x100, 0xbe3a, 0x800, 0x1, 0x697e6749, 0x1, 0x10000, 0x8000, 0x7fffffff, 0xda9c, 0x5, 0x100000000, 0x0, 0x2, 0x8, 0x5, 0x100000000, 0x6, 0x7ff, 0x400, 0x101, 0x401, 0x0, 0x1, 0x8, 0xfffffffffffffffa, 0xffffffffffffffff, 0x401, 0x3f, 0x3, 0x9, 0x80, 0x9, 0x3f, 0xcb, 0x0, 0x4, 0x6, 0x951e, 0xfffffffffffff5ae, 0x100000000, 0x2, 0x2, 0x3, 0x3, 0x0, 0x5, 0x7, 0xfffffffffffffffa, 0x6, 0x9, 0x9a, 0xffffffff, 0x7f, 0x6, 0x7, 0x80000001, 0xf0, 0x81, 0x6, 0x88a, 0x3, 0x7fff, 0x4, 0x7, 0x5, 0x0, 0x2, 0x35, 0xfff, 0x1, 0x6, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0x3, 0x4, 0x1, 0xfffffffffffffffa, 0x2, 0x40, 0x3, 0x1, 0x1, 0x7, 0xffff, 0x6, 0x2, 0x5, 0x7, 0x800, 0x2, 0x3, 0xfffffffffffffffe, 0x5, 0x4, 0x3, 0x9, 0xdc, 0x800, 0x1, 0x3ff, 0x78e, 0x9, 0x80000001, 0x8f2, 0x26c7, 0xfcd, 0x58f, 0xf8f, 0x13f4b24f, 0x0, 0x9, 0x3, 0x0, 0x9, 0x178, 0x8, 0x800000010000000, 0x100, 0x401, 0x8000, 0x1, 0xc1e, 0x4c3d, 0x9, 0x1, 0xf12, 0xff, 0x4bd, 0x2, 0x8, 0x9cb4, 0x7, 0x6, 0x7, 0x4, 0x6, 0x2, 0x97, 0x1, 0x7, 0x6, 0x9, 0xfff, 0x10001, 0x1, 0x100000000, 0x2, 0x88c, 0x0, 0x7fffffff, 0x9, 0x3, 0x2, 0x3, 0x0, 0x6, 0x100, 0x1, 0x470effd3, 0x10001, 0x3, 0x200, 0xd003, 0x1, 0x7, 0x72c9, 0x8, 0x200, 0xff1, 0x27a2, 0x4, 0x80000000, 0x80, 0x1000, 0x3, 0x1b, 0x100, 0x50000, 0x10001, 0x3, 0x3, 0x2, 0x1, 0x2, 0x2ecc, 0xe8, 0x3, 0x80, 0x5, 0xa8, 0x2, 0x4, 0x2, 0x3, 0x7, 0x8, 0x6, 0xffffffffffff0000, 0xfffffffffffffffc, 0x4, 0x73c, 0x8, 0x9, 0x3, 0x3, 0xffffffffffffff81, 0x1, 0xd343, 0x80000001, 0x6, 0x3ff, 0x2, 0x44c, 0x4, 0x3, 0x7f, 0x1, 0xffffffff0000, 0x2, 0x0, 0xfff], 0x4, [{[0x5, 0x9], @rand_addr=0x800}, {[0x4, 0x9], @local}, {[0x5c, 0x80000001], @local}, {[0x100000000000, 0x89de], @remote}]}, {[0x1f, 0x6, 0x0, 0x8, 0x80000000, 0x7, 0x7, 0x3, 0x0, 0x2, 0xffffffff, 0xc5d, 0x3, 0x3, 0x2, 0xffffffffffffa36e, 0x9, 0x2, 0x5, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x88ab, 0x0, 0x4, 0x7, 0xcc, 0x1, 0x8, 0x0, 0xd1bc, 0x9, 0x100, 0x6, 0x100000000, 0x3, 0x0, 0x1, 0x1000, 0x8, 0x7, 0x0, 0x9, 0xdfa, 0xffffffffffffff01, 0x101, 0x1000, 0x7, 0x80000001, 0x3, 0xffff, 0x0, 0xea, 0x2, 0x8, 0x80, 0x2f, 0x401, 0x7f, 0x9, 0x39ee, 0x8, 0x7, 0x2, 0x3, 0x2, 0xffffffff, 0x4d, 0x9, 0x85, 0x80, 0x40da, 0x7f, 0x0, 0x1ff, 0x8, 0x8, 0x0, 0xdf6, 0x80000000, 0x86e7, 0x6, 0x3, 0x9, 0x20, 0x7, 0x9, 0x8, 0x7, 0xcf42, 0x200, 0xfffffffffffffffc, 0x7, 0x1, 0x9, 0x300000000, 0x8001, 0x1ff, 0x4, 0x80000001, 0xffffffffffffff85, 0x69, 0x800, 0x3, 0x2, 0xfffffffffffffff7, 0x80000000, 0xb30, 0x100, 0xff, 0x7, 0xfffffffffffffffe, 0x400, 0x1, 0x5, 0x1f4c3d9a, 0xfffffffffffffffe, 0xaafa, 0x8, 0x1, 0x0, 0x7fffffff, 0x958e, 0x8, 0x961e, 0x2, 0x7fffffff, 0x80000001, 0xff, 0x3, 0x4, 0x2, 0xffffffffffff8000, 0x2, 0x0, 0xc8c2, 0x7, 0xc07, 0x79, 0x200, 0xffe0000000000000, 0x5, 0x1, 0x7, 0x1fc, 0x0, 0xff, 0x6, 0xffffffffffffc1ac, 0x21b8, 0x8000, 0x100000001, 0x200, 0x5, 0x1ff80000, 0x40, 0x3, 0x100000001, 0x3f, 0x5, 0x401, 0x3, 0x3f, 0x8, 0x8000, 0x100, 0xffffffffffffffa2, 0x3, 0x9, 0x59e, 0x3, 0x7ff, 0xf647, 0x2, 0x81, 0x1, 0x608, 0xfffffffffffffffb, 0x3, 0x7, 0x9, 0xe3, 0x8, 0x400, 0x81, 0x7fffffff, 0xfffffffffffffe01, 0x800, 0x9, 0x0, 0x0, 0x30a, 0x4, 0x81, 0x1, 0x80, 0x100000000, 0x7, 0x81, 0x29c, 0x1, 0x1, 0xffffffff80000001, 0x6d04, 0x78cb, 0x7, 0x0, 0x8, 0x0, 0x1, 0x4, 0xfaa1, 0x5, 0x400, 0x101, 0x2, 0x9, 0x1, 0xffffffffffff8001, 0x0, 0x7, 0x5, 0x9, 0x400, 0xa44b, 0x7, 0xfffffffffffffe00, 0x3, 0x8, 0x2, 0x9, 0x0, 0x7f, 0x8001, 0xeef, 0x80000000, 0x100000000, 0x0, 0x8, 0xfffffffffffff177, 0x6, 0x7, 0xafff, 0x3f, 0x1, 0x400, 0x1f, 0x2, 0xb0, 0x8, 0x8c1, 0x8, 0x3, 0x8, 0x9], 0x2, [{[0x2, 0x5], @remote}, {[0x6, 0x7e53], @local}]}}}}, @vlan={'vlan\x00', 0x8, {{0x4, 0x7, 0x99fc, 0x1, 0x2}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x1, 0x9, 0x6, 0x0, 0x0, "7e67a84c9a0d5d6768a6866cec18d7671d2ecad7e217c7109d89ec10487f3aa28b47390f08c7d5063c7cb794226a48dfc75c9fd20918c34efec44c7867cbd6d9"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x1768) r2 = syz_open_dev$sndpcmc(&(0x7f0000001800)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x42200) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000001840)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001880)='/dev/ppp\x00', 0x20080, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000018c0)='bbr\x00', 0x4) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000001900)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001e80)=@filter={'filter\x00', 0xe, 0x3, 0x500, [0x0, 0x20001980, 0x20001b00, 0x20001d28], 0x0, &(0x7f0000001940), &(0x7f0000001980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xf, 0x20, 0x6aef, 'ip6tnl0\x00', 'nr0\x00', 'bridge0\x00', 'sit0\x00', @empty, [0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xd0, 0x100, 0x150, [@connlabel={'connlabel\x00', 0x8, {{0xdb, 0x1}}}, @state={'state\x00', 0x8, {{0xffffffffffffffe0}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1f}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x91e1, 'syz1\x00', 0x4}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x13, 0x40, 0x8884, 'bridge0\x00', 'ip6gre0\x00', '\x00', 'ip6gre0\x00', @dev={[], 0x20}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe8, 0x180, 0x1f8, [@m802_3={'802_3\x00', 0x8, {{0x7e, 0x5, 0x2, 0x2}}}, @limit={'limit\x00', 0x20, {{0x2, 0x8, 0xfffffffffffffffa, 0x401, 0x1000, 0x41b}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"16e101f6fea974f2d0ea5f63e413cf55b936af8d4f1878d6c62fe5629058"}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x81, 'syz1\x00', 0x7fffffff}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x1, 0xfffffffffffff801, 0x0, 0x0, "fd2c7c1ef53d6b703280b789414c7fa5b3e35f4e0bdf816bb23e4bc4a7bee8bc29afe48d77ed036bceb55fd8937f5e982afcc44ae2489ac141a07fbbfc82b711"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x3, 0x4, 0x88b9, 'ifb0\x00', 'vlan0\x00', 'gretap0\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xfbeb0dbded43d2cd, 0xff, 0xff, 0xff, 0xe890e522e5bb84db], @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xe0, 0xe0, 0x128, [@rateest={'rateest\x00', 0x48, {{'bridge_slave_1\x00', 'veth1\x00', 0x2, 0x1, 0x9be8, 0x80, 0x80, 0x1, 0xc97, 0xad7e}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"f054de8a3791e7ba02f33cf418c7304827af0c340d22066a11e6b47bab48"}}}]}]}, 0x578) fchdir(r0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001f00)={{0x2, 0x4e22, @multicast1}, {0x6, @broadcast}, 0x4, {0x2, 0x4e21, @remote}, 'ip6gretap0\x00'}) read$FUSE(r3, &(0x7f0000001f80), 0x1000) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000002f80)) getsockname$unix(r2, &(0x7f0000002fc0)=@abs, &(0x7f0000003040)=0x6e) connect$unix(r2, &(0x7f0000003080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r3, &(0x7f0000003100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) accept$packet(r3, &(0x7f0000003180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000031c0)=0x14) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000003200)) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000003240)) bind(r2, &(0x7f0000003280)=@in={0x2, 0x4e23, @multicast1}, 0x80) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000003300)={0x2, 0x1}, 0x2) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000003340)={0x0, 0x3, 0x3, 0x80, &(0x7f0000ffb000/0x3000)=nil, 0x3}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000003380)={'security\x00'}, &(0x7f0000003400)=0x54) sendmsg$nl_route_sched(r3, &(0x7f00000035c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003580)={&(0x7f0000003480)=@gettaction={0xd4, 0x32, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x9, 0x7}, [@action_gd=@TCA_ACT_TAB={0xc0, 0x1, [{0x14, 0xd, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0x4, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x2000000000000}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0xc, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x3, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x100000001}}, {0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x14, 0xffffffff, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r4 = add_key(&(0x7f0000003600)='ceph\x00', &(0x7f0000003640)={'syz', 0x1}, &(0x7f0000003680)="3c0c9a532546af693665b0ff97d6faf302859219c81010e4eb98abd55446723a9f1acc27d366c2cea41df507a5fb26267f01961274532b703d56e245d76c1a41591ebd9ed2cda59d5b4f79375a5bac499dfa68d5ca1926c44ed5e8e047cfc9fa1c470e39a01b9710e0ca9406f433470cc9af2ce991824841c0bcaff3d252ebf08dfe7a4e815889212031c66dc7a8668d9c364e6d13b3aee8ad2ee53339879d8611b6e549e724486a2d5d0e1f7ee76c45f2d4c3b9b427553e51cc543734a1bd98c85311dfc434c921d6d7a1f07864110af59ce666049613e2a36dfa3546d1f230d2f5", 0xe2, 0x0) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000003780)='cifs.spnego\x00', &(0x7f00000037c0)='\x00') pipe(&(0x7f0000003800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000003840)={0x0, 0x40}, &(0x7f0000003880)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000038c0)={r6, 0x7f, 0x2, [0x1, 0x9d2]}, &(0x7f0000003900)=0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003940)='/dev/vga_arbiter\x00', 0x20001, 0x0) syz_open_dev$mice(&(0x7f0000003980)='/dev/input/mice\x00', 0x0, 0x210000) [ 212.370077] IPVS: ftp: loaded support on port[0] = 21 01:16:36 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x3, 0x8}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', r1, r2) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8) ioctl$KDDISABIO(r0, 0x4b37) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x40, 0x1f, 0x2, 0x55b, 0x3, 0x9, 0x4, 0x0, 0x2, 0x9}, 0xb) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) signalfd4(r3, &(0x7f0000000300)={0x800}, 0x8, 0x800) socketpair$inet(0x2, 0x6, 0xab, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000380)={0x6, 0x0, [{0x813b, 0x4, 0x0, 0x0, @adapter={0xfff, 0x6f, 0x6, 0x0, 0x80000001}}, {0xe22, 0x5, 0x0, 0x0, @sint={0x3ff, 0x3d1}}, {0x2, 0x7, 0x0, 0x0, @msi={0x2, 0xc04}}, {0x7f, 0x3, 0x0, 0x0, @sint={0x3, 0x401}}, {0x7f, 0x0, 0x0, 0x0, @adapter={0x5, 0x1f, 0x80000001, 0x2, 0x79d}}, {0x4, 0x0, 0x0, 0x0, @msi={0x20, 0x8214, 0x4}}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x9, @mcast2, 0x1}}}, &(0x7f0000000580)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r6, 0x6}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000640)=0x7) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000680)={{0x2, 0x4e24, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e20}, 'bridge0\x00'}) fchdir(r5) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000700)=0x9, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, r7, 0x202, 0x0, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x256}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000940)='/dev/null\x00', 0x400, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000980)='bic\x00', 0x4) write$FUSE_DIRENT(r3, &(0x7f00000009c0)={0x50, 0x0, 0x2, [{0x6, 0x1f, 0x4, 0x7, 'bic\x00'}, {0x4, 0x8001, 0x4, 0x0, 'bdev'}]}, 0x50) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000a40)=0x2) getsockname$inet(r0, &(0x7f0000000a80)={0x2, 0x0, @dev}, &(0x7f0000000ac0)=0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000b00)={0x6c5a, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r8, 0x40106439, &(0x7f0000000b40)={0x8, r9}) r10 = getpgid(0xffffffffffffffff) ptrace$pokeuser(0x6, r10, 0x100000001, 0x1) [ 212.610071] IPVS: ftp: loaded support on port[0] = 21 [ 212.646653] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.653035] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.660688] device bridge_slave_0 entered promiscuous mode [ 212.749267] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.760733] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.768144] device bridge_slave_1 entered promiscuous mode 01:16:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x200000) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x20, 0xa4, 0x6, 0x5, 0x8, 0x5a4f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x981, 0x20, 0x200, 0x8, 0x7, 0x1ff}, &(0x7f0000000100)={0x4, 0x8000, 0x6, 0x3ff, 0x800, 0x8, 0x1, 0xfb}, &(0x7f0000000140)={0x7, 0x32, 0x0, 0x8, 0x5, 0x7fff, 0xeff5, 0x7968}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={0x100000000}, 0x8}) mknod(&(0x7f0000000240)='./file0\x00', 0xe072, 0xfffffff7) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x40400, 0x0) r3 = semget(0x2, 0x3, 0x407) semctl$IPC_RMID(r3, 0x0, 0x0) sendto$unix(r0, &(0x7f00000002c0)="c37d5308f81c3901a243db906c3d1f70c6e73c4bb24c8f1c7ee68c271cecde2c687b992077d07967850fd272ebba87d37685c70667ab61109feef4aeff8128425edc25eb170120c371aef5fc2595599328032d270667971bbee9902617e5ea58405fb145ad6fe0df66f21b8cb414c4e3d69bfb70bf2cb78c128e740e08d45d03785923a9d3acb1747a776c74", 0x8c, 0x0, &(0x7f0000000380)=@file={0x1, './file0/file0\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x400, 0x6, 0x4, 0x4, 0xc8}, &(0x7f00000004c0)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000500)={r4, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r4, 0x800}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) get_robust_list(r5, &(0x7f0000000740)=&(0x7f0000000700)={&(0x7f0000000640)={&(0x7f0000000600)}, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)}}, &(0x7f0000000780)=0x18) syz_mount_image$ntfs(&(0x7f00000007c0)='ntfs\x00', &(0x7f0000000800)='./file0\x00', 0xfffffffffffffffb, 0x6, &(0x7f0000001b80)=[{&(0x7f0000000840)="0a355b081e8350b091dad49ab9dbf5f868c7648a4f6a80a27baafff2ef5ef6e655b3deb100274110ec134518e7b065ff078f1d1e3674faad73fb9bb8799c725346a0c117b4a38d33d1c439a5c853bf518dc4dc68966b08b0a4579ce6753506d5061b952e10818c9d552ce8a619c6e27812cb492380903c4ff78791", 0x7b, 0x4}, {&(0x7f00000008c0)="2c8f6346d0a05664a19ca669885ddd64a439e2adb946495ca3b9285b586e8ddee4bf468b9541a4fc9196a36a19c2aad71e0c3e03358966b09323bee71e5582cb9c580fcc66f34e935b53128135e47fd44354f82318f7d8c1b448b9d925e267d377e3f0caf6856a5158f1eb1141ffab9d6e0d13418f32f8aa2de44b3d8cc6c3e2eb9fcb31a67bd624866f866778ebf551e8d30aa3791da7ccceb5dcb5ba17c737512191fe64f02e3f2852fbe77b30e8f7f7ba426d656180b2fa816499fcf51b8676aa455260d8dadb7635d8f16cecbacbaf948aa05d1507484a01ac30ff20612cb3d11795ec31f20234c1d18d36279978", 0xf0, 0x6}, {&(0x7f00000009c0)="7e2f16cd1f2e7993d1b5d949977527a737e64272c77e055965e2481c185b94832d009d0c669540e9eff31848ea82174ac2", 0x31, 0xa0}, {&(0x7f0000000a00)="5134902dac78a63f02da2ad887f832daf4ba91284d2e76728a5feec28fdc14c150267d95f33773d4487f4d180d5d445b82a3bbd6a3a93d8c91d32ac74aef22e1b32c1a6c99c7b0dedd508ce682d7da40882d4a545987", 0x56, 0x387}, {&(0x7f0000000a80)="038b2dc9e247a1483e3377c9985ee715f56f9e3190296202338faccc848476421d50740e2299515281c4aa298af213f5c3841b96f922a8b4fe17658837006e5f1ce20753e2d7f4315ca3976d762116d4cd18da50eef0dce303dca22968e8c6b6023c973868dcf1f42420c8748bdb7729c9b26c4603f8769716c6331e3608b0f0eb4d4445e92342f060dfe51bc5a51b7c97eba94b2c59bdd3c9f1ccb72205c6578983509b266fe6a82cfc69d10f24783767d2c02d82d8614c58c9bda3eb5342565a84f7e020d4c0a38d9a8568c17f", 0xce, 0x3}, {&(0x7f0000000b80)="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", 0x1000, 0x6}], 0x1000, &(0x7f0000001c40)={[{@disable_sparse_yes='disable_sparse=yes'}, {@dmask={'dmask', 0x3d, 0x7}}, {@disable_sparse_no='disable_sparse=no'}, {@dmask={'dmask', 0x3d, 0x4cfa}}, {@uid={'uid', 0x3d, r6}}], [{@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@subj_role={'subj_role', 0x3d, '/dev/uinput\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio='permit_directio'}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001dc0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001d80)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000001e00)={0x10, 0x30, 0xfa00, {&(0x7f0000001d40), 0x4, {0xa, 0x8, 0x7f76, @local, 0x4}, r7}}, 0x38) vmsplice(r1, &(0x7f0000002f40)=[{&(0x7f0000001e40)="dc512c0d571fcf144d7a79433f94fcd544aeefad8c97b59a7d2ad02e498165177a591a62a9233abd125719f8cc1dd76cacc0acfe49227696dab10506587b9404310a46a85e181eb3e489edfcd5cd0068d70dd28723ac34de7892ea58c7aa308a9782c73b8ac2f01e4a9878be273d1633d9538ac2995df92c201e28", 0x7b}, {&(0x7f0000001ec0)="012d8e012f4d4838ecf1572583ba22bec4cfb423b65e57e490699342b549534d95", 0x21}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="206c7137396ae2b5bbbbfbff8904e11846823f3a8676d5f577e4342fe8fb71389993fe21462d", 0x26}], 0x4, 0xe) accept4$packet(r0, &(0x7f0000002f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002fc0)=0x14, 0x80800) socket$vsock_dgram(0x28, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003080)={r0, 0x50, &(0x7f0000003000)}, 0x10) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000030c0)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000003100)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000003140)) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000003180)={0x2, 0x1}) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) ioctl$TCSBRKP(r0, 0x5425, 0x1fe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000031c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000003240)={r4, 0x7}, &(0x7f0000003280)=0x8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000032c0)) [ 212.874828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.959496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.048978] IPVS: ftp: loaded support on port[0] = 21 [ 213.308819] bond0: Enslaving bond_slave_0 as an active interface with an up link 01:16:37 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd, 0x80) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"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"}) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000440)={0x73, 0xffffffffffff8001, 0x0, 0xde, 0x7, 0x4}) finit_module(r0, &(0x7f0000000480)='/dev/vcsa#\x00', 0x2) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000004c0)=""/4096) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000014c0)={0x0, r0, 0x100, 0x2d, 0x9, 0x300000000000000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000001500)={0xf000}) mknod$loop(&(0x7f0000001540)='./file0\x00', 0xc010, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001580)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000015c0)={0x200, 0x80000000, 0x100, 0x9}) sysfs$2(0x2, 0x4, &(0x7f0000001600)=""/228) mount$bpf(0x0, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='bpf\x00', 0x400, &(0x7f0000001780)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x7fff}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xfa03}}, {@mode={'mode', 0x3d, 0x3}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, '/dev/vcsa#\x00'}}, {@obj_type={'obj_type'}}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001880)={'filter\x00', 0xa1, "05aed76c60f83a1cfb424fcd132111732166ff81380779dbb48e0b54dd6784b5f78e9891f3caf46c5354321d8e48ff075cc9dbdc03176a3aab10fcd41c2a6c39d4a131c5cac7eeb1d0e48d5406419a56c729a58df9f9c36978e909ea6245f72b8058a3c05c569a624b2fbf1c94caf7e3894aeaf07d720a660db3a73da68e140a6794a3ce58d5b6b92afd03766864e118ad65c6d39914aa002873a3fbb4ad609ed7"}, &(0x7f0000001980)=0xc5) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000019c0)={0x0, 0x9b, "e7870e19b7f638c9d75f142bfffb957baf7f94e077640f0b09edbecdda5c4a8af1cb9ca504e89570dfc81aa6ead75f6bef6c707652b4892ea8d7be755f0b574725c021e568eb7c3afabfdfa2d87aab90aa297b9c22fb98e630c95e44f6eaff7a1c4c48fccaeba007bc960827924de0f9815b7697ffbac0d11236fe2cfb63bbc0f8b46622ccf73a4f956a7f75e4d9e0b94a12921bf20764f2654155"}, &(0x7f0000001a80)=0xa3) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001ac0)=@assoc_value={r1, 0x7}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x50, r2, 0x9, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000001c80)={{0x1000, 0x2}, {0x0, 0xee2f}, 0x3, 0x3, 0x100}) r4 = syz_open_pts(r0, 0x42) ioctl$TIOCSTI(r4, 0x5412, 0x80000001) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000001d80)={0x16, 0x98, 0xfa00, {&(0x7f0000001d40)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e24, 0x5, @loopback, 0xfffffffffffffff8}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000001e40)={0x11, 0x10, 0xfa00, {&(0x7f0000001d00), r5}}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001e80)={r1, 0x4}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0)='IPVS\x00') r6 = open(&(0x7f0000001f00)='./file0\x00', 0x12000, 0x2) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x3) [ 213.408507] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.466648] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.481953] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.489284] device bridge_slave_0 entered promiscuous mode [ 213.533789] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 213.540623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.594549] IPVS: ftp: loaded support on port[0] = 21 [ 213.616966] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.633458] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.645259] device bridge_slave_1 entered promiscuous mode [ 213.659653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 213.688651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.754651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 213.865550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.987234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.018321] team0: Port device team_slave_0 added [ 214.034439] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.040805] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.058041] device bridge_slave_0 entered promiscuous mode [ 214.105293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.133579] team0: Port device team_slave_1 added [ 214.141760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.206395] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.212810] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.223692] device bridge_slave_1 entered promiscuous mode [ 214.240470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.295281] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.320067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.338027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 214.360512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.373765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.409775] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.417076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.468888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.486656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.500270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.509702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.530391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 214.547107] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.558577] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.574583] device bridge_slave_0 entered promiscuous mode [ 214.581641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.639713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.662012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.676656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.695695] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.702061] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.709983] device bridge_slave_1 entered promiscuous mode [ 214.810735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.838311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.897435] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.914407] team0: Port device team_slave_0 added [ 214.920901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.935231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.986215] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.000966] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.014040] device bridge_slave_0 entered promiscuous mode [ 215.027523] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.040133] team0: Port device team_slave_1 added [ 215.095972] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.102788] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.120375] device bridge_slave_1 entered promiscuous mode [ 215.209012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.246250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.261182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.302802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.325770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.341760] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.403538] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.421785] team0: Port device team_slave_0 added [ 215.447244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.461181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.476205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.494660] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.501043] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.515114] device bridge_slave_0 entered promiscuous mode [ 215.522969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 215.532658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.540389] team0: Port device team_slave_1 added [ 215.557834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.588856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.597565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.630110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.641072] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.652072] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.659221] device bridge_slave_1 entered promiscuous mode [ 215.667458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.675223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 215.681146] ip (6427) used greatest stack depth: 16296 bytes left [ 215.696263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.724280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.732022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.754357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.777177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 215.795384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 215.802661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.822925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.854814] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.907361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 215.923021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.941060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.950098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.977305] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.983713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.990341] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.996726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.006676] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.019107] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.027083] team0: Port device team_slave_0 added [ 216.039460] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.068463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.086056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.128881] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.146763] team0: Port device team_slave_1 added [ 216.273638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.296114] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.333926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.366440] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.376277] team0: Port device team_slave_0 added [ 216.383067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.398710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.408697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.418144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.467241] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.485030] team0: Port device team_slave_1 added [ 216.491741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.511489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.529986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.539414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.547744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.562437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.590226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.606344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.624059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.631534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.655134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.663595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.671400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.686140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.698400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.733361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.823381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.830751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.843855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.886204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.913845] team0: Port device team_slave_0 added [ 216.931048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.943967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.962798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.984771] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.991145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.997804] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.004180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.036608] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.045163] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.053255] team0: Port device team_slave_1 added [ 217.156547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.203674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.221680] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.228066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.234726] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.241080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.248725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.282225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.303390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.333640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.351211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.362618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.378613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.413076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.423982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.876631] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.883003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.889663] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.896046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.921507] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.097192] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.103862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.110487] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.116882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.126224] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.357388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.375634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.538051] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.544466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.551102] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.557482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.565724] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.364278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.500894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.866206] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.067104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.113745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.217329] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.224452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.238213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.436029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.454333] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.556981] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.765346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.771502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.783899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.830411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 221.837862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.847893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.895767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.954355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.088391] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.231908] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.257078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.305898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.320052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.638861] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 222.669973] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.693561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.709803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.729479] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 222.761882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.775800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.998524] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 223.007950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.017565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.061587] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.086735] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.350895] 8021q: adding VLAN 0 to HW filter on device team0 01:16:48 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x2) 01:16:48 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x804e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000240), 0x2fb) 01:16:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x4) r3 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000004c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000380)=""/253) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) r5 = socket(0x40000000002, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r5, r3) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) 01:16:48 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) io_setup(0x401, &(0x7f0000000040)=0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200000, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xff, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x3, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f0000000100)="20cb75da71d5e1dff169776fa32a7c836a503dd19d658752702d5994ade01015e9da038e41be9596b0a0e046cbcb4649ed5d4505f7e58e546e", 0x39, 0x4, 0x0, 0x2, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f00000003c0)="9693f155ff9ad6852578d9a939740efd60af56783ea9351bfd8a06a13ee729a6f6e587f575e33b8c054b39502bd4e0dc3b84b530dfe0ba839373f25cfa386cba9e82e9a7cda937baa985aa415cd2aeb79c3d81f40daacd52cbfb49c60920f8358300e0b5e197b6881c882bfb40b86ba839ddefc57e9a411c51f2d4a4c898234f562d2a4d2f40491f516cdd9baf41e10c97db8b3eecf185f4c7923c71b764793a5d2e5e677e7e530d9661e1ef8d18200361bcc78c0bbb03d9ec2363387b8b97a16a98432bd0deda07ebd29a051e1506c393134a9d876115", 0xd7, 0x8, 0x0, 0x0, r5}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f0000000500)="90910f96f0d55f5db5216e407487fb5c88d2ccdac347306ccb3cb264c4ef1e0f78b1182148c7d6c57d421ce31174", 0x2e, 0xa63e, 0x0, 0x3, r6}]) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @ib={0x1b, 0x0, 0x5, {"51579817596458e7fe935302d622fbc7"}, 0x7, 0x80000000}}}, 0x90) [ 224.711974] hrtimer: interrupt took 29433 ns 01:16:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x4) r3 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000004c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000380)=""/253) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) r5 = socket(0x40000000002, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r5, r3) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) 01:16:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380), 0x0) r2 = memfd_create(&(0x7f0000000200)='\x00', 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x4) r3 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000004c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000380)=""/253) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) r5 = socket(0x40000000002, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) dup2(r5, r3) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000480)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) 01:16:49 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0xc, &(0x7f0000ffc000/0x1000)=nil) 01:16:49 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) r1 = socket$inet6(0xa, 0x800080000, 0xffdffffffffffffd) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4000000000004e23}, 0x1c) listen(r1, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) write(r1, &(0x7f0000000080)="9e0833f047772fcd049fc3e97feeac2ec37406ab6d1cd6f8f0fadd4a99331e8038e0068e15a94f4b7178acd9668f3d177cd840babbf23cd7a3c7880273320b69cf68afa015f11196b5e1415a9986606145d12fb8a0a3a8bf4b6ae13c941fc5160b6c0565b22cd93779291b1e88be41346b41b549d353db91c9b877", 0x4e) sendmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c80), 0x0, &(0x7f0000001e40)}, 0x0) 01:16:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) 01:16:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_execute_func(&(0x7f0000000140)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") r1 = fcntl$getown(r0, 0x9) setpriority(0x0, r1, 0x90000000000000) 01:16:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x329, &(0x7f0000000100)={&(0x7f0000000280)=@delrng={0x10}, 0x10}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000200)) sendmmsg(r3, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x4, 0x2}], 0xe1, 0x0, &(0x7f00000002c0)="b821baeca1c38a1c15d99164a17f08c638cf633ba40245f064f2da1eeb2ce224b2f3877ff12c95b57b9bbf8a8ba9d141a7044b957cef22b531dcce83eef0738c1454ff8e40fbd1dcf11d77d1c1bf83fa2b5fc35a8355a396c626ab0414410b7197c559310066bed85172743337862685450a531b49403c72f1e5818f572fea36cef37fe48d9acc790dc96608325510cecc6948af4b456e6eb7273ff0d4c977f5ee5961c90b03a077cf2478f5059dcfff18f2c4b62cffca232ab42cd3ae6b51e456bfcc62452330cfebabe774324cb3df33761b6310523e2df06ee59d2b437a5eb8"}) 01:16:49 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f6405002f6c676f700000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) getsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet(r2, &(0x7f0000000180), 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000006c0)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r2, 0x1) 01:16:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000020000000000000000000000000000000000002d00000000000000000000680000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x25dfdbfe, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc8070031") r1 = accept4(r0, &(0x7f0000000140)=@rc, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x101, 0x3, 0x1, 0x1}, 0x10) 01:16:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xbc, 0x420000) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000780)=',#[eth1\x00', 0x0) keyctl$link(0x8, r2, r2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x6}, {0xa, 0x4e22, 0x674, @mcast2, 0x3}, r4, 0xe3}}, 0x48) r5 = semget$private(0x0, 0x3, 0x200142) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000400)=""/131) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @rand_addr}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={&(0x7f0000000740), 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)=ANY=[]}, 0x1, 0x0, 0x0, 0x8040}, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendfile(r3, r6, &(0x7f0000d83ff8)=0x54, 0x87ff7) 01:16:49 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000180)='selinux{[--.(trusted\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB]) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@rand_addr, @in=@rand_addr}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) fstat(r0, &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) [ 225.461094] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:16:49 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x20082) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x800000000000802, 0x0) write(r2, &(0x7f0000000200)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800030001000000", 0x24) [ 225.532008] Dev loop1: unable to read RDB block 1 [ 225.576740] loop1: unable to read partition table 01:16:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00001c2c766856c3d5b9fd45b091f531ab2a449713744c435db3f477f731f0ebe12b8784f96b020adffb500b2e429f68c508fd84e91f61b598d436a6ae7f2d68c975b8d0cdee38f646c76b1fccd3e4d60000000000000000ecc2281e5274fc8a8f2d21cdaa638d12ffe83ab7115c41202538f567deb75bc7702b7650f3f154c74cd016881a4971a8c5b4f202cbb1e29ad1e2533da006aeada827829a5749c7e215a6df5a3147d5449697670e78ae42b380df7d6daf1a48bcc04b752f726a0bf7c96e624276d77e30e238307041207969abd6bafe816575277aecfd0dc31db2d9073d317ee126e289cdb6f2f3a7f7442db36a53d1d8148450b157ef0afd5c0c6ddd5571e3d345f29f8ddaa632f18fb044f29e00096f3dcbf02f35072152584d2a6df9de388c2af5bc29199ebc55a0c71c427309358c49306afbe233191ea17458d1a0ca64012c468c2016ddd04b33ef93b10932a184b33ab830f5653eb5d3f2aaf6d9337ddfb23abbb9da032c87b15bdfd900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) [ 225.619571] loop1: partition table beyond EOD, truncated 01:16:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) [ 225.692411] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 01:16:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) 01:16:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="0200eeffffff01000000ff07000000000000020000000000000000000000000000000000002d00000000000000000000680000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x25dfdbfe, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc8070031") r1 = accept4(r0, &(0x7f0000000140)=@rc, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x101, 0x3, 0x1, 0x1}, 0x10) 01:16:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xbc, 0x420000) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000780)=',#[eth1\x00', 0x0) keyctl$link(0x8, r2, r2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x6}, {0xa, 0x4e22, 0x674, @mcast2, 0x3}, r4, 0xe3}}, 0x48) r5 = semget$private(0x0, 0x3, 0x200142) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000400)=""/131) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @rand_addr}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={&(0x7f0000000740), 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)=ANY=[]}, 0x1, 0x0, 0x0, 0x8040}, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendfile(r3, r6, &(0x7f0000d83ff8)=0x54, 0x87ff7) 01:16:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xbc, 0x420000) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000780)=',#[eth1\x00', 0x0) keyctl$link(0x8, r2, r2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x6}, {0xa, 0x4e22, 0x674, @mcast2, 0x3}, r4, 0xe3}}, 0x48) r5 = semget$private(0x0, 0x3, 0x200142) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000400)=""/131) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @rand_addr}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={&(0x7f0000000740), 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)=ANY=[]}, 0x1, 0x0, 0x0, 0x8040}, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendfile(r3, r6, &(0x7f0000d83ff8)=0x54, 0x87ff7) 01:16:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) [ 226.228779] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:16:50 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xbc, 0x420000) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000780)=',#[eth1\x00', 0x0) keyctl$link(0x8, r2, r2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x6}, {0xa, 0x4e22, 0x674, @mcast2, 0x3}, r4, 0xe3}}, 0x48) r5 = semget$private(0x0, 0x3, 0x200142) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000400)=""/131) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @rand_addr}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={&(0x7f0000000740), 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)=ANY=[]}, 0x1, 0x0, 0x0, 0x8040}, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendfile(r3, r6, &(0x7f0000d83ff8)=0x54, 0x87ff7) [ 226.310493] Dev loop1: unable to read RDB block 1 01:16:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYBLOB="0000faff4b7cf1630852e8e3f778dff96752ff52f7497df4a0a0e619c31f40978e9941bf44f59261c042a6a84631becd045886d0d7e881d60081b8cb5ece324a394476fc6b25f0596a27da8ec6cff1727516e9cf9e0403cac43e77291dde6fb91abb201f740a"], &(0x7f00000002c0)=0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000580)='/dev/vcsa#\x00', 0x2f96, 0x200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r4 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x1ff, 0x80) ioctl$TCFLSH(r4, 0x540b, 0x3) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x278, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6]}, 0x75, r3}) r5 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x4, 0x400001) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x401, 0xfff, 0x8000, 0x4, 0x0, 0x8, 0x0, 0x8001}, 0x20) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000340)={0x4, @rand_addr=0x983, 0x4e24, 0x0, 'sh\x00', 0x21, 0xe44d, 0x4f}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x328, 0x120, 0x120, 0x120, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x17}, 0x80000001, 0xe, [0x0, 0x2f, 0x4, 0x3c, 0x24, 0x35, 0x14, 0x19, 0x37, 0x3b, 0x0, 0x1b, 0xb, 0x3e, 0x14, 0x30], 0x0, 0x1, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffff00, 'veth0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x2}, 0x0, 0x98, 0xd8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7dffed43ab594635b27194f0a1256211ccc42a853c478dab472827e8d77c"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendto$unix(r5, &(0x7f0000000440)="07280e4d773a3f2f1c50a037e6d31175dde1a9d0a33b1a67a819cc9e62c23854b8378b89c7b249116ec64f39ac7f556147be1731c7f5ad46e8140da23b30fc175d7024e3dc9aa8734d665f4b8d1b3ab96b4f39", 0x53, 0x4000, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x101d, r3}) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x4]}, @empty, @loopback, 0x3, 0x400000000000000, 0x0, 0x0, 0x100000000, 0x1c0270, r3}) r7 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0xb) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x2000, 0x4) r8 = semget(0x3, 0x0, 0x2e2) semtimedop(r8, &(0x7f00000001c0)=[{0x4, 0x80, 0x1000}, {0x3, 0x1, 0x800}, {0x7, 0x6, 0x1000}, {0x0, 0x80000000, 0x800}, {0x7, 0x100000001, 0x1000}, {0x1, 0xffffffffffffff00, 0x800}, {0x7, 0x845}, {0x6, 0x1, 0x1800}], 0x8, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') readv(r9, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000bc0)={0x101, {{0x2, 0x4e20}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcbf9671a5cf54ab025", 0x24) [ 226.420794] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 226.433878] loop1: unable to read partition table [ 226.454612] loop1: partition table beyond EOD, truncated [ 226.460507] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 01:16:50 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x2) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f912"], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000800)={{0x0, 0x0, 0x100000000, 0x2, 0x7ff}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f00000007c0)=0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x5421, 0x0) keyctl$setperm(0x5, 0x0, 0x12010100) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003b40)=[{0x10, 0x107, 0x5}], 0x10, 0x20040000}, 0x8001) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) sendto$unix(r3, &(0x7f0000000100)="9b0f3bc6445750cd60df6190fbc894ab56871030fc490859", 0x18, 0x4844, &(0x7f0000000700)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fchdir(r1) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x5, 0xfffffffffffff801}, {0x819, 0x2}], r4}, 0x18, 0x2) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:16:51 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mount$9p_xen(&(0x7f0000000180)='selinux{[--.(trusted\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB]) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@rand_addr, @in=@rand_addr}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) fstat(r0, &(0x7f0000000540)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) 01:16:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f856c5070b5592c1579e62da7fcc3") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000bc2000)="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", 0x2b1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1, &(0x7f0000dffeb8)}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) listen(r1, 0x7) r2 = accept4(r1, 0x0, &(0x7f0000622ffc), 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:16:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) io_setup(0x0, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000080000002, 0x80) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x80000001, 0x400, 0x1f, 0x100000000, 0x5, 0x9, 0x3, 0x800, 0x8, 0xfffffffffffffffc, 0x2, 0x9, 0x6, 0x3, 0x3], 0x2001, 0x20000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000100), &(0x7f00000001c0)=""/168}, 0x18) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x7, {0x2, 0x4e21, @rand_addr=0xffff}, {0x2, 0x4e21, @rand_addr=0xd31}, {0x2, 0x4e20, @multicast1}, 0x108, 0x5, 0x1e2c, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)='gretap0\x00', 0x10001, 0x8, 0x5}) 01:16:51 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x1) fcntl$setstatus(r0, 0x4, 0x6100) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x7, 0x4) ftruncate(r0, 0x48207) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0xff}) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 01:16:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xbc, 0x420000) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000780)=',#[eth1\x00', 0x0) keyctl$link(0x8, r2, r2) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000500)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r3 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @loopback, 0x6}, {0xa, 0x4e22, 0x674, @mcast2, 0x3}, r4, 0xe3}}, 0x48) r5 = semget$private(0x0, 0x3, 0x200142) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000400)=""/131) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @rand_addr}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={&(0x7f0000000740), 0xc, &(0x7f00000013c0)={&(0x7f0000000e00)=ANY=[]}, 0x1, 0x0, 0x0, 0x8040}, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) sendfile(r3, r6, &(0x7f0000d83ff8)=0x54, 0x87ff7) 01:16:51 executing program 3: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x2) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f912"], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000800)={{0x0, 0x0, 0x100000000, 0x2, 0x7ff}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f00000007c0)=0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x5421, 0x0) keyctl$setperm(0x5, 0x0, 0x12010100) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003b40)=[{0x10, 0x107, 0x5}], 0x10, 0x20040000}, 0x8001) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) sendto$unix(r3, &(0x7f0000000100)="9b0f3bc6445750cd60df6190fbc894ab56871030fc490859", 0x18, 0x4844, &(0x7f0000000700)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fchdir(r1) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x5, 0xfffffffffffff801}, {0x819, 0x2}], r4}, 0x18, 0x2) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 227.125565] attempt to access beyond end of device [ 227.130556] loop3: rw=1, want=114, limit=112 [ 227.135465] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 227.143567] attempt to access beyond end of device [ 227.148561] loop3: rw=1, want=115, limit=112 [ 227.176439] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 227.183299] kauditd_printk_skb: 3 callbacks suppressed [ 227.183313] audit: type=1804 audit(1539220611.121:31): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir863946105/syzkaller.KnPh7r/5/bus" dev="sda1" ino=16527 res=1 [ 227.188067] attempt to access beyond end of device [ 227.249134] audit: type=1804 audit(1539220611.191:32): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir863946105/syzkaller.KnPh7r/5/bus" dev="sda1" ino=16527 res=1 01:16:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) io_setup(0x0, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000080000002, 0x80) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x80000001, 0x400, 0x1f, 0x100000000, 0x5, 0x9, 0x3, 0x800, 0x8, 0xfffffffffffffffc, 0x2, 0x9, 0x6, 0x3, 0x3], 0x2001, 0x20000}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000100), &(0x7f00000001c0)=""/168}, 0x18) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x7, {0x2, 0x4e21, @rand_addr=0xffff}, {0x2, 0x4e21, @rand_addr=0xd31}, {0x2, 0x4e20, @multicast1}, 0x108, 0x5, 0x1e2c, 0x5, 0xffffffffffffffff, &(0x7f00000000c0)='gretap0\x00', 0x10001, 0x8, 0x5}) 01:16:51 executing program 5: r0 = memfd_create(&(0x7f0000000040)='iocharset', 0x2) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002600200300000000dbdf25000000f60059345619ea0532781becbc9320020015cccc08620c0b937a620096ffc5b6c0e8f4dbba03796b8d37df208586545d81c08baf4a23f912"], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f00000003c0)=@xdp={0x2c, 0x0, 0x0, 0x3d}, 0x80) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000800)={{0x0, 0x0, 0x100000000, 0x2, 0x7ff}, 0x2, 0xffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200), &(0x7f00000007c0)=0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x5421, 0x0) keyctl$setperm(0x5, 0x0, 0x12010100) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003b40)=[{0x10, 0x107, 0x5}], 0x10, 0x20040000}, 0x8001) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) sendto$unix(r3, &(0x7f0000000100)="9b0f3bc6445750cd60df6190fbc894ab56871030fc490859", 0x18, 0x4844, &(0x7f0000000700)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) fchdir(r1) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x5, 0xfffffffffffff801}, {0x819, 0x2}], r4}, 0x18, 0x2) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 227.343324] loop3: rw=1, want=116, limit=112 [ 227.356961] audit: type=1804 audit(1539220611.231:33): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir863946105/syzkaller.KnPh7r/5/bus" dev="sda1" ino=16527 res=1 [ 227.360964] Buffer I/O error on dev loop3, logical block 115, lost async page write 01:16:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ftruncate(r0, 0x81) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000540)={[{@data_ordered='data=ordered'}]}) [ 227.484171] attempt to access beyond end of device [ 227.504112] loop3: rw=1, want=117, limit=112 01:16:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='.\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="400000000200000019000000dc0100002c000000010000000400000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c84"]) [ 227.524830] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 227.581097] attempt to access beyond end of device [ 227.648182] gfs2: not a GFS2 filesystem [ 227.663762] loop3: rw=1, want=130, limit=112 [ 227.696162] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 227.744737] EXT4-fs (loop0): Unrecognized mount option "„" or missing value [ 227.773547] attempt to access beyond end of device 01:16:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2500, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000740)=""/242) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="1414bb01000000030000000002f2ddffffffffac14141219da7316d4e2a4977f2212946b8b55da7a1e46182a93b5564c39724e1b90a5000000000000000000000000"], 0x1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x800, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x1, r3, 0x0, 0xffffffffffffff9c}, 0x10) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x3, 0x3}) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000a80)={@ll={0x11, 0x3, r3, 0x1, 0x6, 0x6, @random="3c6477545915"}, {&(0x7f0000000c00)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000005c0)={0x0, 0x7ff}) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6370752f2f797a31f6", 0x1ff) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/loop-control\x00', 0x400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000840)) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x8002, 0x0) recvfrom$llc(r7, &(0x7f0000000940)=""/198, 0xc6, 0x2, &(0x7f0000000400)={0x1a, 0x11b, 0x8001, 0x9, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a45323, &(0x7f0000000480)={{0x80000000000003, 0x9}, 'port1\x00', 0x20, 0x100000, 0x1, 0x5, 0x1c1, 0x0, 0x0, 0x0, 0x3, 0x6}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) [ 227.810411] loop3: rw=1, want=131, limit=112 [ 227.872813] EXT4-fs (loop0): Unrecognized mount option "„" or missing value [ 227.881651] Buffer I/O error on dev loop3, logical block 130, lost async page write 01:16:51 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0xb, 0x9, 0x300, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x4}, [@generic="3043bfdd91b03e1c43884706339d78de7624178b083584c7c8b1390758fcd600a1e9e5b196841ad22d0dc64fd6c82baf3f709a154ee8a8d48aa954c89c7b189622b62c952121657b8527a7b9f3f9706c09f7b21de38c2ea6b02e5d8417279fb63c30b2a100f8c594cc1af9413a0d6ec2bc80985c1908525e2f8166e6189c2f75609ab399023ca61c813bd3ef743ccb58aabf0e04bfc92d160626", @typed={0x8, 0x1c, @pid=r1}, @typed={0xc, 0x8e, @str='ppp0$\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) [ 227.942361] attempt to access beyond end of device [ 228.021622] loop3: rw=1, want=132, limit=112 [ 228.062093] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 228.134209] attempt to access beyond end of device [ 228.170497] loop3: rw=1, want=133, limit=112 [ 228.197492] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 228.215716] attempt to access beyond end of device [ 228.220677] loop3: rw=1, want=2174, limit=112 01:16:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000000300)={0x0, 0x0, 0xffe3, 0x0, @buffer={0x600, 0x96, &(0x7f0000000180)=""/150}, &(0x7f0000000000), &(0x7f0000000340)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r0, 0x0, 0x9, &(0x7f00000002c0)='selinux-\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x2, 0x7fff, 0xffffffffffffff01, 0x7f, 0x0, 0x7, 0x100, 0xc, 0x400, 0x1000, 0x7, 0x101, 0x9, 0x9, 0x9, 0x4, 0x7ff, 0x3, 0x3, 0x2, 0x0, 0x6, 0x3, 0x6, 0x1, 0x7f, 0x4, 0xfffffffffffff895, 0x3, 0x8, 0x1, 0x1ff, 0x7, 0x2, 0x0, 0xb5b3, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x2}, 0x1000, 0x733f, 0x1, 0x7, 0x7fffffff, 0x3f, 0x688}, r2, 0x10, r0, 0x2) fcntl$setstatus(r1, 0x4, 0x800) syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x678, 0x101000) 01:16:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") sendfile(r0, r1, &(0x7f0000000000)=0x800000000000, 0x4000000000000dd) 01:16:52 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@xdp, &(0x7f00000000c0)=0x80) sendmsg$alg(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="9c7893668c09621659fc8720aaa054ac81950822dd2b6f8d9b8988d04f285e76b3c53d53399f9af1f79307882ac8ceadf28ca08bc9feb975e17f03da2fb00347a9bbb49fff61c81d62e1241f9a01d0fb23df271c83a2b4a8daf01c841ae399fca257ac4ac98ce424da42096f3f259ecac1ff4be52cca4180363c6473e7c83f5957a010dbf9e6953628180b16372f3e38fda374d530a10f59a585d2955bdca213ebeb23c1a4a1e1f34e3e10b92fa5f6ca74518b13094da2d515c1908d779e25f79e58b284a5175dbd08bcb1023485445d613f283e1a1864c44425", 0xda}, {&(0x7f0000000400)="0a30ed7c4e9d53ce4d323c7519d88789192455e8acdd16f1f4897094af59600e6197509bc4773f6a166fd996a2eb180cdeb5cf7b1ebdee0e4c4744b25aec845f4969a290b48d1c99845f2188a21c95afc38c7c14d4", 0x55}, {&(0x7f0000000480)="f2ff062c94bc8d45ee97315c06d02716b7373619037c0c5b3606016a1b2ef21c897258023f2291ce613a4214a9b6b2030303fa59135cedd07fa46575589217c3f13da636a738958cc4b3d51aca9a7b29eba8d3307458a7fb2ece72f6cf7f86ff10729e6baddfd4c770379735d3a316bf1553a6ddbf57ffa3212c79dc179b63323fb730dcf6139a62846e92458de7aec935e2c3", 0x93}, {&(0x7f0000000540)="15b51f5819f10fc5bb7c5835404a37626231910a5c8501f5646ecdb964bc09b964024f4c6bfbeb115ad366a94b45c7780708ef003df217213eb1a58d8b", 0x3d}, {&(0x7f0000000580)="db9ce2510b8c661c22fe781a2ea3c3b9f13f7816a64c78c9071886de2b4ded63dc555224a7535363bd7904969b0df4c2df31930e5fbe3136d160f00eb19c74f06f1aef52c93900789d2919d94042c481d422ef11a27afe82bbfc7e9fcb558a60cc31220dbbd71ccc94dd73919f83e1e4ac152ff5572bb3acccb75de335393e2f635d5b71a662ba55647ae3618952334f8857ff75772daa6f7ee8c82dd48090cc7ad5986b5a775df027b973be2d96fa4371e33c1eced0886164ef16649172e56553bf014e3091917314780b", 0xcb}, {&(0x7f0000000680)="5bed24ddf478afb901eabea2128e5e59564d9a916fca08fff9d725067e265eea8e9f1540a56338561eadb5fcb55af7895580a7adfeb9758e7e2b2b8b537aa34c3dc8427ac1daf0643eeac2395b3523ea54c6ee7783d678e574b6e41f7c4a2251e5d5b9e78540a1f5f1a6320bab400bb5e57c4cf955e8f70b9b4827c5e961a261f5d4ffd1b23fee8eb13fe2b398f36fe32ddc8eb2d7bf8cc038ec900743c35126410fbf159ac49d6f653865183c9519419f779370a1ab092cf4dc3fbeb6630fc9f6cc7551f48ccead32e26b1bb21a7b8cce40aabf5e00e0935c9d8c075a203014a2219bdb0fdb80042d0ff32bbd6d1741f3e714f187a1942763a024562dbc9b", 0xff}, {&(0x7f0000000780)="f21773d769fa2b0d9c0020dee78e5802e953ac666e7f3888eace14b0f90c392a150ac90700dba210963b5a25041e428e42376c1e3f4ff282dff5b3e636ee9defe32b1b90ff02762cf4616e17711d8a527d61d2dacb002afa671a6f9c805a4db7f78082df5b79dbd925b1d9e1072c0a49d80934f13b8c074b7a99b5", 0x7b}, {&(0x7f0000000800)="2ded843cf992db0e2ddafacc53740edd2cd170e222becc54aad33e5acec797329d1f1b06c97d0b058a3f0417e56f103f8a1e6412394118f0d323b169aed8a30e047fa8277f016a3b62c53d30cc68ff84ba65e765a4bec6cf26d00c85f4f35c3f0ea3629ad0007bde1617990aa72675bb746e52bde9cbb29cd0c2ec67bd5cf0f926a0fd44e6decd47d42f58823962f6d9690dd84d891a3a245090878061aa311bdde05ae8c9249419efb770b2fce9308ad9b3ffad76247e5dcbcac909fa87bbff62b4717f553beec8b15672f55945581c54f0af", 0xd3}, {&(0x7f0000000900)="2290758aa500178717cc0baf3072d98194ccebe89d79a8cef5d6a7e748674a8ade555101dfa3d838cb96cb208a7d6c6c485a39bc4830f4ad80db54d49a83f56e21593959654e47f6c14ba66f", 0x4c}], 0x9, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4800}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257009bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000000000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0e64d082778c3938", &(0x7f0000000380)=""/85, 0x700}, 0x28) 01:16:52 executing program 1: mkdir(&(0x7f0000000080)='./file0/control/file1\x00', 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="213049aeee8992b8f58853b731ffaaabc1af6ab179c602f6f0a59dd3dcecd30000"], &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000024ff0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000155ff2)='./file0/file0\x00', 0x0) symlink(&(0x7f0000c0e000)='./file0/file0\x00', &(0x7f0000640000)='./file0/control/file0\x00') rename(&(0x7f000001cff2)='./file0/file0\x00', &(0x7f000001c000)='./file0/control\x00') [ 228.404033] [ 228.416116] ********************************************************** 01:16:52 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) dup2(r0, r0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x1c7d53ad93c5b4b, 0x4, 0x1}, 0x7}}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x100000083) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x40, 0x5, 0x8, 0x2}]}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x20, 0x17, {0x42, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) [ 228.459401] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 228.511637] ** ** [ 228.536758] ** trace_printk() being used. Allocating extra memory. ** [ 228.548327] ** ** [ 228.557377] attempt to access beyond end of device [ 228.562369] loop5: rw=1, want=130, limit=112 [ 228.570885] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 228.582783] ** This means that this is a DEBUG kernel and it is ** [ 228.591223] attempt to access beyond end of device [ 228.596593] ** unsafe for production use. ** [ 228.614630] loop5: rw=1, want=131, limit=112 [ 228.619875] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 228.628300] ** ** [ 228.635534] attempt to access beyond end of device [ 228.640591] ** If you see this message and you are not debugging ** [ 228.648409] loop5: rw=1, want=132, limit=112 [ 228.654278] ** the kernel, report this immediately to your vendor! ** [ 228.661141] attempt to access beyond end of device [ 228.666513] loop5: rw=1, want=133, limit=112 [ 228.671188] ** ** [ 228.678633] attempt to access beyond end of device [ 228.684036] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 228.690893] loop5: rw=1, want=142, limit=112 [ 228.695778] attempt to access beyond end of device [ 228.701603] ********************************************************** [ 228.709817] loop5: rw=1, want=143, limit=112 [ 228.721143] attempt to access beyond end of device [ 228.740210] loop5: rw=1, want=144, limit=112 [ 228.759605] attempt to access beyond end of device [ 228.779359] loop5: rw=1, want=145, limit=112 [ 228.805699] attempt to access beyond end of device [ 228.827984] loop5: rw=1, want=2041, limit=112 01:16:53 executing program 3: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @remote}, 0x1c) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xb49, 0x400000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'eql\x00', 0x3}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x1f, @loopback, 0xfffffffffffffffd}, 0xffffffbc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 01:16:53 executing program 4: r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bridge0\x00', 0x10) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x800) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/114) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r4 = pkey_alloc(0x0, 0x2) pkey_free(r4) setuid(r3) 01:16:53 executing program 5: r0 = epoll_create1(0x80000) signalfd(r0, &(0x7f0000000140)={0x2}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x688100, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x9, 0x4) fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='/dev/rtc0\x00', 0xa, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000180)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r3, 0x0) mlockall(0x7) 01:16:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8080) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/50) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0xf000000}) 01:16:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = fanotify_init(0x4, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x100) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) fanotify_mark(r1, 0x12, 0x803001e, r0, &(0x7f0000000040)="2e2f66692e65318c00") ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x100) 01:16:53 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="66b85f008ee0660fc62b5f67d9f8f3af0f30c4e27d908cd43437063fd93c11f30f38f61d79450000b850a400000f23d00f21f835100000040f23f866bad004ec", 0x40}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x81}) perf_event_open(&(0x7f000001d000)={0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x57560afa, 0x7f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents(r0, &(0x7f0000000040)=""/36, 0x24) prctl$setfpexc(0xc, 0x2) mq_unlink(&(0x7f00000000c0)='v\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x70090000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) accept(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x80) connect$can_bcm(r0, &(0x7f0000000300), 0x10) [ 229.184110] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! [ 229.186057] sched: DL replenish lagged too much [ 229.196048] attempt to access beyond end of device [ 229.200994] loop3: rw=1, want=114, limit=112 [ 229.206723] attempt to access beyond end of device [ 229.211750] loop3: rw=1, want=115, limit=112 [ 229.219761] attempt to access beyond end of device [ 229.232758] loop3: rw=1, want=116, limit=112 [ 229.244558] attempt to access beyond end of device [ 229.257094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.267157] loop3: rw=1, want=117, limit=112 [ 229.276191] attempt to access beyond end of device [ 229.299956] loop3: rw=1, want=130, limit=112 [ 229.309034] attempt to access beyond end of device [ 229.314303] loop3: rw=1, want=131, limit=112 [ 229.321230] attempt to access beyond end of device [ 229.327052] loop3: rw=1, want=132, limit=112 [ 229.331688] attempt to access beyond end of device [ 229.338507] loop3: rw=1, want=133, limit=112 [ 229.345960] attempt to access beyond end of device [ 229.351091] loop3: rw=1, want=2174, limit=112 01:16:53 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) dup3(r1, r2, 0x0) 01:16:53 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x25}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)) read(r0, &(0x7f0000000400)=""/100, 0x64) r2 = socket$inet6(0xa, 0x0, 0x0) pwritev(r2, &(0x7f0000001480)=[{&(0x7f0000000180)="484f124f536f41d59141add36d552fb41d9585fc350baa4359ea8bbc900f82fc0a53d0696963b94a6838aadd23960c51b69052ae1d65753b10c60dc8599e679b22c000f8da33546b7cd452436a4ec0a9b4725d52d3195111c6ccdac8fb61d6f794292bd8d8e212cd651a1b3a5e6a6cd316008cb1a13502f356cdeaecc1b08b609f4c21e36255b86dc7", 0x89}, {&(0x7f0000000240)="15e4492dc0390875dd4bf4618c13f6c4944c1610078653432c7eca6ee7bd7d2aafd1d6169994c367d98bc39ba0548fac4622e59309dcacb5ae274018474f3b14a5b9d988e08834354fa3b528a5fe28fdacf7d3672a1c6700da43114c7c0d8a18408b78c955f1ee105447d7e53f85268c71304cfd175aafe1c5e2ebe6d1e7bbe7172c74d0b22c6bee5add8f82d1282d2787e707d47c00e57036ea64b658d3d0b9638cd2bf70eac09e8412a053331eee72b495c16d241994f8e3073f343616449b952749", 0xc3}, {&(0x7f0000000340)="3c17edec4e75147739cbae357a6fbae795396c8563a5adacfd8c95d6fdea5376973208507e70b4fb0d457b736e9860d6fee2ae2b2da7b85850c3d61bb6684e2483760286f2975b10e8def6eb678a07b14af691dfefe3f1a16fc4c30c71ebeccbbd2f8b04a3f2fab68b08e3cfd211c15ca960745e594a55d9d836e5bede3a47f7c05a74b49cb36e131ba16932d92c77194017bed64c4c32269de2b2d3971d17932b5f24a502cee82558043956a354", 0xae}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000000)="4193f73c6782573a0838dd544877c2643a28203ed901987dce7f019d0f31794e5e9c3a", 0x23}, {&(0x7f00000000c0)="49ed308bf622c2b4521379abd97964a867f2ee72859cb69ddf29c32c3d26ea1f55f56406f2491358f19f2c8828ac8b94d449c95a", 0x34}], 0x6, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1000}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001f40)={0x0, 0x1000, "24b192db7f7cbb86cf0d5963e37a41a405f354589f94b620c70451faee226cc734ff5b365b5dd20edfbd28181dc7f6c42c0d3d66073066e9d9c3e105dbcba47ef3c5710c7567a7a083f8552c4a44c10f2645dc7d35cd806838395c5099dcd395408100111d2ad956e8c42134ac93d8392b70d2ec03614f9b1e1cbde7650cd3266547d5a2819eb22b531d4e56997125d8dfba9ee9b35a5136c025abfdcb740a70bea1933e96bfbaf26bc003728ef8b6ea8da151b97e54cd69264b5563848f9a7e7fccf95dcad65beb514872a762ce2d9746ef0bf3dc65431c681e06a168b4053271f47bc52dd623c48c2a7914bfe0f8f8f9c2c72b222895419029a0d0e35d2202c9357287593cf53587fb96fd6634df76b3f7c19f03beb682acc110f8c5985a9f1505af7e70176265cc6c534da9923bb527238ef9c9d1fa007608cc709673afb45669f6fc2045c080148ee1c0f24eb749bf4ff8c1900b5ef59586574c56034399013139952638f48b530e011869de07b38710cbded6760f32286a60a8771be4a5e168c47b720737359b973d01f487f905cb5fcc4f0f3d744180464fc4df8ee9e4035fd475e2fdc03d17db793fe0e7bccd2b879ce89edfac750e7486d3f98dd0b0e7f7c2696fb9de991f4d20df618a86706e25b42a1004fa9d7e4885d92aba0935cf2344536b9eca7e45895de0a30131d4b173918af7a7248161c7c5284909ce2983efe589e0753b0eed69a205794b5011754fd229243965b962c422801cbb2a447ca640d4f7f45ee20ad56d9c8d9ae124f9f0d36e1fdcc90b88d3b7129db7a60cac37c5ac89ae29012d57b6c3f274650bb3281d767698b62f8c8acb24e7c674dcfa512b773d4c922d02eee93bc698a8498d5589d92adc58bb90a509ef3bd6a63bb3e347263ba885eeef51837d706edf10b21fcfcbacd8f011f87d9c19cd9906edca3c6c42b7b6def83ad5739a08a09e1029e0dd0a426365f977742b131cb37dfd4e2b99ba137835943a30a93266d1c7fb20b9e3c5cabe54fdb5dc3586ec35b0ecb743c736c9c2304dbacd9e1e4b5092e8f06d0df7aebdd58aa3f1872855ad71f07645b12849b29a8f4164395321fff35bcbd4a863deadde615a42cc279413cacfdd6eac9c008024b602d46c854f4a527033889a1d3a3b11c6011177d65093cc531975b6004542a1553501e877f396af9fcf7463e8d41eefba2ace289a2115772e4126b076b26cce3e2b22873158c63c28d3bcf02e36f4cf3fef13e7aed32137be4f3dd4faf08c422528e3f2b282778ccd5f42dd10f735a8fcf7bcc219f11f223679a81cef116c5905a0da3e8f6784e2c53cc2fefc4d15ac737e9222ca9e4c3a9f416276044237efb907788d95f22367050e1a096f3123aa5eff9bd8204e4b76a964e53556cd02f4f094f3de2a0de53a7c4b8492d7743d04b0930a927dad35349648c5e3eff46efaed651d30670f117b9d77132d5008f628a904c83832e1f1afdb538d3e181dbd47feaf7a222eb11b8438f49299bca1fa1da3ff87ae973f587f229377dc05bc04b956505ef21ad782677dc6ab00ada869c4021cfb2a3180c1bf338eb4fd435d0f2ddc24cdd3a1e57126ed7d1450d4af182530024da3a4ed830bb9ce1391e82294d7da145daf7549b54631ae22acf3d7b998caf8e0f68f6a2883390424ee66be2137d654ad80b48e562bd65e961e9288c89be58f6bfe2655dc60dd1667393c49e043af6267cde9624696c8f5cb3ca0e19bf37f5e1067c86c985f1be855404518b7129ab08219498e2d5b28c834b1e12ebd14ec6e300cabc313d204b8b7c6498e52363e8507a49b1e4b455d7626cf25535a67716191304c1b8c0fcac911ce41c83e8b62d9aefa9f04a9edd095375308d771bafcdae5000e6462073c7bbcc8627ed147d7719da5f9e7d1417090a06e8ac3918f5d47d78747c84972dec278d44a6043f90667564e4b31741d8a083718dcf13c71871ff0f468b5af40035b2ab05055d3cf27046fd3f3ef40f33e416830cb23345bd9eb8c330008150860a76423f136790fcecce057ea2519c752ad680cc285aedb62a47c47a1c906856cfd0e0dd0fe5606c608179c57ed9204349907957030181f32c34a16a10a9904e505c9c52d2d23c01b6351c3e93ff865bf5dc666387bc1b30957729c0a68b164d5d1e524c24d87c2b4c6acc07430a6d80fc6b7b4145e3ac6b4d0a8d142e859ea87c0ed2a115c42136fe9ee27227082911de4d281ff64739d8afeb2cf48ea7a5352b5ca8d200bcb614ef0b90f0df49ede53c00e943ca08281dbe2031b522f1b688935739063f9bd7ff57a783e975943e6eaf1f0c8dc4188ecfdce9f89303de14f7118464f3599383a2101421fa6833ae83595f5e6524a7277ceaeb206124b6e6287b51e6eecd0dd8bab37dea70a827093ce0ba712cb5afa7b2cc9f612d7ace54c5607abac6ad2b28bff2f781e2d12eff303814de3bce924870914acbc8adaf84bd3482aefb80408f2338f72bf5f5751cbb208b1bd9ce7c5eeb8fb5ae02d12c3316ae34b2c255ab39707b7d8272b619388c26cf077ad8ae96d521fc4d215509184ef7600f3fef4a1ea281b9e9133897f21e052fc8d0bad4fc2728050b793bad09e7a72251899b7760d4d0d17fb5e7646a31c8666abbcdd1fb7d07ffc65d321c6a3970b8658228fd6c107e2869f3a9e7579dfaf0598e4bd612fe086aac55a24680daffbbf31911bccebc6acc83e8dd92bb1e5a86b4f26a754351506015184088a7663f25e576423924ae86c54aceee48cdff22724a8317e5f3ad383bf256f54f44e5647dff2720f5400e3831841444cca70558d20879da7433aabf024e0d4dd53f34f2d319e3890b84b8b78e79fabcacd368d3c78f613ed5fe1debfc372c7755fb172172ba3f315f693ba9953440646d916ded2f00eb2d335153c84fe7af031e70085d179c1760391b07669bc1bc0a755c51df70c70241613d4ad72323f9ccd8d6427a9172abb2f6d6b25c3433af68b208ffb41d95d935a6a8064c0a921640fda1c7501aa29f9449fd37d7c4070957afad66a4ebf9bb75d558a92afb4c9879488fc39ccda17f526d1d018cfaecc35ddb685f2827cbf9605b857e9797b1129082c7d67af358b5af108a325cf150f4522e6de3672869af8e7a56d2cec88a7db094c161565b888a2effe54b44bc2567eb33ade404610bc33fafc51ce830c487f259c3b889bdd5521d5e2653bed10ca640ec58988441384e8ab0786fa3d7ffaeb1a2d54ecabaa65c7f0780b19bc67cef538082ebd1a29f7fded91235db1ac2bf1ec93301e8a7e5be0655e3544b4a32b8de024ea81d2b536aa9a8a9ac4222646f5b8f3280d48e7c5752c09476420329197ed99406dd966b411801d26677fa4704cbabd8a73466efeb747f172373de8d583f7979d88657857b4e3b1f2f3424f55c126fee94c6b41be8f59477ea63040e85206b6684e365ae5c445e9435069864187067b31f8179a16760d1206650075d9876fac4804ce5bf1697aa9d8232234e9300cc57de9bdcaa92acea8ad50b38bc24550822bc61afe9c46031ededb5e101c7ae6c1eada0078a1d800e5c3fd97c29a22aad781e3f4eb04fc750af86b3d3e94d3ee85287ce69c78a77bf5f0f34fe96ddf78f91f7c1154dce4262a4b8ed8e1d622e9865e759d0d9c0652ee75a675f3f077bb5de8be3e111c03249f0a2569957709e1d37318b371eec762e51613acc2d211c3ee8065863efab3d40de7072793fa06f69f0c57987c5aca0814d8c0bbc4abb626d09b5d635520d2ed5c2ef636b7d9066af81d6e0226ee5b4593285bb05e0ffd16ec1be159db65d5a22df5f1d870ddb6e06bdd126561151532b10e0793a47dcda7967672d1742e70e18e77c70f22d9e8628b2149aff75436094e27556393c9632be22fcca958820680593a5c057c1256ce4cbcf8a031f4c317d336ae892b46f9316cb36d57bf0fa69057cf3c79a8eba24f273e30197f46f6051830c7814d84b7bacdbb9b0281945f4ce922dc7bf7c5772b8e0f853499f6cce27bdf97502f608a5dc8c7a5855a409603a3bcf8b2be721614f7e5849b9333f1e589dbf73634f986ce6a5cb82c375999cee8e05493a7adec3e18db2c10ec06eb2be026a46ef588320f255c26818f7a485c2b728a6de6b6974a57ee25dcbf36853123a1e39a6144b92a5579f02439d089e6df584a82f754c8f03ff964c81f5192dee99115236a07ca4f20d8b7791a72963258198eac03f0378a3109bde0d02c756253c5b4afe4a5d080ff1486c207ac37e7fb4269a5b854f062142f9a0e67e7db4efe006b9dedcf190c379af35286f63aac5b24a034cbb24c746264ca076d361cb997bdd0b152305a4e972c0d8b0be9c09fde3b52fb6b7e907d38b67965abac6308f93ad5673d3d15fa57552984d0dffaeac1563da76caa474b47a3c71d2732417cc6a154ba4de11ded95dbd96fa090a8fcddf51936ca07e80bf7e64354a4dfd58fbedc303d008625e65e94ec81ecd02c16776eff86441872b96d9bfa331d96cc36d1d1e87d5e5e71f433152c37f8c25a253b480a78116a258d9e6d2d611200326ffdf2050c540817b771a480a3c3d2269fc6f1b9a91d70fe6a5b787133d3e47aaa0b19d45357ba1708268f6d1200a21ad2914afb6c88ea10c99e6e17adb162f1cb0f57f2c8b5b66bdc7ef68976733d8a0843f0d8db7aa3af84ea4a0054689b28ebbb62b744b29959e2ebd4363f36de17aa315eccf28a3b92e670e1db05e041f20ec6349fe6c5cea973ac0460d2e7b22cbd43563f527a940c62b750f65a7994f7ce216fe068ed65dbb3feb4fa862dcec2994b021bfca6ef30442cc6f559b59696c12da57666bb82c1b5c792e9c5e9042cbeb19b57270378b2b4f5e4c88678b8b3a8f50ebe2fe7ce753b8013215474b49970f3ca84a6f0747269dab7b1c06aeaa8e401327f3e72983990ea569965bbabcf1b4f5185acba41472f929db46ca9aefe06c66b5fae31508023c782f900ae1c41a61c9586bb09ef056ff64c6b2c4886d33d7374e45db0421465438e92507d3a49d1245ad9e91c7da7aad6e2bea8c8061b749a591442e245f3d05da1c31ac7fece8104490fbb35e9238beca8b4076cac416b70e60db0985bbb91faf7a4e2b11829ed5030d9573ab630bea34712c7bac3002bbdaef42d2293a143fcaba37d51b34052f2c1a4ac1b3ada3d18c9bc68bc4a885a561bb46d2d013ec77039520042763574fd80a1e1e44bfffa6c40f795714d0d26f98702956418720a091f68996572a374ff32b62bd92e1abdde48314986b6305f124885d1870d620845b427515113e786d91a694a465aa330772dab3e44903b8ef77f8e8633df27a5c47f1fa13cd6c47574c6f1a4c6a409eebfc1b617977a5313780413e5197be43884238363efa3ac0e867eedf6c8d6d0b3d270efa451b0a946c329672df23434184e5685817beea6e265530232b3e1b04f48ced597ff42a9d99ad99c66764df24a1a59bbb5a9867ed2b66c52969aa82459ff12a45545a2e4394443f98e0ea593aeb42cbe860444cc441b96896fd0d2188b8dfdff0b18799efbb5aa055645751dc5114f08f346d4f4b9b8220e3fa8bfe7aea94b3e33423585fca89c6666b08dbfacfecc13df489d0a507c38da7c2a707b295aff7ae22e5c40c4e4df9ba490b5e21972d9ce5e17494f7c622d442bc1b7528ece3a0edde7e7d5142b508124cc08106bc260f29442704fec294ea791fee5941d8a8d059759f07eba8433f5d8733cdf8a01e0162bcb31eb46ddfdab04598ce4bef036e4"}, &(0x7f0000001500)=0x1008) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001540)={r3, 0x1, 0x5, 0x400}, 0x10) 01:16:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980)='/dev/vcs\x00', 0x410000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000019c0)={'bridge0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x20280) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000018c0)={0x3, 0x81}) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000280)="3fb104b36313c7d041c2a732852bf959dcc8315200a7a3f9c2", 0x19) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001b40)={0x3, 0x3, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141, 0xf000}) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x2, 0xd, 0x80000000, 0x2, 0x218, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x90dd01cb2d86933, 0x14, 0x4}, @sadb_ident={0x2, 0x0, 0x2e, 0x0, 0x400}, @sadb_x_sec_ctx={0x6, 0x18, 0x7fffffff, 0x8, 0x23, "a765ad4607e0156b13212367f1abf8f146885fd51596ea6b2e1e0a85d6273edeaef95a"}, @sadb_ident={0x2, 0xa, 0xfffffffffffffeff, 0x0, 0x5}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x8}, @sadb_lifetime={0x4, 0x7, 0x6, 0x6, 0x3, 0x9}]}, 0x10c0}}, 0x804) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x240000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x51e242a7e48d0c05, 0xd1, &(0x7f0000000700)=""/209}]}) fsetxattr$security_evm(r0, &(0x7f0000001900)='security.evm\x00', &(0x7f0000001a00)=@v2={0x3, 0x3, 0x2, 0x3, 0xfc, "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"}, 0x106, 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000005c0)=0x400104000000) 01:16:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0xe99}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0x5}, 0x8) listen(r0, 0x101) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x81, 0x8, 0xff, 0x80000000, 0x74a, 0x10000, 0x0, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x0, 0x80, 0x3, 0x1, 0x400}}, &(0x7f0000000140)=0xb0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) connect(r0, &(0x7f0000000540)=@xdp={0x2c, 0x2, r4, 0x3}, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r1]], 0x2) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x94, 0x0, 0x0, 0x0, 0xff}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x11}, 0x56, r4}) [ 229.675844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:16:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000800), &(0x7f0000000940)="2edab64eca75b49ddb76f2bccdfa1e649b97ffee2a511b2a078f371ce159d763855f0b4dfa9e2a5d673d1b13fe08e07c35b524c8228b248ca7d239678db25fc933007bc29d167cec5fac6e67a495c319094f2ca5f722181b3a26d06bd69a2fcec9ac788e44f7084dce857b0fe8107dd862bfc568d5a90bbb633b8d5b05b8b1cf73d1824cb72f3d092256c6505dc6adbb066eefac07bd0f777d7f1af8ff320fc1df7156e3dabba768116df18280f9755aff854afe3dbf2b", 0xb7, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x10c00, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x5, 0x620300) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x42, 0xf, 0x2, 0x8, "362eb5def4caca4fa1abc692adddbab243af5612f49495ec5b4722262b7746d1a08f5f2ca791326003eb9bfcd46e0c760a9772b5e31069388d1ce73570345ab2", "55a6c99bc05623c5e9b5891f6905ed590e973daebf9371d5f57753f2c98fb260", [0x4, 0x6]}) 01:16:53 executing program 5: r0 = epoll_create1(0x80000) signalfd(r0, &(0x7f0000000140)={0x2}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x688100, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x9, 0x4) fsetxattr$security_smack_entry(r1, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='/dev/rtc0\x00', 0xa, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000180)) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r3, 0x0) mlockall(0x7) [ 229.756947] FAT-fs (loop0): bogus number of reserved sectors [ 229.786829] FAT-fs (loop0): Can't find a valid FAT filesystem [ 229.888178] FAT-fs (loop0): bogus number of reserved sectors [ 229.910483] FAT-fs (loop0): Can't find a valid FAT filesystem 01:16:53 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000003580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2800000000000000000000000700000044180f0400013c14eda95340ed7ed5c9e80000000000000026165462fe4ae16f8d6b8a5f97f96b5ee3a34adcba2bedbc05265213cacaa6c579a523437ce98e8cc0789a82124d6cc5d298056bd4e9ef25a53092a19a5f98587ad67d94f2dde2e4d2dc4819b5d90b4e514e98c9dcda2976e433140ead816226e0015742b08807f82d7d98a8e40ebfd838f187a134a90d9f8a0559d35cc06796020715d91b8d642f76de5c2d323100eafd1742fd68bdd780219684c63569834ce11229273f3869ac8c58619c6ac0d33b2e7f22ec916a01864af1"], 0x28}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xc33, 0x2100) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x10000, 0x80000001, 0x1}) 01:16:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980)='/dev/vcs\x00', 0x410000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000019c0)={'bridge0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x20280) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000018c0)={0x3, 0x81}) setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000280)="3fb104b36313c7d041c2a732852bf959dcc8315200a7a3f9c2", 0x19) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001b40)={0x3, 0x3, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141, 0xf000}) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x2, 0xd, 0x80000000, 0x2, 0x218, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x90dd01cb2d86933, 0x14, 0x4}, @sadb_ident={0x2, 0x0, 0x2e, 0x0, 0x400}, @sadb_x_sec_ctx={0x6, 0x18, 0x7fffffff, 0x8, 0x23, "a765ad4607e0156b13212367f1abf8f146885fd51596ea6b2e1e0a85d6273edeaef95a"}, @sadb_ident={0x2, 0xa, 0xfffffffffffffeff, 0x0, 0x5}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x8}, @sadb_lifetime={0x4, 0x7, 0x6, 0x6, 0x3, 0x9}]}, 0x10c0}}, 0x804) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x240000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x51e242a7e48d0c05, 0xd1, &(0x7f0000000700)=""/209}]}) fsetxattr$security_evm(r0, &(0x7f0000001900)='security.evm\x00', &(0x7f0000001a00)=@v2={0x3, 0x3, 0x2, 0x3, 0xfc, "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"}, 0x106, 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000005c0)=0x400104000000) 01:16:53 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x40, 0x1, 0x0, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x204000, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x40, 0x1, {"574275d4099544346a64dd8be0d22cfc30044aeb2288609d5a5cc8a656433114ae290f06547c86d8"}}, {0x0, "6ffb33e3"}}, &(0x7f0000000100)=""/119, 0x46, 0x77}, 0x20) ppoll(&(0x7f00000001c0)=[{r0, 0x8000}, {r1, 0x20}, {r2}], 0x3, &(0x7f0000000200), &(0x7f0000000300)={0x15516cb9}, 0x8) mount$9p_virtio(&(0x7f0000000240)='/dev/kvm\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=virtio,'}) 01:16:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000800), &(0x7f0000000940)="2edab64eca75b49ddb76f2bccdfa1e649b97ffee2a511b2a078f371ce159d763855f0b4dfa9e2a5d673d1b13fe08e07c35b524c8228b248ca7d239678db25fc933007bc29d167cec5fac6e67a495c319094f2ca5f722181b3a26d06bd69a2fcec9ac788e44f7084dce857b0fe8107dd862bfc568d5a90bbb633b8d5b05b8b1cf73d1824cb72f3d092256c6505dc6adbb066eefac07bd0f777d7f1af8ff320fc1df7156e3dabba768116df18280f9755aff854afe3dbf2b", 0xb7, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x10c00, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x5, 0x620300) fremovexattr(r1, &(0x7f00000000c0)=@known='user.syz\x00') ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x42, 0xf, 0x2, 0x8, "362eb5def4caca4fa1abc692adddbab243af5612f49495ec5b4722262b7746d1a08f5f2ca791326003eb9bfcd46e0c760a9772b5e31069388d1ce73570345ab2", "55a6c99bc05623c5e9b5891f6905ed590e973daebf9371d5f57753f2c98fb260", [0x4, 0x6]}) 01:16:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./'], 0x5) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000300)) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="025cc80700145f8f7640") bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001220b8cff095b46ab5080000000000"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:16:54 executing program 0: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x0, 0xff, 0x3, 0x2}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r2 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000340)={0x8, 0x180000000, 0x8}) lseek(r1, 0x0, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300), 0x1) accept(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x1161, 0xfffffffffffffff9, 0xd3c, 0x6, 0x7, 0x8}, 0xc) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) sendfile(r1, r2, 0x0, 0xa5cc54d) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 01:16:54 executing program 1: r0 = socket$kcm(0x2, 0x2000000000, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x7d6c210a774cf444) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x40002) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) 01:16:54 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xffffffff, 0x1, 0xdeb, 0xfffffffffffffff8, 0x0, 0x77, 0x2, 0x1, 0x800, 0x7, 0x3f, 0x6, 0x100000001, 0x326e, 0x7f, 0x100000001, 0x7, 0x5, 0x4, 0x58ec, 0x81, 0x4, 0x0, 0x80000001, 0xffffffffffffff71, 0x3, 0x4, 0x7, 0x7, 0x9, 0x9, 0x5, 0xcf5d, 0x8, 0x1, 0x9, 0x0, 0x1, 0x6, @perf_config_ext={0x7, 0x7}, 0x8108, 0xee, 0x1, 0x0, 0x3, 0x7, 0x1}, r1, 0xd, r0, 0x9) syz_open_procfs(0x0, &(0x7f0000000040)="0000cad12184a56bfa3156ecc373cf2242c21865caaed9d909cba58edced1ff628d916dce3a67d") 01:16:54 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x4, [@remote, @local, @broadcast, @rand_addr=0x3]}, 0x20) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x800000001, 0x20226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x1) 01:16:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0xfffffffffffffff3) r2 = dup2(r1, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000140)}, 0x30) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f00000000c0)='./file0\x00') sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0)=0xa000, 0x4) poll(&(0x7f0000000200)=[{r5, 0x2022}, {r4, 0x2}, {r6, 0x403}, {r4, 0x2000}, {r5, 0x81}, {r1, 0x100}, {r6, 0x8000}, {r0, 0x5000}], 0x8, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x100) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 230.272192] audit: type=1804 audit(1539220614.211:34): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir202055939/syzkaller.pJY5iC/9/bus" dev="sda1" ino=16534 res=1 01:16:54 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x2, 0x0, "1a681c80b16b787e834eaf0d73843e7b9d3a1a08000000000000001d117682276e4fb17510eed08181f92655940b5eb30693adbef9d6806f951c1b3cc874ff", 0x1}, 0x37b) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2f0f000000) 01:16:54 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120024012bbd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="beb90c3f002000000c0011000180c2000003000008001000050a000008002100cb000000"], 0x3c}}, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) [ 230.398742] audit: type=1804 audit(1539220614.311:35): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir202055939/syzkaller.pJY5iC/9/bus" dev="sda1" ino=16534 res=1 [ 230.409372] binder: 7995:8007 ioctl c0306201 20008fd0 returned -14 01:16:54 executing program 1: mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='ncpfs\x00', 0x84804, &(0x7f0000000240)="6e6673006701ab5419aaea4d2767f7481ea57871a7403ab23046a77ab4719e7a2b9a0daf7bbbd970423ff93d880157d5a660af3a2aaf82f08a3a7003870ccd827bc828c9b34ce292d43c86a6165f3b961ff1afa7627be3a218978f6f542198bfc918875991d3e1db1e4a430740a1bba64f56d02bc879573477ad90b764917b51e96e7efa5ec96442d707586d3bf33b18fbeece0fad90949f4628b6f28e580f5573") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x6, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0xd8, 0x40000) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000300)="c00684eeee820273da5a0ad16cb23cfe", 0x10) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="8eb2510e9df2a4e32f096d0f38475ae2515de5281c06dc796292ab882791cd9301035f35c305e777a6255f334ee5dc13d4b171ac7f0e157bfc1a75d5e35b27ce57f9d9400d5556d1d17fa2fef4cb355317f6663973e71e3966f3753138562d989b"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="6e6673006701ab5419aaea4d2767f7481ea57871a7403ab23046a77ab4719e7a2b9a0daf7bbbd970423ff93d880157d5a660af3a2aaf82f08a3a7003870ccd827bc828c9b34ce292d43c86a6165f3b961ff1afa7627be3a218978f6f542198bfc918875991d3e1db1e4a430740a1bba64f56d02bc879573477ad90b764917b51e96e7efa5ec96442d707586d3bf33b18fbeece0fad90949f4628b6f28e580f5573", 0x0, &(0x7f0000000000)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) tgkill(r2, r3, 0x40) 01:16:54 executing program 0: r0 = socket(0x18, 0x1a, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee100f907000f0000000000", 0x24) write(r0, &(0x7f0000000080)="b8144b9d23d11e0d87144c06a6877d36114bffa2f0fd310b197f38bb3e5ae02039626934cb6540ed4d3adb8d673e55119fe434308ebb6e5a27b2e3760f8c7391eb853be07e56de9ba04df6c7c99c595872e6f74c4d63516c109774aa37a21fb865624bf3cebe", 0x66) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x14b) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000001c0)=""/171) 01:16:54 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x8401) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x3000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x45, 0x0, 0x104, 0x0, 0x6, 0x0, 0x100000000, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x5, 0x75, 0xffffffffffffff37, 0xba7c, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x2, 0x2, 0x0, 0x0, 0xd, 0x7, @perf_bp={&(0x7f0000000280)}, 0x0, 0x7, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000002340), 0x4) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) close(0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000140)='./file1\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0xe) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='keyring))/vmnet0:,[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') recvfrom$inet6(r0, &(0x7f0000000100)=""/43, 0x2b, 0x40002001, &(0x7f0000000240)={0xa, 0x4e23, 0x100000000, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffffffffff8}, 0x1c) [ 230.526259] audit: type=1804 audit(1539220614.321:36): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir202055939/syzkaller.pJY5iC/9/bus" dev="sda1" ino=16534 res=1 [ 230.552956] binder: 7995:8044 ioctl c0bc5310 20000300 returned -22 01:16:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x81, 0x7a, &(0x7f0000000280)="60e8302bbc89f67cca77d709af983556dbc4a99754d49e271a49454a60d0d7cb618f3c03fb5e292fbebd845b7c163610a4ae11cd50231ad2f443a92376c70633defca2c9c3d8188f3cfb678963fba141235241b796a4e0a8db34d7c51650de34f1d3942f65f30582d3304fc269432e0b34b75ace043f881c6afffd0418199cc560", &(0x7f0000000440)=""/122, 0x800}, 0x28) [ 230.587090] binder_alloc: binder_alloc_mmap_handler: 7995 20000000-20002000 already mapped failed -16 [ 230.597212] IPVS: ftp: loaded support on port[0] = 21 [ 230.623262] audit: type=1804 audit(1539220614.321:37): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir202055939/syzkaller.pJY5iC/9/bus" dev="sda1" ino=16534 res=1 [ 230.634678] binder: BINDER_SET_CONTEXT_MGR already set [ 230.691040] binder: 7995:8007 ioctl 40046207 0 returned -16 [ 230.708385] binder: 7995:8007 ioctl c0306201 20008fd0 returned -14 01:16:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./'], 0x5) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000300)) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="025cc80700145f8f7640") bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001220b8cff095b46ab5080000000000"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:16:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x8, 0x4400) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000300)={0x6, 0x2, 0xc9, 0x3}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x10, 0x8}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000380)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={0x0}) futimesat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x77359400}}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={r3, 0x3}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000002c0), 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000000c0)={0x7fffffff, 0x100, 0x575, 'queue1\x00', 0x5}) 01:16:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x1, [], 0x0, 0xf}, 0xfffffd03) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) lsetxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='vboxnet1/mime_type#*(]ppp0\x00', 0x1b, 0x1) 01:16:54 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 01:16:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./'], 0x5) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000300)) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="025cc80700145f8f7640") bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20013, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001220b8cff095b46ab5080000000000"], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 230.950797] syz-executor0 (8062) used greatest stack depth: 14568 bytes left [ 231.051466] binder: 8067:8068 ioctl c0306201 20008fd0 returned -14 [ 231.098711] binder: BINDER_SET_CONTEXT_MGR already set [ 231.112718] binder: 8066:8072 ioctl 40046207 0 returned -16 [ 231.134939] binder: 8066:8072 ioctl c0306201 20008fd0 returned -14 [ 231.141952] IPVS: ftp: loaded support on port[0] = 21 01:16:55 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000240)=0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getegid() mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000280), 0x820, &(0x7f00000005c0)={[{@grpid='grpid'}, {@usrquota='usrquota'}, {@errors_continue='errors=continue'}]}) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9000000017060007002e2f66696c6531"], 0x10) 01:16:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0xfffffffffffffff3) r2 = dup2(r1, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000140)}, 0x30) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f00000000c0)='./file0\x00') sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0)=0xa000, 0x4) poll(&(0x7f0000000200)=[{r5, 0x2022}, {r4, 0x2}, {r6, 0x403}, {r4, 0x2000}, {r5, 0x81}, {r1, 0x100}, {r6, 0x8000}, {r0, 0x5000}], 0x8, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x100) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 01:16:55 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x1, 0x9, 0x4ee, 0x5, 0xffffffffffff51b2, 0x3}, 0xc) r1 = inotify_init() poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 01:16:55 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8, 0x60880) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000200)={0x5, 0x0, 0x10001, 0x5}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x1) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8c4, 0x2000) getsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl(r3, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") dup2(r1, r2) 01:16:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0xffffffffffffffda, 0x1, {{0x0, 0x2, 0x4, 0x9, 0x0, 0x4, 0x4, 0x6}}}, 0x60) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, 0xfffffffffffffffd) 01:16:55 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x8, 0x60880) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000200)={0x5, 0x0, 0x10001, 0x5}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0x40087602, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x1) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8c4, 0x2000) getsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl(r3, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") dup2(r1, r2) [ 231.651344] IPVS: ftp: loaded support on port[0] = 21 01:16:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$intptr(0x2000000019, 0xa07000) socket$nl_route(0x10, 0x3, 0x0) 01:16:55 executing program 2: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x800) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKPBSZGET(r0, 0x1260, &(0x7f0000000180)) 01:16:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0xfffffffffffffff3) r2 = dup2(r1, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000140)}, 0x30) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f00000000c0)='./file0\x00') sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0)=0xa000, 0x4) poll(&(0x7f0000000200)=[{r5, 0x2022}, {r4, 0x2}, {r6, 0x403}, {r4, 0x2000}, {r5, 0x81}, {r1, 0x100}, {r6, 0x8000}, {r0, 0x5000}], 0x8, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x100) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) [ 231.938375] EXT4-fs (sda1): re-mounted. Opts: grpid,usrquota,errors=continue,,errors=continue 01:16:55 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x10001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r1, 0x8}, &(0x7f00000001c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x883c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000240)) sendfile(r0, r4, &(0x7f0000000100), 0x80000001) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @mcast1, 0x6}, 0x1c) 01:16:56 executing program 5: r0 = socket$inet(0x2, 0x7, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000000000008"], 0xd}}], 0x1, 0x0) keyctl$join(0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200)) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 01:16:56 executing program 4: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 01:16:56 executing program 0: setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000240)=0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getegid() mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext-\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000280), 0x820, &(0x7f00000005c0)={[{@grpid='grpid'}, {@usrquota='usrquota'}, {@errors_continue='errors=continue'}]}) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9000000017060007002e2f66696c6531"], 0x10) 01:16:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001ed, 0x38) [ 232.110377] syz-executor0 (8083) used greatest stack depth: 13544 bytes left [ 232.226184] IPVS: ftp: loaded support on port[0] = 21 01:16:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001980)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3fff80000000}, r0, 0x10000000004, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000400)={0x6, 0x1000, 0x9abe, 0x2, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r3, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) unlink(&(0x7f0000001800)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001900)={r2, &(0x7f0000001680)="9e3ae8a5a161259a6d4d240458236c47a0afafab5ffeda22d62fe45f049655097288538b9223d3680afbe85c55cbd47246d9140de06ee9299f964e923b08372a3b783058cec30e28e9f705459d936891295c21e44266cf3e8103abb9654027ebe8a13490384fcc796f62418a", &(0x7f0000001840)=""/176}, 0x18) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001940), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) 01:16:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)="6970646470301400") r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000340), 0x8) unshare(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000d000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000740)={0x0, 0x0, 'client1\x00', 0x4, "220003000000fe00", "dff3b4a3c9132b4f3b7cf5df648d76920e01000100001000009d6fdcdee988d6"}) fcntl$setsig(r1, 0xa, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) [ 232.415090] EXT4-fs (sda1): re-mounted. Opts: grpid,usrquota,errors=continue,,errors=continue 01:16:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="08380e2f95cd502d9321933f636d4dae8286d49e336c81091dba59af0784a1824625c96a9f50e4bdd5e5c152dce52e14869c59f17a2fb610888058441b4aa2ea2db77dc011a1919bf5351c5d27a6e3576b340106383884463c1db797192273643923b9cbd52a1437f495fb719e85938d9c137d3ed7af2842c7203c2d069dcaa160c210a002fa229a4df1a783f653773df69fe8a8af4887649c50c53f926b11dd8c3d87c9b49e85e74ab8da309d70481a826ac3757c47d3e93fbd5a77e4899ada2d39e28ad6100ac646ba906a2812859ed2498d79abde17e5af40e70e4749af343e2c3d21d4ec03f62c6341e033f05ddcb5", 0xf1, 0x5}], 0x0, &(0x7f0000001740)={[{@acl='acl'}, {@quota_off='quota=off'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@data_writeback='data=writeback'}], [{@seclabel='seclabel'}]}) 01:16:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000200)="6970646470301400") r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000340), 0x8) unshare(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000d000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000740)={0x0, 0x0, 'client1\x00', 0x4, "220003000000fe00", "dff3b4a3c9132b4f3b7cf5df648d76920e01000100001000009d6fdcdee988d6"}) fcntl$setsig(r1, 0xa, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) [ 232.612009] gfs2: invalid mount option: seclabel [ 232.617357] gfs2: can't parse mount arguments 01:16:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x8000) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000000c0)={0x3, {0x3f, 0x6, 0x9, 0x20, 0x9, 0xea3}}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x92, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x109202, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x1000) sendto$inet(r0, &(0x7f00000000c0), 0x102df, 0x0, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) [ 232.684239] gfs2: invalid mount option: seclabel [ 232.689093] gfs2: can't parse mount arguments 01:16:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="08380e2f95cd502d9321933f636d4dae8286d49e336c81091dba59af0784a1824625c96a9f50e4bdd5e5c152dce52e14869c59f17a2fb610888058441b4aa2ea2db77dc011a1919bf5351c5d27a6e3576b340106383884463c1db797192273643923b9cbd52a1437f495fb719e85938d9c137d3ed7af2842c7203c2d069dcaa160c210a002fa229a4df1a783f653773df69fe8a8af4887649c50c53f926b11dd8c3d87c9b49e85e74ab8da309d70481a826ac3757c47d3e93fbd5a77e4899ada2d39e28ad6100ac646ba906a2812859ed2498d79abde17e5af40e70e4749af343e2c3d21d4ec03f62c6341e033f05ddcb5", 0xf1, 0x5}], 0x0, &(0x7f0000001740)={[{@acl='acl'}, {@quota_off='quota=off'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@data_writeback='data=writeback'}], [{@seclabel='seclabel'}]}) [ 232.871686] gfs2: invalid mount option: seclabel [ 232.886276] gfs2: can't parse mount arguments 01:16:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0xfffffffffffffff3) r2 = dup2(r1, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000140)}, 0x30) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r3, r4, 0x0, 0xd, &(0x7f0000000340)='/dev/binder#\x00'}, 0x30) r5 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x202102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) unshare(0x40000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) chroot(&(0x7f00000000c0)='./file0\x00') sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000001c0)=0xa000, 0x4) poll(&(0x7f0000000200)=[{r5, 0x2022}, {r4, 0x2}, {r6, 0x403}, {r4, 0x2000}, {r5, 0x81}, {r1, 0x100}, {r6, 0x8000}, {r0, 0x5000}], 0x8, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x100) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 01:16:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) pkey_alloc(0x0, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0xfffffffffffffffe, 0x400, 0x4, {r3, r4+30000000}, 0x7f, 0x2}) r5 = dup2(r0, r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x802, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80204000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c9551f9a6fe17cb17e13207d4a164cd7d9257eb85bfdf79954af436c69f41bdc12f9734fe0d56124f1d71d0a19f11fb23cd020269f0796a89b97354dcee6b13acd11af0f304cfcd02c948f5b420b60676a8d13ef72d07", @ANYRES16=0x0, @ANYBLOB="000426bd7000000000000b0000001400020008000b00000000000800080000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0xffffffffffffffff, {"49cc95d8f2174e93705a5cd47a2b587d"}, 0x2, 0x0, 0x400}}}, 0x90) 01:16:56 executing program 0: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x200, 0xa8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@rand_addr, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0xffffffffffffff6a) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000100)="cbecd71d068e1e9f800b5c56b71d5a40feda8bb18b42d7153a6a16f62601a5fb21b34e387cd24ba1807ffda9dd8ae9402d4ef023767837a2ef3ce37f5c7bd066835a1124cb9c782c6f8317b0e12fc50c20342d78319719d5e3eb84194f77228ff1d1d286c66f2309968cef2304a65136b68e2a4724fe15e7020c73c9100ff2a121942a8c") write$P9_RLCREATE(r0, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x80, 0x3}, 0x8}}, 0x18) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000002c0)=""/144) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000280)) openat$userio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/userio\x00', 0x400800, 0x0) 01:16:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000013c0)="f3af", 0x2}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x9885, 0x0, 0x0, 0xa490, 0x8, 0x3, 0x200000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]}) write(r0, &(0x7f0000000300)="606a27d917ee39b0b06556c609e5232c2340a19f1e971d588e7479d168d61d2159bc2a754d403b622acc0865bdb65ba0fbb0c9b16969161edfad946a7c3ccac22514365905459eb4afeb80a471933726437d7304f74896581631522dfc728a03bc19ec8aad5b010e73e4d6e72d56eb090e60b1bbe32e59c08ed9090bc7bde3eeab2d924a86073068249b2c3a50f8feb75195e82469380e4dad2f0c0afca85cc066d66ed9af8be2c013e87045bcd86480803eb0767b7bc22078d0622b24f47494d730a03a02b2a49750e9c631db68fbb8d4412ef3ba1be30d32c88ca933d9559cf30bc4c75170f8ef301da19465c116", 0xef) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x9, 0x0, 0x0, 0x80]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:16:57 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='sched\x00') write$P9_RAUTH(r2, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x0, 0x1, 0x6}}, 0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)="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", 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8001000000002c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xf, 0x401, 0x4, 0xff, 0x20, r2, 0xfffffffffffffff9}, 0x2c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffff75}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = accept(r4, &(0x7f00000004c0)=@hci, &(0x7f0000000200)=0x80) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000540)=""/93, 0x4adc}) 01:16:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x10) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000001000000ad79000000000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000380)={0x100000000001, 0x0, [0x48d]}) 01:16:57 executing program 0: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000005c0)={[0x6, 0x6, 0xfffffffffffffffb, 0x1, 0x10001, 0x800, 0x7fffffff, 0x33c9a5f2, 0x80000000, 0x2, 0x1f, 0x800, 0x9e, 0x3, 0x20, 0x6]}) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {}, {0x20, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}, {0x20, '/dev/vsock\x00'}, {0x20, '}&em0vboxnet1('}], 0xa, "8b42c2dfa624bd1a0ea2a1996348e00d88b5dcb31301df5c23497e86f9edc680616c9db5eb9450fadaa134c06b4e5443c82c786e470378ccc74d7f5f70553a8506e336b1fd831d80f58736fad51c1617f1df1694af7ef5d1645548493e645588ff25b6702af608a12b45e861d94f2f91a51dcdab2c1b2e13464ffe8f93430ac5a27cb035c00eeaff825d8a51f43f7c1cc9d026e52b946d4b4d1c16ce6dd95722fe446ff28b3990e0367634eda6b764082d61e12d5ebb3f663c6cfc3802b8808bd1d601acfb0ea3944e612e6bda4efcc00776b1644b4c85876fb61230048abc"}, 0x13d) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000220421344f1101edccda98b684efffffff0000da5600f00000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:16:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001980)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3fff80000000}, r0, 0x10000000004, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000400)={0x6, 0x1000, 0x9abe, 0x2, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r3, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) unlink(&(0x7f0000001800)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001900)={r2, &(0x7f0000001680)="9e3ae8a5a161259a6d4d240458236c47a0afafab5ffeda22d62fe45f049655097288538b9223d3680afbe85c55cbd47246d9140de06ee9299f964e923b08372a3b783058cec30e28e9f705459d936891295c21e44266cf3e8103abb9654027ebe8a13490384fcc796f62418a", &(0x7f0000001840)=""/176}, 0x18) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001940), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) [ 233.223793] IPVS: ftp: loaded support on port[0] = 21 [ 233.268119] Unknown ioctl 1083223682 [ 233.283863] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 233.355908] Unknown ioctl 1083223682 01:16:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001980)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3fff80000000}, r0, 0x10000000004, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000400)={0x6, 0x1000, 0x9abe, 0x2, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r3, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) unlink(&(0x7f0000001800)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001900)={r2, &(0x7f0000001680)="9e3ae8a5a161259a6d4d240458236c47a0afafab5ffeda22d62fe45f049655097288538b9223d3680afbe85c55cbd47246d9140de06ee9299f964e923b08372a3b783058cec30e28e9f705459d936891295c21e44266cf3e8103abb9654027ebe8a13490384fcc796f62418a", &(0x7f0000001840)=""/176}, 0x18) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001940), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) [ 233.422158] *** Guest State *** [ 233.460019] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 01:16:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r2 = gettid() recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000180)={0x19980330, r2}, &(0x7f0000000200)={0x6, 0x6, 0x101, 0xfff, 0x5, 0x9}) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713f3ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74caf54ec97fb80f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2c8d91d510485793916f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000e1ff00000000000000000000000000000000000000000000000000db0000000000000000000000000000000000000000bb4243dbcbc2188b0017487b2e533a58643fe24b175f8e919e52849e39389043525d3ddd494ae985e53468473c711971a0f1c6201ef789867a6a6a43da1331e65f4e1a7c88aea52f23a6494510e240ed0b839a8ffb1e95afe210cd60467c1192a1c88027aed995e0b380cfde5b43203edd98da95e2a230873df201f1d2c5b9afa2a163e85dd75b2733d7061889089388ca552942e1daf0"], 0x445) write$binfmt_elf64(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xbbb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:16:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/kvm\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="6766c7442400baffffff6766c7442402000000006766c744240600000000670f0114240f20e06635200000000f22e03e0fc72a650fc79a0f00ba430066b80000000066eff30f326766c7442400060000006766c7442402007800006766c744240600000000670f011424b836008ed064660f1717660f98ec", 0x78}], 0x1, 0x0, &(0x7f0000000080), 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x40000005, 0x7, 0x100000000, 0x2a5, 0x7ff}]}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 233.509016] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 233.574535] CR3 = 0x0000000000000000 [ 233.602342] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 233.648734] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 233.694828] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 233.702916] capability: warning: `syz-executor3' uses 32-bit capabilities (legacy support in use) [ 233.737676] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 233.773578] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.820567] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.837353] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.846035] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.854490] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 233.871414] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 233.886797] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 233.898910] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 233.907140] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 233.915561] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 233.922149] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 233.943909] Interruptibility = 00000000 ActivityState = 00000000 01:16:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) [ 233.977259] *** Host State *** [ 233.989194] RIP = 0xffffffff811f9ed3 RSP = 0xffff880181ad7390 [ 234.014830] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 01:16:58 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='sched\x00') write$P9_RAUTH(r2, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x0, 0x1, 0x6}}, 0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)="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", 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8001000000002c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xf, 0x401, 0x4, 0xff, 0x20, r2, 0xfffffffffffffff9}, 0x2c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffff75}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = accept(r4, &(0x7f00000004c0)=@hci, &(0x7f0000000200)=0x80) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000540)=""/93, 0x4adc}) [ 234.055179] FSBase=00007f87bc841700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 01:16:58 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='sched\x00') write$P9_RAUTH(r2, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x0, 0x1, 0x6}}, 0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)="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", 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8001000000002c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0xf, 0x401, 0x4, 0xff, 0x20, r2, 0xfffffffffffffff9}, 0x2c) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffff75}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = accept(r4, &(0x7f00000004c0)=@hci, &(0x7f0000000200)=0x80) ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000380)=@get={0x1, &(0x7f0000000540)=""/93, 0x4adc}) [ 234.101655] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 234.131855] CR0=0000000080050033 CR3=00000001d38ec000 CR4=00000000001426e0 01:16:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001980)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3fff80000000}, r0, 0x10000000004, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='bpf\x00', 0x7ffffe, &(0x7f0000000340)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000400)={0x6, 0x1000, 0x9abe, 0x2, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x41f00, 0x1, [], r3, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)="6b657972696e67cb747275737465646e6f6465765b00") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) unlink(&(0x7f0000001800)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0xa, 0x5, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x2, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001900)={r2, &(0x7f0000001680)="9e3ae8a5a161259a6d4d240458236c47a0afafab5ffeda22d62fe45f049655097288538b9223d3680afbe85c55cbd47246d9140de06ee9299f964e923b08372a3b783058cec30e28e9f705459d936891295c21e44266cf3e8103abb9654027ebe8a13490384fcc796f62418a", &(0x7f0000001840)=""/176}, 0x18) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x400}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001940), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)=0xffffffffffffffff, 0x11c) [ 234.168971] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 234.183273] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 234.189396] *** Control State *** [ 234.189406] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 234.189414] EntryControls=0000d1ff ExitControls=002fefff [ 234.189428] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 234.189437] VMEntry: intr_info=800000bf errcode=00000000 ilen=00000000 [ 234.189445] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 234.189465] reason=80000021 qualification=0000000000000000 [ 234.242408] IDTVectoring: info=00000000 errcode=00000000 01:16:58 executing program 3: r0 = getpgid(0x0) tkill(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000040)='ah\x00', 0x0) ptrace$setregset(0x4205, r0, 0x203, &(0x7f00000001c0)={&(0x7f0000000200)="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", 0x132}) write$P9_RAUTH(r2, &(0x7f0000000080)={0x14}, 0x14) ftruncate(r2, 0x8) 01:16:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 234.273714] TSC Offset = 0xffffff80be4f367e [ 234.285825] TPR Threshold = 0x00 [ 234.290654] EPT pointer = 0x00000001ceb2f01e 01:16:58 executing program 1: r0 = socket(0x5, 0x3, 0x0) write(r0, &(0x7f0000000040)="24fc020200000000100f000ee1007d1f1725acd27909a4", 0x17) 01:16:58 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000b00)={0x0, 0x5, 0x8a8, 0x0, &(0x7f0000000940)=[{}, {}, {}, {}, {}]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x6000, 0x0) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x6, 0xb94, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e36666d6c6530"], 0x2a) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000880)={0x7, 0x4d, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) getrusage(0x0, &(0x7f0000000580)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) fcntl$setflags(r2, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x7}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000740)={r4, 0xfe}, &(0x7f0000000780)=0x8) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000b80)={0x0, 0x0, @ioapic}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x20) syz_emit_ethernet(0x2d, &(0x7f0000000700)={@dev, @remote, [], {@ipx={0x8137, {0xffff, 0x1f, 0x7, 0x5, {@broadcast, @random="38b1372b0270", 0x7f}, {@broadcast, @random="6efa2e4f398a"}, "16"}}}}, &(0x7f0000000640)={0x1, 0x2, [0x0, 0x6fa, 0xe77, 0x685]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000eed000)={0x2, 0x1}, 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000800), 0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) syz_emit_ethernet(0x0, &(0x7f0000000cc0)=ANY=[], 0x0) 01:16:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:16:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:16:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000440)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef9012dc08e142dfcc755c98c11409477271f99a676ca3e974e5c0c0c38850c7619a5f1365091dcc43e8a350395262df3b23006bb7f9bc88897ff9a5b8dc300af979dc9cf22e96d5f1469caa5d89f46c8b810a23ec7fc0b2160c186a70cbca3f03021eedea2298ee4a1e1e7dd1f0ef3386701bd6f773ad3cbf9cf7d42de19e8a01db20178d2fe64e1f1fbe68aef1dd5e1c53153881c67d710c4f2ff67846747e0480720207832f88688b3ebf1ddc63621e58da256c4a6d61c327ed459d61917401619475464ae49d", 0x101, 0xfffffffffffffffc}], 0x0, &(0x7f0000000040)) r0 = memfd_create(&(0x7f0000000000)='ext4\x00', 0x5) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) 01:16:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:16:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 234.976761] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 01:16:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000000000005d0085e9bc77080000000000000000003e6ed63e6a34d066875e8536d93967b4af56bcea90cb77c442fa0f5de3877ca6a5c73ed45491531f4f53f04969c646a15ce1"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/tcp6\x00') ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000380)={0x5, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0x3, 0x47ff, 0xffffffffffffffff, 0x354, 0xf6, 0x5, 0x100, 0x0, 0xd915, 0x8000, 0x5, 0x2283, 0x3, 0x9}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x20100, 0x88) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "1d13b022bd95fd653394edb26f44e3b87845a648"}, 0x15, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000280)={0x0, 0x8, 0xffffffff}) 01:16:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), 0xffffffffffffff74) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x5, 0x6, 0x0, 0x80, 0x1, 0x5}, 0x9}, 0xa) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f00000034c0)=0xfffffffffffffddf) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f00000001c0)=0x78) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000110) 01:16:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x4000000) close(r0) 01:16:59 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000b00)={0x0, 0x5, 0x8a8, 0x0, &(0x7f0000000940)=[{}, {}, {}, {}, {}]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x6000, 0x0) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0x6, 0xb94, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e36666d6c6530"], 0x2a) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x3fffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000880)={0x7, 0x4d, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) getrusage(0x0, &(0x7f0000000580)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) fcntl$setflags(r2, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x7}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000740)={r4, 0xfe}, &(0x7f0000000780)=0x8) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000b80)={0x0, 0x0, @ioapic}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x20) syz_emit_ethernet(0x2d, &(0x7f0000000700)={@dev, @remote, [], {@ipx={0x8137, {0xffff, 0x1f, 0x7, 0x5, {@broadcast, @random="38b1372b0270", 0x7f}, {@broadcast, @random="6efa2e4f398a"}, "16"}}}}, &(0x7f0000000640)={0x1, 0x2, [0x0, 0x6fa, 0xe77, 0x685]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000eed000)={0x2, 0x1}, 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000800), 0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000540)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) syz_emit_ethernet(0x0, &(0x7f0000000cc0)=ANY=[], 0x0) 01:16:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x400100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000006c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0xe241) fstat(r3, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000640)=0x8) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r6 = dup2(r1, r5) write$P9_RCREATE(r4, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x4}, 0x4}}, 0x18) dup(r0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0x0, r7}) write$P9_RLERRORu(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000700000000731438d463e9e7257bea994ae3ac9b6efae72d76736f636b00f8ffffff7a138a4559a0b1a34b9f36f81bdb2400e3dbd69347c873790355d74f2c4882ef2c9e89b28803f7d9d4f56f29815d148d3f00000000"], 0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) 01:16:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 01:16:59 executing program 4: mmap(&(0x7f000001e000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)="6e756d615f6d617073005f2b42fe812b046e68fb56a390f54676053400781ae81c7200e5f1b4f9f638baaa0191cbaba18037f3109d447491d9cfc26df88ddaee7f1502742e9b966c9dae0eca3ecab82cf23a4090543d636fdc56ec85e50775f002538c977c60754eaaa068cc90055107dd7b58c20ed33a0c1e393d7131964c74a7fa59c8847b038489379f1e7467c586d9eb682ce3f76a0e6a81bbab4b344677b71f75a9d7bd4d5c69f50057d598928de9f3af7a6b76cd9f6a426fe7ab6122395a8d2715f09a96dc2d0e0dd6be8103fa07000000402f5a7fd8d74d4d2bb94b0dbef23b2236d770cb00773fe89c004d80bf039e3ae918860b3123f61eb50dd76c400fd9590fa2") ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/115) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) preadv(r0, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) 01:16:59 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x14104a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {}], 0xfcf2) sendfile(r2, r1, &(0x7f0000000000), 0x100000001) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/216) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) 01:16:59 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1\x00') socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0xdd8, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24}, 0x20, 0x9, 0x3, 0x8, 0x945, &(0x7f0000000080)='bcsf0\x00', 0x7fff, 0x0, 0x2}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e85c76469723d400066696c65302c40000000000000006c65315c0000000000"]) 01:16:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20080, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000180)={{0x3, 0x0, 0x9, 0xe8db, '\x00', 0x12e}, 0x3, 0x40, 0x4, r2, 0x2, 0x2, 'syz1\x00', &(0x7f0000000140)=['/dev/ion\x00', 'em0[)\x00'], 0xf, [], [0xfffffffffffffffe, 0x20, 0x1000, 0x81]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x8, 0x1b, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)=0x2) [ 235.361501] overlayfs: missing 'lowerdir' 01:16:59 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000f6bfe8)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x81, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x1}}, 0x0) semget(0xffffffffffffffff, 0x1, 0xfffffffffffffffe) mkdir(&(0x7f0000000300)='./file0//ile0\x00', 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x40040) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socketpair$inet6(0xa, 0x1, 0x2, &(0x7f0000000640)) read$FUSE(r1, &(0x7f0000001000), 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 235.431378] overlayfs: missing 'lowerdir' 01:16:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x200000) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000000c0)={@local, @multicast1}, &(0x7f0000000100)=0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030624ee6868521c2da5b5822689b303030303030303c303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_rea000000 0000,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r2, r3, &(0x7f0000000000), 0x800000080000002) 01:16:59 executing program 2: io_submit(0x0, 0x0, &(0x7f0000000780)) getpeername$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000980)=0x1c) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x400, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000007c0)=""/255) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000080)=""/40, &(0x7f0000000200)=0x28) sysinfo(&(0x7f0000000d80)=""/201) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x800}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="858bba4ffedb8846cb3950c63632c7bff5a72193864c8b320bf979265fab98041d400c2808c109dafef46cc4a5775e4b61246af70a08f4732cfb", @ANYRES32=0x0], &(0x7f0000000f80)=0x2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x5c0d0000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000009c0)=ANY=[], &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) [ 235.516165] ion_buffer_destroy: buffer still mapped in the kernel 01:16:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0xfffffffffffffdef) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 01:16:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x9, 0x80002, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@bridge_getlink={0x20, 0x12, 0x101}, 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 01:16:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) gettid() gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioprio_set$pid(0x1, r1, 0x80002000) 01:16:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x400100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000006c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0xe241) fstat(r3, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000640)=0x8) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r6 = dup2(r1, r5) write$P9_RCREATE(r4, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x4}, 0x4}}, 0x18) dup(r0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0x0, r7}) write$P9_RLERRORu(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000700000000731438d463e9e7257bea994ae3ac9b6efae72d76736f636b00f8ffffff7a138a4559a0b1a34b9f36f81bdb2400e3dbd69347c873790355d74f2c4882ef2c9e89b28803f7d9d4f56f29815d148d3f00000000"], 0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) 01:16:59 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x400100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000006c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0xe241) fstat(r3, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000640)=0x8) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r6 = dup2(r1, r5) write$P9_RCREATE(r4, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x4}, 0x4}}, 0x18) dup(r0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0x0, r7}) write$P9_RLERRORu(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000700000000731438d463e9e7257bea994ae3ac9b6efae72d76736f636b00f8ffffff7a138a4559a0b1a34b9f36f81bdb2400e3dbd69347c873790355d74f2c4882ef2c9e89b28803f7d9d4f56f29815d148d3f00000000"], 0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) 01:16:59 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x400100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000006c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_flags=0x8901}}) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0xe241) fstat(r3, &(0x7f00000000c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000640)=0x8) ioctl$KIOCSOUND(r5, 0x4b2f, 0xfffffffffffff801) write$sndseq(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x5}}], 0x30) r6 = dup2(r1, r5) write$P9_RCREATE(r4, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x4}, 0x4}}, 0x18) dup(r0) syz_open_dev$usb(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @local}, @local, @mcast2, 0x4, 0x2, 0x5, 0x500, 0x1, 0x0, r7}) write$P9_RLERRORu(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e0000000700000000731438d463e9e7257bea994ae3ac9b6efae72d76736f636b00f8ffffff7a138a4559a0b1a34b9f36f81bdb2400e3dbd69347c873790355d74f2c4882ef2c9e89b28803f7d9d4f56f29815d148d3f00000000"], 0x1e) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000002c0), &(0x7f0000000400)=""/83}, 0x18) 01:17:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x5}}) 01:17:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpid() getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000300)=0x1) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000600), 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, 0x0, 0x420, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x24}}, 0x4001) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000580)={0x0, 0xf3be, 0x8}, 0x8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 01:17:00 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045105, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() ioprio_set$pid(0x1, r2, 0x0) ioprio_get$uid(0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 01:17:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sync() 01:17:00 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000580)={'eql\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x8000000000001, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f00000001c0)=""/127, 0x400000000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000040)=""/153, &(0x7f0000000300)=""/253, &(0x7f0000000240)=""/13}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000005c0)=0x8) 01:17:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0xfffffffffffffdef) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 01:17:00 executing program 3: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="6a0648931426da5ee025a7961feeb58f80af024951834e2c8a32d3a6fa5b8681bf4122ee8f5f622f846546a6b10bd47ae7543fe99f71d024253e3984a9512be86bee9b81ea6b77ec6cd68d117f521d714bed8891bfcb48540579ee7721518f925e0ec124ab02b9f27415ff1f410cb903000000e8e43bda7ec5598a60bf451b6195916ffea1e620d4df9e96"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000040)) poll(&(0x7f0000000400), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') socket$vsock_stream(0x28, 0x1, 0x0) [ 236.635053] vhci_hcd: invalid port number 0 01:17:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sync() 01:17:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sync() [ 236.663955] vhci_hcd: invalid port number 0 01:17:00 executing program 2: clone(0x4002102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x223, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000220], 0x0, &(0x7f0000000000), &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, 0x2a4) 01:17:00 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x10000006, 0x0, r1, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000240)={0x5, 0x7, 0x0, 0x2, [], [], [], 0x5, 0x80000001, 0x5, 0x5, "652d0577dd039c9ad4f89ac02846d0d4"}) [ 236.764999] kernel msg: ebtables bug: please report to author: Wrong len argument [ 236.778805] vhci_hcd: invalid port number 0 [ 236.801342] kernel msg: ebtables bug: please report to author: Wrong len argument 01:17:00 executing program 2: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x48400) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000002100)={0x0, 0x0, 0x2}, &(0x7f0000002140)=0x8) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000500)) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000300)) read(0xffffffffffffffff, &(0x7f0000000b80)=""/34, 0xffffffffffffff9b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="c7442400cb000000c744240200000000ff2c24f2450f103f420f54eab94e080000b800000000ba010000000f306638e6490fc72d006000003e660f3880b5a667000048b8ef41fba4000000000f23d00f21f835000000040f23f80f23a466baa100b80b000000ef", 0x67}], 0x1, 0x10, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000ac0)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x0, {0x2, 0x4e20, @remote}, 'bpq0\x00'}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x100000001}, 0x4) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:17:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0xf}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5, 0x8000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x16}]}, 0x10) close(r0) 01:17:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sync() [ 236.962402] vhci_hcd: invalid port number 0 01:17:00 executing program 2: socketpair(0x208000000000001e, 0x80005, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x0, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0xfe28}], 0x1, &(0x7f0000b50000)}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd264766070") ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000182000)={&(0x7f0000bec000)=@l2, 0xe, &(0x7f0000231000)=[{&(0x7f000023f000)=""/205, 0xcd}], 0x1, &(0x7f0000c7c000)=""/4096, 0x1000}, 0x0) 01:17:01 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2080) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f00000001c0)) 01:17:01 executing program 1: clone(0xfffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000480)) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r0, 0x9) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) waitid(0x0, 0x0, &(0x7f0000000000), 0x6, &(0x7f00000002c0)) [ 237.113060] vhci_hcd: invalid port number 0 01:17:01 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5382) pipe(&(0x7f0000000000)) init_module(&(0x7f0000000080)='/dev/sg#\x00', 0x9, &(0x7f00000000c0)='posix_acl_access@(\x00') 01:17:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x326, 0x101100) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x5}}) close(r3) close(r2) 01:17:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) sync() 01:17:01 executing program 2: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x2000000, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 01:17:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000280)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)="6d656d6f72792e6d61780045d23646c0819424255398431189b5400e6d72ae67a7dd64e20a4325c2728f23", 0x2, 0x0) r2 = dup2(r1, r0) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x54, 0x7d, 0x0, {0x0, 0x4d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x8, 'RATEEST\x00', 0xd, './cgroup.cpu\x00', 0x0, "", 0x5, "8a70726f63"}}, 0x54) 01:17:01 executing program 1: clone(0xfffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000480)) write(r2, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) tkill(r0, 0x9) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) waitid(0x0, 0x0, &(0x7f0000000000), 0x6, &(0x7f00000002c0)) 01:17:01 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000002c0)=0x1c, 0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1ff, 0x2, 0xc3, 0x80000000, 0x0, 0x9, 0x0, 0x4, 0x42f, 0x3ff, 0x1, 0x9, 0x7, 0x31f9, 0x1, 0x3, 0x7, 0xa43, 0xb04, 0x14c1, 0xfffffffffffffffe, 0x1f, 0x3, 0x0, 0x95, 0x5, 0x1, 0x3a, 0xfb, 0x52a7, 0x400, 0x1, 0xffffffffffff8001, 0x1f, 0x0, 0x20, 0x0, 0x40c, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x200, 0x8, 0x5, 0x7, 0x0, 0xe85, 0x7}, r2, 0x8, 0xffffffffffffffff, 0x1) getdents(r0, &(0x7f0000000140)=""/148, 0xffffffa2) dup2(r1, r1) 01:17:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000004c0)='u', 0x1, 0x0, 0x0, 0x0) r2 = accept(r0, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f00000000c0)=0x80) write$binfmt_misc(r2, &(0x7f0000000200)={'syz0'}, 0x4) [ 237.608102] vhci_hcd: invalid port number 0 01:17:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f7379732f6e65742f697066342f76732f73656375aec81775139a1c", 0x2, 0x0) quotactl(0x2080000201, &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000080)) 01:17:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000052001100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.\x00\x00\x00\x00\x00'], 0x28}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000000000000005000900"], &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xfffffffffffffff7}, 0x8) 01:17:01 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getpgrp(0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f00000000c0)=0xfffffffffffffffc) ioctl$FITRIM(r0, 0x40044160, &(0x7f0000000380)) [ 237.769833] vhci_hcd: invalid port number 0 01:17:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2fc3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r4 = getpid() kcmp(r3, r4, 0x0, r2, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000180)={0x8, 0x7, 0x8, 0x1000, 'syz0\x00', 0x4}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000002040)=""/4096) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x80, 0x0) chown(&(0x7f00000002c0)='./file1\x00', r4, r5) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000081, &(0x7f0000013ff4)={@loopback, @rand_addr, @multicast2}, 0x78) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) r6 = dup3(r1, r3, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000)=0x10, 0x4) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000040)={0x4, r1, 0x1}) [ 237.948258] vhci_hcd: invalid port number 0 01:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:02 executing program 1: munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = socket$inet(0x2, 0xb, 0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @broadcast, 0x4e22, 0x4, 'rr\x00', 0x18, 0x42, 0x4d}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x10004, 0x4ef6, 0x5, 0x7}}, 0x44) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x309) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0x200, 0x3}) 01:17:02 executing program 2: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x2000000, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 01:17:02 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)=""/222, 0xab) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = open(&(0x7f0000000100)='./file0\x00', 0x400000, 0x12a) write$sndseq(r2, &(0x7f0000000140)=[{0x4, 0x4f, 0xff, 0x5, @tick=0x7, {0x5, 0x7}, {0x1, 0x2}, @time=@tick=0x4}, {0x7, 0x4, 0xff, 0x1, @time={0x77359400}, {0x9, 0x800}, {0x9, 0xfffffffffffffffe}, @raw8={"8876b7c1751311b40ed7cb45"}}], 0x60) accept$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind(r1, &(0x7f0000000580)=@ll={0x11, 0xff, r3, 0x1, 0xa9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xffffffda, 0x2}, 0x10) [ 238.452078] vhci_hcd: invalid port number 0 01:17:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff84ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) fcntl$setstatus(r0, 0x4, 0x4400) pwritev(r0, &(0x7f0000000280), 0x300, 0x0) 01:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:02 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)='\n\\') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000140)=0x80) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)={0x6, [0xffffffff, 0x10001, 0x8, 0x9, 0x10001, 0x2]}, 0x10) 01:17:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xf2e, 0x84000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f00000003c0)='./file0\x00') getresgid(&(0x7f0000000400), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x0, {0x10, 0x4, 0x1}, 0x100, r1, r2, 0x6, 0x9, 0x1, 0x8, 0xae7, 0x3ff, 0x2, 0x400, 0x7fffffff, 0x0, 0x3f4bc700, 0x8000, 0x1, 0x5, 0x7fff}}, 0xa0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) 01:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 238.665495] audit: type=1800 audit(1539220622.611:38): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16533 res=0 01:17:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="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"}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") prctl$intptr(0x1d, 0x5) sendfile(r2, r3, &(0x7f0000000180)=0x100e00, 0x100000001) [ 238.738316] vhci_hcd: invalid port number 0 01:17:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x2980129a}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x800}) fchdir(r0) 01:17:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000002, 0x100000002132, 0xffffffffffffffff, 0x0) mlockall(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) get_robust_list(0x0, &(0x7f0000002600)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f00000025c0)}, 0x0, &(0x7f0000000340)={&(0x7f0000002580)}}, &(0x7f0000000300)=0x18) 01:17:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2f87a423d544a7fc, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/154, 0x9a}], 0x3, &(0x7f0000001640)=""/199, 0xc7, 0x5b}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffff0907}, 0x14) getrlimit(0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00000001c0), 0x5c0699e775d81eda, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x59}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x0, @rand_addr}}, 0xfffffffffffffffd, 0x8}, &(0x7f0000000340)=0x98) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000240)={0x4, 0xde83, 0x8, 0x185f, 0x0, 0x66, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x40, 0x20, 0x200, 0xe838, 0x0, 0x10001, 0x0, 0x5, r3}, 0x20) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000001780)=0x5) 01:17:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 239.063686] vhci_hcd: invalid port number 0 01:17:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4(r0, &(0x7f0000000040)=@ax25, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180)={0x800, 0x7fff, 0x4, 0x8}, 0x6) clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp(r3, r3, 0x0, r0, r4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) r6 = getpid() r7 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x1, 0x200) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) fcntl$setown(r4, 0x8, r6) write$P9_RSYMLINK(r7, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x18, 0x4, 0x1}}, 0x14) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) tkill(r3, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 01:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x4, 0x0, 0x0}, 0x2c) clone(0x13020000, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x5) r2 = add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000300)="1134cece8b62d84a37aed6f8a99ba4599fbf9d5520e6d8c3e2efa68684921ce47422f7f43711ddee7df880526e803803a5381d0991e6d97f037c9430fc4884f4d4170c40a9764c920e", 0xfffffffffffffe39, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)='\x00', r2) bind$llc(r0, &(0x7f0000000440)={0x1a, 0x312, 0x6, 0x70000, 0x401, 0x8, @random="f417b46c773b"}, 0x10) bpf$MAP_LOOKUP_ELEM(0x6, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=""/130}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000003c0)=0xd000) 01:17:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffff8) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "b3352b7f701ad8697048"}, 0xb, 0x0) close(r0) 01:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 239.267554] vhci_hcd: invalid port number 0 01:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x80000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x2, 0x1, 0x1c68, 0x10001, r1}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) [ 239.370296] vhci_hcd: invalid port number 0 [ 239.465425] vhci_hcd: invalid port number 0 01:17:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="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"}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") prctl$intptr(0x1d, 0x5) sendfile(r2, r3, &(0x7f0000000180)=0x100e00, 0x100000001) 01:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 239.556806] vhci_hcd: invalid port number 0 01:17:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="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"}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") prctl$intptr(0x1d, 0x5) sendfile(r2, r3, &(0x7f0000000180)=0x100e00, 0x100000001) 01:17:03 executing program 5: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x41) fcntl$dupfd(r0, 0x0, r0) dup2(r0, r0) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffff00000001, 0x20001) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x2f9, 0x40000) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6, 0x92f9fb6c06cf2489) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="d292858b1281d23b706bcc0ef196f49396fe0b5c0f73bf4befedc70761051e3425ef2a08d19bf932508416bb6616"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400202, 0xa8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x10202, 0x0) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 01:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:03 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x62, 0x0, r0}, 0x2c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10000000006, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)="47104c00", 0xfffffffffffffffc, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x1}, 0x48) 01:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) dup2(r0, r0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 239.715189] vhci_hcd: invalid port number 0 [ 239.726174] vhci_hcd: invalid port number 0 01:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000280)="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"}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") prctl$intptr(0x1d, 0x5) sendfile(r2, r3, &(0x7f0000000180)=0x100e00, 0x100000001) 01:17:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@remote, @broadcast, @multicast1}, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0x80086601, &(0x7f00000002c0)={r4, &(0x7f0000000540)=""/160}) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r3, &(0x7f0000000480)={0x78, 0x0, 0x4, {0x1f, 0x4, 0x0, {0x3, 0x8, 0x20, 0x6, 0xb71, 0x100000000, 0xfff, 0x5, 0x8, 0x8, 0x0, r5, r6, 0xda60, 0x318}}}, 0x78) [ 239.886503] vhci_hcd: invalid port number 0 01:17:03 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 239.917025] vhci_hcd: invalid port number 0 01:17:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 240.117918] vhci_hcd: invalid port number 0 01:17:04 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 240.143506] vhci_hcd: invalid port number 0 [ 240.266158] vhci_hcd: invalid port number 0 01:17:04 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 240.438725] vhci_hcd: invalid port number 0 01:17:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x6}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x200, 0x9, 0x0, 0x2d, r0, 0x1}, 0x2c) 01:17:04 executing program 2: r0 = socket$inet6(0xa, 0x100000002, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000280)=""/4096, &(0x7f00000001c0)=0x1000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb00, 0x4) 01:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:04 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="cdf2288a911993f0265df5cfdac122ee04887ba986bc01bbc8464d4f8a906151", 0x20) 01:17:04 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 240.772809] vhci_hcd: invalid port number 0 01:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:04 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:04 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4068aea3, &(0x7f0000002300)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) [ 240.796241] vhci_hcd: invalid port number 0 [ 240.802621] vhci_hcd: invalid port number 0 01:17:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) recvfrom$unix(r1, &(0x7f0000000100)=""/160, 0xa0, 0x40000143, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 240.905776] vhci_hcd: invalid port number 0 [ 240.927667] vhci_hcd: invalid port number 0 01:17:04 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:04 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 240.967095] vhci_hcd: invalid port number 0 01:17:04 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod(&(0x7f0000000000)="e91f7189591e9233614b00", 0x1040, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000300)="e91f7189591e9233614b00", 0x0) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) 01:17:04 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 241.015723] vhci_hcd: invalid port number 0 [ 241.021191] vhci_hcd: invalid port number 0 01:17:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e0001020000000000000000000000400c0000000000002713a29f1705b877379c99c3a75502fcfd2fd6fa464bd620124c83cb4c2eeedc8769a094e4de425b11eb447e8b9b33c53b5023d5f56a28c4f5d8ea09241586824ef5a470a8acf068ee21dbdb462f1801429218003865468024269161da4d89d62a1a9a26c9f152bbfde073f270455b8a6c54fee9437dc8126af4f875c8fc77241101360efea1e750da4c2f24c5"], 0x1}}, 0x0) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="6e65742f6172700083f89805848e8062d8122712a9694ee19c721bb223f26f76c3cf0a2d5d842dcb74ee452b2d070000000000000000") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 01:17:05 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 241.128970] vhci_hcd: invalid port number 0 [ 241.138807] vhci_hcd: invalid port number 0 01:17:05 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 5: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) [ 241.217550] vhci_hcd: invalid port number 0 [ 241.234056] vhci_hcd: invalid port number 0 01:17:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x1000000) 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') 01:17:05 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 241.320261] vhci_hcd: invalid port number 0 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x3f9, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) mlock2(&(0x7f0000fa0000/0x2000)=nil, 0x2000, 0x1) [ 241.448512] vhci_hcd: invalid port number 0 01:17:05 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 4: io_setup(0x8f, &(0x7f0000000000)) [ 241.508167] vhci_hcd: invalid port number 0 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 241.536192] vhci_hcd: invalid port number 0 [ 241.549230] vhci_hcd: invalid port number 0 01:17:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x20}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r2, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 241.583085] vhci_hcd: invalid port number 0 01:17:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:05 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='smaps\x00') dup3(r0, r1, 0x0) [ 241.677664] vhci_hcd: invalid port number 0 [ 241.688286] vhci_hcd: invalid port number 0 01:17:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 241.773551] vhci_hcd: invalid port number 0 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x5) userfaultfd(0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000400)) ioctl$TCSBRK(r1, 0x5409, 0x100000001) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="ee0000006c3e77d600af057e387e439802acbe23f25c1990d50b853f925144943d4f867280c680403bf89fa2415a1193aeb26db12d3271bb97ea11820395c033942cf49cdace3e07a0421af8523914e37323869120f5bdc0284795cf0835d99966fb1437c25356fa32bb287051519b42231d3b39e89dfae50a404e4f851894d73fe2101770995102bf11031f9d22a226cf7117fb2f9e41a903e7b7d1d526f2b2e70598811078ee8d18f044a873a368d3854d59fa5f0084471411f412a17936702e"], &(0x7f0000000280)=0x1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0), 0x8) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d7660") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0xda2, 0xfffffffffffffffd, 0x0, 'queue0\x00', 0x5}) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') accept4$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002440)={@local}, &(0x7f0000002480)=0x14) accept4$packet(r2, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80000) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 5: clone(0x100001fc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket(0x800000000000, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 01:17:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="15") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 241.898794] vhci_hcd: invalid port number 0 [ 241.908403] vhci_hcd: invalid port number 0 01:17:05 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 01:17:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 242.024382] vhci_hcd: invalid port number 0 [ 242.044452] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 242.060062] vhci_hcd: invalid port number 0 01:17:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 01:17:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:06 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 242.083507] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 242.120693] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 242.186675] vhci_hcd: invalid port number 0 [ 242.195324] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 242.216328] input input9: cannot allocate more than FF_MAX_EFFECTS effects 01:17:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) exit(0x5) userfaultfd(0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000400)) ioctl$TCSBRK(r1, 0x5409, 0x100000001) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="ee0000006c3e77d600af057e387e439802acbe23f25c1990d50b853f925144943d4f867280c680403bf89fa2415a1193aeb26db12d3271bb97ea11820395c033942cf49cdace3e07a0421af8523914e37323869120f5bdc0284795cf0835d99966fb1437c25356fa32bb287051519b42231d3b39e89dfae50a404e4f851894d73fe2101770995102bf11031f9d22a226cf7117fb2f9e41a903e7b7d1d526f2b2e70598811078ee8d18f044a873a368d3854d59fa5f0084471411f412a17936702e"], &(0x7f0000000280)=0x1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0), 0x8) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d7660") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0xda2, 0xfffffffffffffffd, 0x0, 'queue0\x00', 0x5}) socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') accept4$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000002440)={@local}, &(0x7f0000002480)=0x14) accept4$packet(r2, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80000) 01:17:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 01:17:06 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:06 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 242.689409] vhci_hcd: invalid port number 0 01:17:06 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:06 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 242.710580] vhci_hcd: invalid port number 0 01:17:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 242.740078] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 01:17:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz'}, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f00008da000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000cd5000/0x4000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./control\x00', 0x111041, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000002c0), &(0x7f0000000340)=0x4) umount2(&(0x7f00000007c0)='./control\x00', 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000400)='./control\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) [ 242.798538] vhci_hcd: invalid port number 0 [ 242.808991] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 242.887078] vhci_hcd: invalid port number 0 [ 242.895268] vhci_hcd: invalid port number 0 01:17:07 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:07 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff47}, 0x28) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)=ANY=[], &(0x7f0000001ffc), 0x1400) 01:17:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d76") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:07 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:07 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:07 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d76") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 243.547606] vhci_hcd: invalid port number 0 01:17:07 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:07 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 243.601585] vhci_hcd: invalid port number 0 01:17:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x401000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0), 0x1000) splice(r3, 0x0, r1, 0x0, 0x38, 0x0) 01:17:07 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d7660") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:07 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:07 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d7660") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 243.769914] vhci_hcd: invalid port number 0 [ 243.831542] vhci_hcd: invalid port number 0 01:17:08 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:08 executing program 4: signalfd4(0xffffffffffffff9c, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shmget(0x0, 0x4000, 0x54000180, &(0x7f0000ffc000/0x4000)=nil) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x6) accept$alg(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000060100008}) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:08 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 244.387714] input input12: cannot allocate more than FF_MAX_EFFECTS effects 01:17:08 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 244.428309] vhci_hcd: invalid port number 0 01:17:08 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 01:17:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 244.515276] input:  as /devices/virtual/input/input13 01:17:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 244.592980] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 01:17:09 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:09 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)) 01:17:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 01:17:09 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x1ff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x7}) 01:17:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:09 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 245.267116] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 245.275423] input:  as /devices/virtual/input/input14 01:17:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x224600, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}, 0x14) eventfd(0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x0, 0xffffffff}, "706f72743100000000000000000000000000000a972db50000000000000000000000000000000000000000000000000000000000ffffffffffffffff00", 0x20, 0x0, 0x5, 0x5, 0x0, 0xf6b8, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4b8, 0x200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x8b9, 0x4) 01:17:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008d40)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000008e40)=0xe8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) 01:17:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 245.405121] input:  as /devices/virtual/input/input15 01:17:10 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000840)) 01:17:10 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:10 executing program 4: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{}]}) 01:17:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:10 executing program 4: setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x1b, 0x1, 0x2, "f7d52b0cdfab672b026557528d1bcb87", "e3836bdca8dc"}, 0x1b, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x100000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 246.189375] input:  as /devices/virtual/input/input16 01:17:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 01:17:10 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5}]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000840)) [ 246.352126] input:  as /devices/virtual/input/input17 01:17:11 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) 01:17:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:11 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 01:17:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_getroute={0x1c, 0x1a, 0x421}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 01:17:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) [ 247.089641] input:  as /devices/virtual/input/input18 [ 247.094003] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 01:17:11 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 247.228972] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 247.266597] input:  as /devices/virtual/input/input19 01:17:11 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 247.389092] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 247.430292] input:  as /devices/virtual/input/input20 01:17:11 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) 01:17:11 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300)="a4", 0x0) write$P9_RLERROR(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, {0x1, "a4"}}, 0xa) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) 01:17:11 executing program 1: clone(0x20040200, &(0x7f0000000180), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, &(0x7f0000000240), 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(0x0, 0x1000000000016) open$dir(&(0x7f0000000600)='./file0\x00', 0x27e, 0x0) 01:17:11 executing program 4: r0 = socket$inet6(0xa, 0x1008000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) read(r1, &(0x7f0000000240)=""/205, 0xfdfa) sendto$inet6(r1, &(0x7f0000000340)="65a8", 0x2, 0x8001, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT], 0xfc8d) 01:17:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:11 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 247.984911] input:  as /devices/virtual/input/input21 01:17:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:12 executing program 0: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@nodiscard='nodiscard'}]}) [ 248.033571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:17:12 executing program 4: r0 = socket$inet6(0xa, 0x1008000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) read(r1, &(0x7f0000000240)=""/205, 0xfdfa) sendto$inet6(r1, &(0x7f0000000340)="65a8", 0x2, 0x8001, &(0x7f0000000440)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT], 0xfc8d) [ 248.098668] cgroup: fork rejected by pids controller in /syz0 01:17:12 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a18", 0xd}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 248.212725] input:  as /devices/virtual/input/input22 01:17:12 executing program 4: perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) 01:17:12 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) 01:17:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x4, 0x6, 0x319}, 0x14}}, 0x0) 01:17:12 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a18", 0xd}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:12 executing program 4: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@errors_recover='errors=recover'}, {@fmask={'fmask', 0x3d, 0x7f}}, {@show_sys_files_yes='show_sys_files=yes'}, {@dmask={'dmask', 0x3d, 0xee}}, {@show_sys_files_yes='show_sys_files=yes'}], [{@appraise_type='appraise_type=imasig'}]}) 01:17:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'veth0_to_team\x00', {0x2, 0x0, @multicast1}}) 01:17:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)) [ 248.894367] input:  as /devices/virtual/input/input23 [ 248.904389] ntfs: (device loop4): parse_options(): Unrecognized mount option appraise_type. 01:17:12 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a18", 0xd}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 248.937099] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 249.019828] input:  as /devices/virtual/input/input24 [ 249.057555] ntfs: (device loop4): parse_options(): Unrecognized mount option appraise_type. 01:17:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace(0x11, r2) 01:17:13 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c18471", 0x13}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 249.079602] ntfs: (device loop4): parse_options(): Unrecognized mount option . 01:17:13 executing program 4: mprotect(&(0x7f000021f000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) arch_prctl(0x0, &(0x7f0000000980)) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000840), 0x0) pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480)={0x0, 0x0, 0x0, 0x86}, &(0x7f0000000740)={0x0, 0x3, 0x10000, 0xc29, 0x0, 0x1}, &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0), 0x8}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280)) tkill(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) [ 249.127053] IPVS: ftp: loaded support on port[0] = 21 [ 249.194615] input:  as /devices/virtual/input/input25 01:17:13 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c18471", 0x13}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 249.303419] input:  as /devices/virtual/input/input26 01:17:13 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:13 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c18471", 0x13}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400), 0x0) 01:17:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:13 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, &(0x7f0000000200)='/dev/loop0\x00') [ 249.765437] cgroup2: Unknown parameter '/dev/loop0' [ 249.770509] input:  as /devices/virtual/input/input27 [ 250.314619] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.321038] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.328537] device bridge_slave_0 entered promiscuous mode [ 250.343602] device bridge_slave_1 left promiscuous mode [ 250.349099] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.393804] device bridge_slave_0 left promiscuous mode [ 250.399238] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.301326] team0 (unregistering): Port device team_slave_1 removed [ 251.310259] team0 (unregistering): Port device team_slave_0 removed [ 251.319654] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 251.385639] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 251.437610] bond0 (unregistering): Released all slaves [ 251.487335] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.499960] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.507064] device bridge_slave_1 entered promiscuous mode [ 251.530865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.555646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 251.618405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.657394] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 251.820352] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 251.827973] team0: Port device team_slave_0 added [ 251.862872] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.870350] team0: Port device team_slave_1 added [ 251.905197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.942594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.981129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.988793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.997844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.025047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.032243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.041643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.294118] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.300515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.307328] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.314249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.321573] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 252.533288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.044175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.118207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.187790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.193982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.202266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.274092] 8021q: adding VLAN 0 to HW filter on device team0 01:17:17 executing program 0: 01:17:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8026}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x224600, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}, 0x14) eventfd(0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x0, 0xffffffff}, "706f72743100000000000000000000000000000a972db50000000000000000000000000000000000000000000000000000000000ffffffffffffffff00", 0x20, 0x0, 0x5, 0x5, 0x0, 0xf6b8, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4b8, 0x200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x8b9, 0x4) 01:17:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) 01:17:17 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce", 0x16}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:17 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:17 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") [ 253.726307] input:  as /devices/virtual/input/input28 01:17:17 executing program 0: 01:17:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="153f6234488dd25d766070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x14}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 01:17:17 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce", 0x16}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:17 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 01:17:17 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:17 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='gfs2meta\x00', 0x0, &(0x7f00000000c0)='ramfs\x00') [ 253.863515] input:  as /devices/virtual/input/input29 01:17:17 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000003580), 0x0, &(0x7f0000000340)=[{0x30, 0x0, 0x7, "44240ff16f013c14ed83481540fecc30356e9c19e16c0000000000000000000000"}], 0x30}, 0x0) 01:17:17 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce", 0x16}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 253.988719] Filesystem requires source device 01:17:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') r2 = dup(r1) sendfile(r0, r2, &(0x7f0000000000), 0x400000000000080) 01:17:17 executing program 1: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bridge0\x00') 01:17:18 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 254.013880] input:  as /devices/virtual/input/input30 01:17:18 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 01:17:18 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21", 0x18}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:18 executing program 1: mprotect(&(0x7f000021f000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) arch_prctl(0x0, &(0x7f0000000980)) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000840), 0x0) pselect6(0x40, &(0x7f0000000440)={0x9fd5, 0xffffffff, 0x1400000, 0x0, 0x5}, &(0x7f0000000480), &(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0), 0x8}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280)) tkill(0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)={@remote, @remote}, 0x8) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) 01:17:18 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/net/pfkey\x00', 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @dev}, &(0x7f0000000500)=0x10) mprotect(&(0x7f000021f000/0x2000)=nil, 0x2000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, 0x10) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x1c3968b2) 01:17:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488d") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 254.666657] input:  as /devices/virtual/input/input31 01:17:18 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21", 0x18}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 254.755504] vhci_hcd: invalid port number 0 01:17:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:18 executing program 1: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x41) fcntl$dupfd(r0, 0x0, r0) dup2(r0, r0) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffff00000001, 0x20001) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x2f9, 0x40000) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6, 0x92f9fb6c06cf2489) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="d292858b1281d23b706bcc0ef196f49396fe0b5c0f73bf4befedc70761051e3425ef2a08d19bf932508416bb6616"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400202, 0xa8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x10202, 0x0) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 01:17:18 executing program 0 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 254.822818] input:  as /devices/virtual/input/input32 [ 254.895414] FAULT_INJECTION: forcing a failure. [ 254.895414] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 254.924625] CPU: 0 PID: 9813 Comm: syz-executor0 Not tainted 4.19.0-rc7-next-20181010+ #91 [ 254.933078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.942447] Call Trace: [ 254.945137] dump_stack+0x244/0x3ab [ 254.948799] ? dump_stack_print_info.cold.2+0x52/0x52 [ 254.954113] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 254.959099] should_fail.cold.4+0xa/0x17 [ 254.963184] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 254.968343] ? lock_downgrade+0x900/0x900 [ 254.972512] ? mark_held_locks+0x130/0x130 [ 254.976767] ? lock_acquire+0x1ed/0x520 [ 254.980795] ? usbdev_do_ioctl+0x28d/0x3b50 [ 254.985271] ? fs_reclaim_acquire+0x20/0x20 [ 254.989615] ? lock_downgrade+0x900/0x900 [ 254.993781] ? lock_release+0xa10/0xa10 [ 254.997810] ? perf_trace_sched_process_exec+0x860/0x860 [ 255.003321] ? __mutex_lock+0x85e/0x16f0 [ 255.007467] ? __might_sleep+0x95/0x190 [ 255.011465] __alloc_pages_nodemask+0x34b/0xdd0 [ 255.016156] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 255.021263] ? __might_fault+0x12b/0x1e0 [ 255.025352] ? lock_release+0xa10/0xa10 [ 255.029342] ? perf_trace_sched_process_exec+0x860/0x860 [ 255.034870] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 255.039934] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 255.045177] ? releaseintf+0xc0/0xc0 [ 255.048905] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 255.054534] alloc_pages_current+0x173/0x350 [ 255.058998] __get_free_pages+0xc/0x40 [ 255.062902] proc_control+0x227/0xf00 [ 255.066716] ? proc_bulk+0xa90/0xa90 [ 255.070453] usbdev_do_ioctl+0x1eb8/0x3b50 [ 255.074708] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 255.079574] ? mark_held_locks+0x130/0x130 [ 255.083876] ? dput.part.25+0x26d/0x860 [ 255.087871] ? shrink_dcache_sb+0x350/0x350 [ 255.092213] ? lock_acquire+0x1ed/0x520 [ 255.096232] ? __fdget_pos+0x1bb/0x200 [ 255.100141] ? lock_release+0xa10/0xa10 [ 255.104133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 255.109720] ? _parse_integer+0x134/0x180 [ 255.114025] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 255.119579] ? _kstrtoull+0x188/0x250 [ 255.123393] ? _parse_integer+0x180/0x180 [ 255.127558] ? lock_release+0xa10/0xa10 [ 255.131546] ? perf_trace_sched_process_exec+0x860/0x860 [ 255.137050] ? usercopy_warn+0x110/0x110 [ 255.141141] ? __fget+0x4aa/0x740 [ 255.144610] ? lock_downgrade+0x900/0x900 [ 255.148775] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 255.153764] ? workqueue_set_max_active+0x10/0x3e0 [ 255.158716] ? __f_unlock_pos+0x19/0x20 [ 255.162709] ? __fget+0x4d1/0x740 [ 255.166181] ? ksys_dup3+0x680/0x680 [ 255.169913] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 255.174901] usbdev_ioctl+0x25/0x30 [ 255.178577] ? usbdev_compat_ioctl+0x30/0x30 [ 255.183003] do_vfs_ioctl+0x1de/0x1720 [ 255.186968] ? fsnotify_first_mark+0x350/0x350 [ 255.191577] ? __fsnotify_parent+0xcc/0x420 [ 255.195916] ? ioctl_preallocate+0x300/0x300 [ 255.200520] ? __fget_light+0x2e9/0x430 [ 255.204510] ? fget_raw+0x20/0x20 [ 255.208039] ? __sb_end_write+0xd9/0x110 [ 255.212120] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 255.217669] ? fput+0x130/0x1a0 [ 255.220993] ? ksys_write+0x1ae/0x260 [ 255.224904] ? security_file_ioctl+0x94/0xc0 [ 255.229362] ksys_ioctl+0xa9/0xd0 [ 255.232837] __x64_sys_ioctl+0x73/0xb0 [ 255.236813] do_syscall_64+0x1b9/0x820 [ 255.240713] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 255.246094] ? syscall_return_slowpath+0x5e0/0x5e0 [ 255.251036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.255911] ? trace_hardirqs_on_caller+0x310/0x310 [ 255.260998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 255.266031] ? prepare_exit_to_usermode+0x291/0x3b0 [ 255.271066] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.275928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 255.281160] RIP: 0033:0x457519 [ 255.284366] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.303278] RSP: 002b:00007fac19332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.311003] RAX: ffffffffffffffda RBX: 00007fac19332c90 RCX: 0000000000457519 [ 255.318284] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 255.325565] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 255.332844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac193336d4 [ 255.340122] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000005 01:17:19 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:19 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21", 0x18}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:19 executing program 4 (fault-call:3 fault-nth:0): ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004550f, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 255.500057] vhci_hcd: invalid port number 0 [ 255.520068] input:  as /devices/virtual/input/input33 01:17:19 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 255.674745] vhci_hcd: invalid port number 0 01:17:19 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:19 executing program 1: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x41) fcntl$dupfd(r0, 0x0, r0) dup2(r0, r0) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffff00000001, 0x20001) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x2f9, 0x40000) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6, 0x92f9fb6c06cf2489) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="d292858b1281d23b706bcc0ef196f49396fe0b5c0f73bf4befedc70761051e3425ef2a08d19bf932508416bb6616"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400202, 0xa8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x10202, 0x0) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 255.891778] input input34: cannot allocate more than FF_MAX_EFFECTS effects 01:17:20 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:20 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x2, {0x0, 0x1}}, 0x20) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc020660b, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:20 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:20 executing program 1: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x2, 0x41) fcntl$dupfd(r0, 0x0, r0) dup2(r0, r0) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffff00000001, 0x20001) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x2f9, 0x40000) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6, 0x92f9fb6c06cf2489) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='io.stat\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="d292858b1281d23b706bcc0ef196f49396fe0b5c0f73bf4befedc70761051e3425ef2a08d19bf932508416bb6616"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400202, 0xa8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x10202, 0x0) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) r6 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x14) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 01:17:20 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018550a, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 256.343904] vhci_hcd: invalid port number 0 01:17:20 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = epoll_create1(0x80000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1f, 0x3, 0xcf, 0x9, 0x8}) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x6, 0x4) 01:17:20 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 256.385817] vhci_hcd: invalid port number 0 01:17:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551d, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 256.537258] vhci_hcd: invalid port number 0 01:17:20 executing program 5 (fault-call:4 fault-nth:0): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:20 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0x0, 0xfffffffffffffffd}) [ 256.650398] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 256.678919] vhci_hcd: invalid port number 0 [ 256.688334] FAULT_INJECTION: forcing a failure. [ 256.688334] name failslab, interval 1, probability 0, space 0, times 1 [ 256.699561] CPU: 1 PID: 9934 Comm: syz-executor5 Not tainted 4.19.0-rc7-next-20181010+ #91 [ 256.708172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.717636] Call Trace: [ 256.720260] dump_stack+0x244/0x3ab [ 256.723924] ? dump_stack_print_info.cold.2+0x52/0x52 [ 256.729178] should_fail.cold.4+0xa/0x17 [ 256.733276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.738413] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 256.743547] ? is_bpf_text_address+0xac/0x170 [ 256.748070] ? lock_downgrade+0x900/0x900 [ 256.752249] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 256.757331] ? kasan_check_read+0x11/0x20 [ 256.761506] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 256.766808] ? rcu_softirq_qs+0x20/0x20 [ 256.770858] ? unwind_dump+0x190/0x190 [ 256.774817] ? __sigqueue_alloc+0x251/0x710 [ 256.779167] ? lock_downgrade+0x900/0x900 [ 256.783383] __should_failslab+0x124/0x180 [ 256.787643] should_failslab+0x9/0x14 [ 256.791476] kmem_cache_alloc+0x47/0x730 [ 256.795568] __sigqueue_alloc+0x3db/0x710 [ 256.799739] ? dequeue_signal+0x630/0x630 [ 256.803911] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.809331] ? trace_hardirqs_off+0xb8/0x310 [ 256.813848] ? kasan_check_read+0x11/0x20 [ 256.818079] ? do_raw_spin_unlock+0xa7/0x2f0 [ 256.822636] ? trace_hardirqs_on+0x310/0x310 [ 256.827126] ? check_preemption_disabled+0x48/0x200 [ 256.832180] ? mark_held_locks+0x130/0x130 [ 256.836446] __send_signal+0xd1d/0x1bb0 [ 256.840456] ? prepare_signal+0xe50/0xe50 [ 256.844636] ? __kasan_slab_free+0x119/0x150 [ 256.849139] ? uinput_destroy_device+0xf8/0x250 [ 256.853833] ? kfree+0x1bd/0x230 [ 256.857227] ? uinput_destroy_device+0x128/0x250 [ 256.862018] ? lock_acquire+0x1ed/0x520 [ 256.866025] ? force_sig_info+0x55/0x310 [ 256.870113] ? uinput_request_submit.part.9+0x2d0/0x2d0 [ 256.875510] ? kasan_check_read+0x11/0x20 [ 256.879681] ? do_raw_spin_lock+0x14f/0x330 [ 256.884031] ? __fget+0x4d1/0x740 [ 256.887514] ? __rwlock_init+0x140/0x140 [ 256.891600] ? trace_hardirqs_on+0x310/0x310 [ 256.896390] send_signal+0x4a/0xe0 [ 256.899986] force_sig_info+0x250/0x310 [ 256.904014] force_sig_fault+0x12c/0x1d0 [ 256.908109] ? force_sigsegv+0x110/0x110 [ 256.912200] ? kasan_check_write+0x14/0x20 [ 256.916464] ? up_read+0x225/0x2c0 [ 256.920046] __bad_area_nosemaphore+0x31d/0x410 [ 256.924753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.930324] bad_area+0x69/0x80 [ 256.933628] __do_page_fault+0x9db/0xd10 [ 256.937723] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 256.943306] do_page_fault+0xed/0x7d1 [ 256.947132] ? vmalloc_sync_all+0x30/0x30 [ 256.951313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.956880] ? error_entry+0x70/0xd0 [ 256.960623] ? trace_hardirqs_off_caller+0xbb/0x300 [ 256.965666] ? trace_hardirqs_on_caller+0xc0/0x310 [ 256.970618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.975570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.980432] ? trace_hardirqs_on_caller+0x310/0x310 [ 256.985479] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 256.990978] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.996019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.001058] ? page_fault+0x8/0x30 [ 257.004622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.009600] ? page_fault+0x8/0x30 [ 257.013337] page_fault+0x1e/0x30 [ 257.016807] RIP: 0033: (null) [ 257.020848] Code: Bad RIP value. [ 257.024226] RSP: 002b:00007fd0f0af9c80 EFLAGS: 00010286 [ 257.029696] RAX: ffffffffffffffff RBX: 00007fd0f0af9c90 RCX: 0000000000457519 [ 257.037072] RDX: 0000000020000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 257.044365] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.051655] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd0f0afa6d4 [ 257.058968] R13: 00000000004c124c R14: 00000000004d1e48 R15: 0000000000000004 01:17:21 executing program 1 (fault-call:2 fault-nth:0): clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:21 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bond0\x00'}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045503, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:21 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:21 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x2, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 257.341297] vhci_hcd: invalid port number 0 [ 257.347554] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 257.424674] FAULT_INJECTION: forcing a failure. [ 257.424674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.467066] CPU: 1 PID: 9971 Comm: syz-executor1 Not tainted 4.19.0-rc7-next-20181010+ #91 [ 257.475534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.484913] Call Trace: [ 257.487551] dump_stack+0x244/0x3ab [ 257.491204] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.496423] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 257.501374] should_fail.cold.4+0xa/0x17 [ 257.505456] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.510578] ? lock_downgrade+0x900/0x900 [ 257.514745] ? mark_held_locks+0x130/0x130 [ 257.519007] ? lock_acquire+0x1ed/0x520 [ 257.523003] ? usbdev_do_ioctl+0x28d/0x3b50 [ 257.527347] ? fs_reclaim_acquire+0x20/0x20 [ 257.531686] ? lock_downgrade+0x900/0x900 [ 257.536032] ? lock_release+0xa10/0xa10 [ 257.540021] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.545497] ? __mutex_lock+0x85e/0x16f0 [ 257.549576] ? __might_sleep+0x95/0x190 [ 257.553581] __alloc_pages_nodemask+0x34b/0xdd0 [ 257.558276] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 257.563315] ? __might_fault+0x12b/0x1e0 [ 257.567397] ? lock_release+0xa10/0xa10 [ 257.571390] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.576859] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 257.581894] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 257.587098] ? releaseintf+0xc0/0xc0 [ 257.590830] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 257.596385] alloc_pages_current+0x173/0x350 [ 257.600817] __get_free_pages+0xc/0x40 [ 257.604721] proc_control+0x227/0xf00 [ 257.608536] ? proc_bulk+0xa90/0xa90 [ 257.612275] usbdev_do_ioctl+0x1eb8/0x3b50 [ 257.616525] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 257.621392] ? mark_held_locks+0x130/0x130 [ 257.625738] ? dput.part.25+0x26d/0x860 [ 257.629818] ? shrink_dcache_sb+0x350/0x350 [ 257.634157] ? lock_acquire+0x1ed/0x520 [ 257.638182] ? __fdget_pos+0x1bb/0x200 [ 257.642089] ? lock_release+0xa10/0xa10 [ 257.646078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.651631] ? _parse_integer+0x134/0x180 [ 257.655856] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 257.661409] ? _kstrtoull+0x188/0x250 [ 257.665228] ? _parse_integer+0x180/0x180 [ 257.669391] ? lock_release+0xa10/0xa10 [ 257.673376] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.678841] ? usercopy_warn+0x110/0x110 [ 257.683100] ? __fget+0x4aa/0x740 [ 257.686569] ? lock_downgrade+0x900/0x900 [ 257.690738] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 257.695680] ? workqueue_set_max_active+0x10/0x3e0 [ 257.700628] ? __f_unlock_pos+0x19/0x20 [ 257.704619] ? __fget+0x4d1/0x740 [ 257.708177] ? ksys_dup3+0x680/0x680 [ 257.712013] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 257.717194] usbdev_ioctl+0x25/0x30 [ 257.720838] ? usbdev_compat_ioctl+0x30/0x30 [ 257.725259] do_vfs_ioctl+0x1de/0x1720 [ 257.729164] ? fsnotify_first_mark+0x350/0x350 [ 257.733762] ? __fsnotify_parent+0xcc/0x420 [ 257.738104] ? ioctl_preallocate+0x300/0x300 [ 257.742525] ? __fget_light+0x2e9/0x430 [ 257.746516] ? fget_raw+0x20/0x20 [ 257.750003] ? __sb_end_write+0xd9/0x110 [ 257.754080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 257.759713] ? fput+0x130/0x1a0 [ 257.763007] ? ksys_write+0x1ae/0x260 [ 257.766821] ? security_file_ioctl+0x94/0xc0 [ 257.771245] ksys_ioctl+0xa9/0xd0 [ 257.774713] __x64_sys_ioctl+0x73/0xb0 [ 257.778704] do_syscall_64+0x1b9/0x820 [ 257.782602] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.787999] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.792966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.797829] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.802863] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.807895] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.812933] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.817831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.823031] RIP: 0033:0x457519 [ 257.826240] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.845154] RSP: 002b:00007fab08401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.852879] RAX: ffffffffffffffda RBX: 00007fab08401c90 RCX: 0000000000457519 [ 257.860159] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 01:17:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:21 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x8004552d, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:21 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x0}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x1}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2, 0x2}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 257.867439] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.874722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab084026d4 [ 257.882001] R13: 00000000004bf65f R14: 00000000004cf538 R15: 0000000000000004 01:17:21 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045564, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 257.919410] vhci_hcd: invalid port number 0 01:17:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:21 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x181000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000300)=0x4) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r1, 0x0, 0x948, 0x1, 0xe2f}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x1}, 0x8) sendto$inet(r1, &(0x7f0000000100)="4b549ccde9f8c9044b4105114c019fabf9dcb83b6ae2f3d6d325c8b76bfaec505879c90a8639b9f2b8c42242e6e651d6189dad701743d518050c8d46b7bedff7c1b4e499589c61385889849220f5ea42f4c4c3f438782776db42368bc00d23dbfa70ac565b113b8d998a93ae66f277d019934f734b4666999590262a9a010ea7d37ce1258519f50070eec37a7835f43156c81aa5cd65f2a84246a364e1fff8010d6a3f8b5f124fa6fd0d201a63cd4bfdf5a32e106c1b357c0ddb8714c1741ca6ba856e11fec7739d697d9ff31551316ef4402998f8b2f896fd0f0129001e", 0xde, 0x0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{0x2, 0x4e20, @remote}, {0x6, @local}, 0xc, {0x2, 0x4e24, @multicast2}, 'bond_slave_1\x00'}) 01:17:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x551f, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 258.006204] vhci_hcd: invalid port number 0 01:17:21 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4004556b, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 258.033747] vhci_hcd: invalid port number 0 01:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:22 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80200000000, 0x80001) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000000)={0xa3}) 01:17:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x2, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:22 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc020660b, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:22 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185574, &(0x7f0000000000)={0xa3}) 01:17:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045515, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:22 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045568, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 258.813449] vhci_hcd: invalid port number 0 01:17:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:22 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) r1 = msgget$private(0x0, 0x100) msgsnd(r1, &(0x7f0000000080)={0x0, "4886ae42a9754c1287af5633927e2cbe731166d184d5f2ad5094fb3cd7d7a8a2894dfe8faee6a36ac5b2b0193a626cf45ea3fdbd497ee3b2c706e34793c7f8fda1597f483b689297c408f6399ae234c8cef8804cc4e81b2b8aa1d31e82886b3fc8ac02b8353e529ca432588999d26425de0bd017919a2bab9e60fda0657736f5faed4c4f1b018152eb350281683eff30e0e37dfaaf3ee404400457b9b833c41fff98738fc4f8468c802f9d55e4189cbf6240437e954fc642d6c64a72c1ab62a64dd97c1d9dba178b2334c58b1fbc69d0e5f1bcc9aac0b0ae3200be01329bd12e0547"}, 0xea, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0x0, 0x8, 0x5a}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, r0, 0x1}) 01:17:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000000)={0xa3}) 01:17:23 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185503, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:23 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000100)={0x0, r0}, &(0x7f0000000300)={0x8000, 0x8, 0x66, 0x80000001, 0x80000001, 0x5}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000002c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0xffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="029c0e61918774228440aa35d66b054be601a2", @ANYRES16=r2, @ANYBLOB="08002abd7000fcdbdf250300000008000400030000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000002c0)={0xa, 0x1dd, 0x5de0000000000000, 0x3a6, &(0x7f00000001c0)=""/19, 0x3d, &(0x7f0000000080)=""/61, 0x3b, &(0x7f00000000c0)=""/59}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 01:17:23 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5460, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:23 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185568, &(0x7f0000000000)={0xa3}) 01:17:23 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4004556e, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185508, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:23 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185506, &(0x7f0000000000)={0xa3}) [ 259.693492] vhci_hcd: invalid port number 0 01:17:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 259.759811] vhci_hcd: invalid port number 0 01:17:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008550e, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:23 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x1, 0x9}, 0x0, 0x7, 0x6, {0xffff, 0x8}, 0x44ac, 0x6}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 259.885828] vhci_hcd: invalid port number 0 [ 259.904607] vhci_hcd: invalid port number 0 01:17:24 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018556c, &(0x7f0000000000)={0xa3}) 01:17:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40049409, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:24 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc0189436, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:24 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0x4000000002000002, 0xa52, 0x8, 0xb3fbada}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000100)={0x5, 0x7, 0x5, 0x19c000000000000, 0x401}) 01:17:24 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc00c55ca, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5460, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:24 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) alarm(0x4) 01:17:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000000)={0xa3}) 01:17:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550d, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:24 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5450, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 260.732229] vhci_hcd: invalid port number 0 [ 260.766404] vhci_hcd: invalid port number 0 [ 260.802000] cgroup: fork rejected by pids controller in /syz5 01:17:25 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:25 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000000)={0xa3}) 01:17:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:25 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x80, 0x1, 0x8}}, 0x14) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:25 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x554f, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018557a, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:25 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018557a, &(0x7f0000000000)={0xa3}) 01:17:25 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5421, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 261.544348] vhci_hcd: invalid port number 0 01:17:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 261.573819] vhci_hcd: invalid port number 0 01:17:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:25 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5, 0xffffffffffffffff}) 01:17:25 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000000)={0xa3}) 01:17:26 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:26 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2, 0x10e40) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x8, 0x7fffffff, 0x40, 0x7fff, 0x8, 0x4, 0x4e, 0x80, 0x228, 0x8001, 0x3, 0x2, 0x8001, 0x0, 0x80, 0x1], 0x5000, 0x90100}) write$P9_RWALK(r1, &(0x7f0000000100)={0x71, 0x6f, 0x1, {0x8, [{0x0, 0x2, 0x3}, {0x1, 0x4, 0x3}, {0x2, 0x2, 0x6}, {0x8, 0x4, 0x7}, {0xc0, 0x4, 0x5}, {0x40, 0x3, 0x3}, {0x1, 0x3, 0x5}, {0x40, 0x1}]}}, 0x71) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:26 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045566, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:26 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)={0xa3}) 01:17:26 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x406855c9, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550d, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:26 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000000)={0xa3}) [ 262.431751] vhci_hcd: invalid port number 0 01:17:26 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa7, 0x0, 0x0, 0x3}) [ 262.465169] vhci_hcd: invalid port number 0 01:17:26 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045565, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 262.561318] vhci_hcd: default hub control req: a700 v0000 i0000 l0 01:17:27 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:27 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000000)={0xa3}) 01:17:27 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4004556a, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:27 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x6000) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/86) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:27 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0xa3}) 01:17:27 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0x112) 01:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045519, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 263.315625] vhci_hcd: invalid port number 0 01:17:27 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc0045878, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185574, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 263.436090] vhci_hcd: invalid port number 0 01:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185506, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045569, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:28 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185560, &(0x7f0000000000)={0xa3}) 01:17:28 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185560, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:28 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000000)={0xa3}) [ 264.226525] vhci_hcd: invalid port number 0 01:17:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80040, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x3ff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5563, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:28 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000000)={0xa3}) [ 264.344026] vhci_hcd: invalid port number 0 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc06855c8, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x2fe, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x1, 0xfffffffffffffffc, {}, {0x77359400}, {0x0, 0xd60, 0x8, 0x9}, 0x1, @canfd={{0x4, 0x602d, 0x7, 0x6}, 0x13, 0x3, 0x0, 0x0, "fe698878eb125a04d16074de76b08f537396c676f674182b1752b796a9638a641bb44b4b942486aaf7c416e350f603d5fa6a4d7d7fa82c53d3c881e6082dcf6f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 264.379615] cgroup: fork rejected by pids controller in /syz4 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4004556d, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5451, &(0x7f0000000000)={{}, 'syz1\x00'}) [ 264.488803] vhci_hcd: invalid port number 0 01:17:28 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185507, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:28 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x400c55cb, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:28 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x2000) getsockopt$inet6_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x10000001) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x7fff, 0x0, 0x9}) 01:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5451, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:29 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4020940d, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:29 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000000)={0xa3}) 01:17:29 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x742ba0d7, 0x242100) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x800000000, 0x80000000, 0x7}, 0x1}, 0x1, 0x1, 0x0) 01:17:29 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5502, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x550b, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:29 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:29 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0xc0045878, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0189436, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 265.315763] vhci_hcd: invalid port number 0 01:17:29 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000000)={0xa3}) 01:17:29 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xdb, 0xc0000) ioctl(r0, 0xe41, &(0x7f0000000180)="ec53fd527a3251b9c9a7e26a7f1040c669b7e6f312164661169a376bc747ab8e94c63755f903ff72d7fbf6cc8bbc79c3b13a1388dbcbb77deeaf") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x10000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="0451438ab0ca55a40f39a835930e17551d28eb2949c71f34170e927297000728035ff061309da89ed945d38217a5fcc3832a4e68d29fa77e26290e95d625614ba7b94a131642a142eb9263f58f7e8db537f4fd289db554e2e2683a10072d8cdfd910c23a53b31d6beee2f65a715b1c85df6a516c3bf1bb203850aa4e293675791d731263076f125e60bc915ed639ade4aaf8b94a31") clone(0x2000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x100000000000001) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000140)={0x101, 0x3, 0x1f00, 0xfffffffffffffffc, 0x1}) 01:17:29 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40045567, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004551a, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:29 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000000)={0xa3}) 01:17:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:29 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x40049409, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8108551b, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 265.558713] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #163 [ 265.609261] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor1' sets config #163 01:17:30 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000000)={0xa3}) 01:17:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5452, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018554c, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:30 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:30 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = inotify_init1(0x80000) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}, {@posixacl='posixacl'}, {@uname={'uname'}}, {@access_any='access=any'}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_none='cache=none'}, {@posixacl='posixacl'}], [{@subj_role={'subj_role', 0x3d, 'selfmd5sum%}^'}}, {@euid_gt={'euid>', r2}}, {@hash='hash'}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@uid_eq={'uid', 0x3d, r1}}]}}) 01:17:30 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000000)={0xa3}) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x4008556c, &(0x7f0000000000)={{}, 'syz1\x00'}) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0xffffff7f}, 'syz1\x00'}) 01:17:30 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000000)={0xa3}) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x6}, 'syz1\x00'}) 01:17:30 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000000)={0xa3}) [ 266.295960] IPVS: ftp: loaded support on port[0] = 21 [ 266.315953] input input102: cannot allocate more than FF_MAX_EFFECTS effects 01:17:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:30 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x6000000000000000}, 'syz1\x00'}) 01:17:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5514, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 266.471164] input input103: cannot allocate more than FF_MAX_EFFECTS effects 01:17:30 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") [ 267.206078] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.212497] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.219533] device bridge_slave_0 entered promiscuous mode [ 267.241934] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.248524] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.255521] device bridge_slave_1 entered promiscuous mode [ 267.325046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.348282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.375800] device bridge_slave_1 left promiscuous mode [ 267.381377] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.433744] device bridge_slave_0 left promiscuous mode [ 267.439270] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.373743] team0 (unregistering): Port device team_slave_1 removed [ 268.382380] team0 (unregistering): Port device team_slave_0 removed [ 268.394422] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 268.465497] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 268.523574] bond0 (unregistering): Released all slaves [ 268.596139] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.620277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 268.647389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 268.654429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.676770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.683733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.768702] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.776134] team0: Port device team_slave_0 added [ 268.809313] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.816606] team0: Port device team_slave_1 added [ 268.850326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.887825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.923723] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.930942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.946180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.975819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.983006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.998901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.249506] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.255890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.262441] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.268816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.276199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.583344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.989137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.056053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.122883] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.129137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.136814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.205133] 8021q: adding VLAN 0 to HW filter on device team0 01:17:34 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x10001, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0xfffffffffffff861, @remote, 0x8}}}, 0x84) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0xffffff7f00000000}, 'syz1\x00'}) 01:17:34 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004551e, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:34 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:34 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x4000000}, 'syz1\x00'}) 01:17:34 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x1fe, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x6, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018556c, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 270.632197] input input105: cannot allocate more than FF_MAX_EFFECTS effects [ 270.657744] vhci_hcd: invalid port number 0 01:17:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:34 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x60000000}, 'syz1\x00'}) 01:17:34 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) [ 270.754266] input input106: cannot allocate more than FF_MAX_EFFECTS effects [ 270.765018] vhci_hcd: invalid port number 0 [ 270.771564] vhci_hcd: invalid port number 0 01:17:34 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018550a, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 4: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x4, 0x1, 0x8, 0x0, 0xffff}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xc9, 0x400) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x8000013, &(0x7f00000000c0)=0xfffffffffffffe14) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105502, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:34 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185503, &(0x7f0000000000)={0xa3}) [ 270.809713] vhci_hcd: invalid port number 0 [ 270.823313] vhci_hcd: invalid port number 0 [ 270.884614] input input107: cannot allocate more than FF_MAX_EFFECTS effects [ 270.898472] vhci_hcd: invalid port number 0 01:17:35 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550c, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:35 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x30000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80100, 0x1cb) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000180)={r1, 0x3, 0xff, r2}) clone(0x8001fffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x7, 0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000040)) 01:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:35 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) 01:17:35 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3000000}, 'syz1\x00'}) 01:17:35 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185504, &(0x7f0000000000)={0xa3}) 01:17:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045510, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 271.472838] input input108: cannot allocate more than FF_MAX_EFFECTS effects 01:17:35 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185505, &(0x7f0000000000)={0xa3}) 01:17:35 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x20000000}, 'syz1\x00'}) 01:17:35 executing program 4: ioctl(0xffffffffffffffff, 0x8914, &(0x7f0000000280)="3619c34802759c0c86e20098c55dd6492bea98f7f51593ac48cc7fcbae3a90079f70c80c0a05d26d60574d3065d5224db9e8e477317c15d8dd445197e4c96de74e85f30c015cf9131f07db07dce5e03542879f7e825c5d7c184425c17488f3fc2a8f18595226eae8") r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfff, 0x40000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="baf80c66b808ebba8366efbafc0cb8a700ef0f68380f0666b8040000000f23d00f21f866352000000e0f23f8670f09670f9a130fddeac0cb0666b8560000000f23c00f21f8663500000e000f23f866b9a20100000f32", 0x56}], 0x1, 0x2, &(0x7f0000000180), 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x2, 0x2) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000180)) 01:17:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff0000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 271.620644] input input109: cannot allocate more than FF_MAX_EFFECTS effects 01:17:36 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:36 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000000)={0xa3}) 01:17:36 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x91, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:36 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x1000000}, 'syz1\x00'}) 01:17:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff0000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:36 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000000)={0xa3}) 01:17:36 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x88001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 272.326275] input input110: cannot allocate more than FF_MAX_EFFECTS effects 01:17:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105500, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:36 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3f00}, 'syz1\x00'}) 01:17:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff0000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:36 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0045878, &(0x7f0000000000)={0xa3}) [ 272.477249] Unknown ioctl 44545 [ 272.504303] vhci_hcd: invalid port number 0 [ 272.523322] Unknown ioctl 44545 01:17:37 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185505, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:37 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x480100, 0x0) fstatfs(r0, &(0x7f0000000100)=""/140) ioctl(0xffffffffffffffff, 0x8913, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f00000000c0)={0xa3, 0x0, 0x2}) fcntl$setsig(r1, 0xa, 0xc) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xfffffffffffffffb) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x320, 0x4) 01:17:37 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3f000000}, 'syz1\x00'}) 01:17:37 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185548, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:37 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x400) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) socketpair$inet6(0xa, 0xe, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x0, 0x40}]}, 0xc, 0x2) recvmmsg(r0, &(0x7f0000007b40)=[{{&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/169, 0xa9}], 0x3, 0x0, 0x0, 0x4}, 0x6}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000640)=""/134, 0x86}], 0x2, &(0x7f0000000700)=""/205, 0xcd, 0x2}, 0x40000}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/72, 0x48}], 0x2, &(0x7f00000018c0)=""/70, 0x46, 0x3}, 0x7ff}, {{&(0x7f0000001940)=@hci, 0x80, &(0x7f0000004dc0)=[{&(0x7f00000019c0)=""/23, 0x17}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/195, 0xc3}, {&(0x7f0000002b00)=""/39, 0x27}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/207, 0xcf}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x585}, 0x2}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000004e80)=""/225, 0xe1}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/105, 0x69}, {&(0x7f0000006000)=""/63, 0x3f}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/90, 0x5a}, {&(0x7f00000070c0)=""/6, 0x6}], 0x7, &(0x7f0000007180)=""/60, 0x3c, 0x7}, 0x2835}, {{&(0x7f00000071c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000007280)=[{&(0x7f0000007240)=""/21, 0x15}], 0x1, 0x0, 0x0, 0x7}, 0x5e5}, {{&(0x7f00000072c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000007700)=[{&(0x7f0000007340)=""/149, 0x95}, {&(0x7f0000007400)=""/105, 0x69}, {&(0x7f0000007480)=""/57, 0x39}, {&(0x7f00000074c0)=""/206, 0xce}, {&(0x7f00000075c0)=""/37, 0x25}, {&(0x7f0000007600)=""/200, 0xc8}], 0x6, &(0x7f0000007780)=""/118, 0x76, 0x2}, 0x9}, {{0x0, 0x0, &(0x7f0000007a80)=[{&(0x7f0000007800)=""/238, 0xee}, {&(0x7f0000007900)=""/175, 0xaf}, {&(0x7f00000079c0)=""/94, 0x5e}, {&(0x7f0000007a40)=""/59, 0x3b}], 0x4, &(0x7f0000007ac0)=""/121, 0x79, 0x3}, 0x8}], 0x8, 0x10042, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000007d40)=0x140000000000000, 0x2) r3 = dup(r1) write$FUSE_INIT(r3, &(0x7f0000007d80)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x1b, 0x2, 0x8000, 0x7fffffff, 0x1, 0x3, 0x7}}, 0x50) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 273.292507] vhci_hcd: invalid port number 0 01:17:37 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000000)={0xa3}) [ 273.380778] vhci_hcd: invalid port number 0 [ 273.382689] IPVS: ftp: loaded support on port[0] = 21 01:17:37 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:37 executing program 4: ioctl(0xffffffffffffffff, 0x8932, &(0x7f0000000100)="e0912c205adf9ea0b4534ffbe1d439fb5fe9dd080762e2c011ae95d3df1ef38d80e3cc471e6029298c566fde3ebf02ec418fc46e9c7a197fcab48b33ad65993bc25a8ab17163a0771d2f4742dc25ee072749b5c13e24de608cb372ecb1ced660278809a40c87f2b7bf8d6e1208026e2cfdf502519ba02f6727fcefbe021d56e51c518dc00200c6a2d7cd00005316b58168cb81222be5618b99a7bdba7fabaf7fa1988071000000000000") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={r1, 0x4}, &(0x7f0000000280)=0x8) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x400000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080)=0xff, 0x4) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185504, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:37 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000000)={0xa3}) 01:17:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 274.071816] vhci_hcd: invalid port number 0 [ 274.092240] vhci_hcd: invalid port number 0 [ 274.266001] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.272493] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.279558] device bridge_slave_0 entered promiscuous mode [ 274.286698] device bridge_slave_1 left promiscuous mode [ 274.292257] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.343967] device bridge_slave_0 left promiscuous mode [ 274.349494] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.364407] team0 (unregistering): Port device team_slave_1 removed [ 275.373021] team0 (unregistering): Port device team_slave_0 removed [ 275.381446] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 275.435434] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 275.488676] bond0 (unregistering): Released all slaves [ 275.537318] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.544422] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.551221] device bridge_slave_1 entered promiscuous mode [ 275.572850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 275.598570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 275.659469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.683530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.819530] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 275.826810] team0: Port device team_slave_0 added [ 275.860294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 275.867778] team0: Port device team_slave_1 added [ 275.901148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.939057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.978803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 275.986477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.001539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.030704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 276.037853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.048789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.300838] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.307246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.313908] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.320240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.327478] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 276.553273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.027362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.093903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.161149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 277.167303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.174543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.243056] 8021q: adding VLAN 0 to HW filter on device team0 01:17:41 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x6000000}, 'syz1\x00'}) 01:17:41 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0xa3}) 01:17:41 executing program 4: ioctl(0xffffffffffffffff, 0x9, &(0x7f00000000c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x8000) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0xfffffffffffffff9, 0x6, 0x6, 0x1f, 0x2, 0x5}) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5450, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:41 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") [ 277.626728] input input111: cannot allocate more than FF_MAX_EFFECTS effects [ 277.635014] input input112: cannot allocate more than FF_MAX_EFFECTS effects 01:17:41 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000000)={0xa3}) 01:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551c, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 277.694627] vhci_hcd: invalid port number 0 [ 277.713542] input input113: cannot allocate more than FF_MAX_EFFECTS effects 01:17:41 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x401, 0x0) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 01:17:41 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:41 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000000)={0xa3}) [ 277.738147] input input114: cannot allocate more than FF_MAX_EFFECTS effects 01:17:41 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x700}, 'syz1\x00'}) [ 277.804788] vhci_hcd: invalid port number 0 01:17:41 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185508, &(0x7f0000000000)={0xa3}) 01:17:41 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x5}, 'syz1\x00'}) 01:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5421, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 277.885288] input input115: cannot allocate more than FF_MAX_EFFECTS effects [ 277.912426] input input116: cannot allocate more than FF_MAX_EFFECTS effects [ 277.925172] vhci_hcd: invalid port number 0 01:17:41 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105512, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 277.972666] input input117: cannot allocate more than FF_MAX_EFFECTS effects [ 278.002043] input input118: cannot allocate more than FF_MAX_EFFECTS effects 01:17:42 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x300000000000000}, 'syz1\x00'}) 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = semget$private(0x0, 0x7, 0x100) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000040)=""/14) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40085511, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x141000, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x6, &(0x7f0000000180)="84d846d5f1d4bf0482a2d02f55f18072a66c4cc8f71166fba7497f5ca63d9e90880b1e1a4f523417f550f759529a23ea4b0a713ec733688b970b5e33d91d79dc786b4aaeed7225497cf6c5efb60b9902969540864a73345d7cdfd0cd2b53abb677b2ab3317a49297608b2d335d8d12da1bdf4f5e015f899429c649cd131c4c1e2ece4fd41006ba8a8b2db5dccf96a820f0b0af4118de50d2e2c68c88b698cdc90ca41b5b0d178326d5fe25aca446fad6c0e97db30bfef2f4351ed24e5dbca814534d0e619c658a3afe0cb2ab16c9") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x208101) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 278.508944] vhci_hcd: invalid port number 0 01:17:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550c, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 278.548717] input input119: cannot allocate more than FF_MAX_EFFECTS effects [ 278.556842] input input120: cannot allocate more than FF_MAX_EFFECTS effects 01:17:42 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3f00000000000000}, 'syz1\x00'}) 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5452, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045505, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 278.697278] input input121: cannot allocate more than FF_MAX_EFFECTS effects [ 278.725433] input input122: cannot allocate more than FF_MAX_EFFECTS effects [ 278.736747] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor0' sets config #163 01:17:42 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl(r0, 0x5, &(0x7f0000000200)="fe7affe6c4af36a317d9c4206741ee3e79f1832f210421d61dd9ef6595facb0691cc82466af3ab5f34141f8b61b4b88bc2b7fea47388d3a08bd3594252a2bedd76fe2ce79453afda79fe36d462ef78a10d72ed3b50a89bef9d7e3fff74b687adbf0fe9f5e05fb5d9e498e4cf1abc4abc4cc955802cd5d6cc0eea89b0c1c7c48575741f635a69f30139966658d91bdf0078920700ecf6f282ba575361f1a1cda2539100e41a3f08d379cb1aef9311dbba45727d2b39cd40ef43e1e803456f0595b3d5bea138440bf16f414336c20465f812d42ef1e6d1fcc659054bbab7e1be2cce09e5") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x420, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) 01:17:42 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x2000000}, 'syz1\x00'}) 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185502, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 278.752533] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor0' sets config #163 01:17:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000000)={0xa3}) [ 278.804006] vhci_hcd: invalid port number 0 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185568, &(0x7f0000000000)={0xa3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:42 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x5000000}, 'syz1\x00'}) [ 278.861033] input input123: cannot allocate more than FF_MAX_EFFECTS effects 01:17:42 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400881, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40001000002, 0x7d) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc018554c, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:42 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000000)={0xa3}) 01:17:42 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:43 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2, 0x0, 0x0, 0x80a0}) [ 278.997882] input input124: cannot allocate more than FF_MAX_EFFECTS effects 01:17:43 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x2}, 'syz1\x00'}) 01:17:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") [ 279.109128] usb usb9: usbfs: process 11790 (syz-executor0) did not claim interface 0 before use 01:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c00000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:43 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000000)={0xa3}) 01:17:43 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x3, 0x4, 0x39, &(0x7f0000000080)="92b1a31e670a28f3316166cb27972c042436007f5b97fe1bf02c773198bd6ef0aeb6cf65fe92f2af8268164ea6ada489eb76ca6140729e54a6"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") [ 279.149883] input input125: cannot allocate more than FF_MAX_EFFECTS effects 01:17:43 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x400000000000000}, 'syz1\x00'}) 01:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x200000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 279.220474] vhci_hcd: invalid port number 0 01:17:43 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) flock(r0, 0x9) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x400100) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:43 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185507, &(0x7f0000000000)={0xa3}) 01:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 279.274844] vhci_hcd: invalid port number 0 [ 279.292438] input input126: cannot allocate more than FF_MAX_EFFECTS effects [ 279.313598] vhci_hcd: invalid port number 0 01:17:43 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x500000000000000}, 'syz1\x00'}) 01:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffffa0008000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:43 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x100, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0)=0x808000, &(0x7f0000000200)=0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000400)={0x33, 0x6, 0x0, {0x5, 0x1, 0xa, 0x0, '/:trusted:'}}, 0x33) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0x8, 0xbeb4, 0x8, 0x6, 0x8, 0x2}) pipe2$9p(&(0x7f0000000040), 0x800) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r2}, 0x10) getpeername$inet(r3, &(0x7f0000000380)={0x2, 0x0, @rand_addr}, &(0x7f00000003c0)=0x10) fchmod(r1, 0x80) connect$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x2, {0x2, 0x1, 0x5, 0x5, 0x8000, 0x80000001}, 0x3a, 0x8001}, 0xe) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0x4, 0x0, 0x3}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000300)=0x3) 01:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 279.423698] vhci_hcd: invalid port number 16 [ 279.429563] input input127: cannot allocate more than FF_MAX_EFFECTS effects [ 279.438456] vhci_hcd: invalid port number 16 [ 279.445905] input input128: cannot allocate more than FF_MAX_EFFECTS effects 01:17:43 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000000)={0xa3}) 01:17:43 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x600}, 'syz1\x00'}) 01:17:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:43 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x2000) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 279.510043] vhci_hcd: default hub control req: 0400 v0000 i0000 l0 [ 279.574137] input input129: cannot allocate more than FF_MAX_EFFECTS effects [ 279.619826] vhci_hcd: invalid port number 0 [ 279.636618] vhci_hcd: invalid port number 0 01:17:44 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x60}, 'syz1\x00'}) 01:17:44 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000000)={0xa3}) 01:17:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x484, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) recvfrom$packet(r2, &(0x7f0000000280)=""/125, 0x7d, 0x2, &(0x7f0000000380)={0x11, 0x1f, r3, 0x1, 0x81, 0x6, @broadcast}, 0x14) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6f6b8727, 0x400004000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000240)={0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000100)={r5, 0x2}) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000000)={0xa3}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r4, 0x7, 0x2}, 0x10) 01:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:44 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:44 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000000)={0xa3}) [ 280.170711] vhci_hcd: invalid port number 0 [ 280.181021] input input130: cannot allocate more than FF_MAX_EFFECTS effects [ 280.203867] vhci_hcd: invalid port number 0 01:17:44 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000000)={0xa3}) 01:17:44 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x401, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x9) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000500)) r3 = syz_open_procfs(r1, &(0x7f0000000080)='oom_adj\x00') getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000680)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, r5, 0x30, 0x1, @in={0x2, 0x4e20, @rand_addr=0x1}}}, 0xa0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', r4}) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0x6, 0x80000001]) socket$inet_dccp(0x2, 0x6, 0x0) preadv(r3, &(0x7f0000000480), 0x1000000000000147, 0x74000000) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0x7, "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", 0x14, 0x9, 0x1, 0x2, 0x1, 0x9, 0x4, 0x1}, r5}}, 0x128) [ 280.215336] input input131: cannot allocate more than FF_MAX_EFFECTS effects 01:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:44 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:44 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x3}, 'syz1\x00'}) [ 280.333775] vhci_hcd: invalid port number 0 01:17:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:44 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400040, 0x0) write$binfmt_elf64(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xf6a2, 0x1f, 0x6, 0x100000001, 0x4, 0x3, 0x3e, 0x5, 0x283, 0x40, 0x1bf, 0x9, 0x80000001, 0x38, 0x1, 0x26ae, 0x7fff}, [{0x6474e551, 0x1, 0x1, 0x6, 0xc661, 0x0, 0x6, 0x40}], "d057fa35fe06546d91bd0d137f0a367ec8969d334cf61f7962993c2e434a92a67a1826859dfd7237ce8aaf01963ce6acc9", [[], [], [], [], [], []]}, 0x6a9) clone(0x40100, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r1 = dup2(r0, r0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xea8) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x0, 0x7}) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000080)=0x627, 0x4) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0xa3}) 01:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x68}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:44 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x300}, 'syz1\x00'}) [ 280.363634] input input132: cannot allocate more than FF_MAX_EFFECTS effects [ 280.375659] vhci_hcd: invalid port number 0 [ 280.382568] vhci_hcd: invalid port number 0 [ 280.391643] input input133: cannot allocate more than FF_MAX_EFFECTS effects [ 280.500736] vhci_hcd: invalid port number 104 [ 280.508155] input input134: cannot allocate more than FF_MAX_EFFECTS effects [ 280.528140] vhci_hcd: invalid port number 104 01:17:44 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:44 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185548, &(0x7f0000000000)={0xa3}) 01:17:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:44 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}, @map={0x18, 0x6}, @jmp={0x5, 0x4, 0x9, 0x6, 0x3, 0x80, 0xffffffffffffffff}, @jmp={0x5, 0x3, 0xc, 0xa, 0x3, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x32f8, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x1, [], 0x0, 0xf}, 0x48) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f00000000c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x80) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x10) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:44 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x7}, 'syz1\x00'}) 01:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:45 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:45 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1}) 01:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 281.050389] vhci_hcd: invalid port number 0 [ 281.055280] vhci_hcd: invalid port number 0 [ 281.063851] vhci_hcd: invalid port number 0 [ 281.065036] input input135: cannot allocate more than FF_MAX_EFFECTS effects 01:17:45 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x100000000000000}, 'syz1\x00'}) 01:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 281.146191] vhci_hcd: invalid port number 0 01:17:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 281.194651] vhci_hcd: invalid port number 0 [ 281.215236] input input136: cannot allocate more than FF_MAX_EFFECTS effects [ 281.224454] usb usb9: usbfs: process 12044 (syz-executor1) did not claim interface 0 before use [ 281.248663] input input137: cannot allocate more than FF_MAX_EFFECTS effects [ 281.268140] vhci_hcd: invalid port number 0 [ 281.294369] vhci_hcd: invalid port number 0 01:17:45 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:45 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00}) 01:17:45 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0xffffffffffffffe0}) 01:17:45 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x600000000000000}, 'syz1\x00'}) 01:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x60}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:45 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0x0, 0x3f}) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:45 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000000000000}) [ 281.910674] input input138: cannot allocate more than FF_MAX_EFFECTS effects [ 281.915199] vhci_hcd: invalid port number 0 [ 281.927293] vhci_hcd: invalid port number 0 [ 281.933708] vhci_hcd: invalid port number 0 [ 281.945892] vhci_hcd: invalid port number 96 01:17:45 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x500}, 'syz1\x00'}) [ 281.957353] vhci_hcd: invalid port number 96 [ 281.976479] vhci_hcd: invalid port number 0 [ 281.993460] vhci_hcd: invalid port number 0 01:17:45 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x600000000000000}) 01:17:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 282.015189] vhci_hcd: invalid port number 0 [ 282.022533] input input139: cannot allocate more than FF_MAX_EFFECTS effects [ 282.089885] vhci_hcd: invalid port number 0 [ 282.122384] vhci_hcd: invalid port number 0 [ 282.128638] vhci_hcd: invalid port number 0 [ 282.149134] vhci_hcd: invalid port number 0 01:17:46 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa0010000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:46 executing program 4: socketpair(0x5, 0x5, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0xff, 0x1, 0x7, 0x8, 0x208}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:46 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x2000000000000000}, 'syz1\x00'}) 01:17:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:46 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000000000000000}) 01:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffff7f}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:46 executing program 4: ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:46 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x200000000000000}, 'syz1\x00'}) [ 282.806797] input input140: cannot allocate more than FF_MAX_EFFECTS effects [ 282.838353] vhci_hcd: invalid port number 0 [ 282.842941] vhci_hcd: invalid port number 0 01:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 282.902951] vhci_hcd: invalid port number 0 [ 282.917607] input input141: cannot allocate more than FF_MAX_EFFECTS effects 01:17:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:46 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 282.944741] input input142: cannot allocate more than FF_MAX_EFFECTS effects [ 282.955761] vhci_hcd: invalid port number 0 [ 283.058379] vhci_hcd: invalid port number 160 [ 283.094312] vhci_hcd: invalid port number 160 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x68000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:47 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x7000000}, 'syz1\x00'}) 01:17:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="4c41be6df3086ae10b89da63371cd834dd7374dd2100d5d049987dc9ebb621b87de19102eaacad004cc6d0e4700969b1dc0ad2beaaa94e008a0fcc0751ce19be8cee290fba543bc0f80a053552e872d225a0df6cfdfe566fc44cb3a7cfdab725cd0c16665f8634501fb032266a7a995dcd079efba507b0bacf1babcb378785e4e9e622ea9195ffd3f132611d79156625fa5c8f3113c03fa3f62fe60a8db6be58d8a08d6682060000009f7aa4d727b239bf140e79e3d9b110b13b33bd634315482a03") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) fchdir(r1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x0, [], [{0xacc, 0xbcfc, 0xcbc0774, 0x8, 0x80000000, 0x16}, {0x8, 0x8, 0xfffffffffffff800, 0x41, 0x9, 0x20}], [[], [], [], [], []]}) 01:17:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500000000000000}) 01:17:47 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 283.278731] input input143: cannot allocate more than FF_MAX_EFFECTS effects [ 283.282031] vhci_hcd: invalid port number 0 [ 283.291295] vhci_hcd: invalid port number 0 [ 283.305428] input input144: cannot allocate more than FF_MAX_EFFECTS effects [ 283.316200] vhci_hcd: invalid port number 0 01:17:47 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) [ 283.326709] vhci_hcd: invalid port number 0 01:17:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10000000000000}) 01:17:47 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x6000}, 'syz1\x00'}) 01:17:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7400000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 283.451166] input input145: cannot allocate more than FF_MAX_EFFECTS effects [ 283.482154] vhci_hcd: invalid port number 0 [ 283.489011] vhci_hcd: invalid port number 0 [ 283.495273] vhci_hcd: invalid port number 0 01:17:47 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x4}, 'syz1\x00'}) 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:47 executing program 4: ioctl(0xffffffffffffffff, 0x8910, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0xbbe, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x80, 0x3, 0x3, 0x9, 0x2, 0x0, 0x6, 0x3, 0x63}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) [ 283.500079] input input146: cannot allocate more than FF_MAX_EFFECTS effects [ 283.500677] vhci_hcd: invalid port number 0 [ 283.524436] vhci_hcd: invalid port number 0 [ 283.534199] vhci_hcd: invalid port number 0 01:17:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa0010000}) [ 283.598585] vhci_hcd: invalid port number 0 [ 283.629067] input input147: cannot allocate more than FF_MAX_EFFECTS effects [ 283.658590] vhci_hcd: invalid port number 0 01:17:47 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:17:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700}) 01:17:47 executing program 4: r0 = userfaultfd(0x80800) ioctl(r0, 0x3ff, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x80000000, 0x5}, {0x100000000, 0x1000}]}, 0x14, 0x2) getsockopt$inet_int(r1, 0x0, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:47 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x700000000000000}, 'syz1\x00'}) [ 283.832599] input input148: cannot allocate more than FF_MAX_EFFECTS effects [ 283.848416] vhci_hcd: invalid port number 0 [ 283.859536] vhci_hcd: invalid port number 0 [ 283.864245] vhci_hcd: invalid port number 0 [ 283.864753] input input149: cannot allocate more than FF_MAX_EFFECTS effects [ 283.870398] vhci_hcd: invalid port number 0 01:17:47 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x2000}, 'syz1\x00'}) 01:17:47 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00}) 01:17:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f520000000000000007ff000000db"], 0x1}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x0, r0}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 283.888048] vhci_hcd: invalid port number 0 [ 283.892403] vhci_hcd: invalid port number 0 01:17:47 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x302, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 283.998359] vhci_hcd: invalid port number 0 01:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x800000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 284.037158] vhci_hcd: invalid port number 0 [ 284.047944] vhci_hcd: invalid port number 0 [ 284.052540] vhci_hcd: invalid port number 0 [ 284.092912] vhci_hcd: invalid port number 0 01:17:48 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:48 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x400000000000000}) 01:17:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000002c0)=0x1) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=r1) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x4101000) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bond0\x00', 0x4}, 0x18) 01:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4800}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x80400) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x7, 0x9, 0x5, 0x4d2d}) [ 284.386863] vhci_hcd: invalid port number 0 [ 284.395640] vhci_hcd: invalid port number 160 [ 284.400975] vhci_hcd: invalid port number 0 [ 284.405311] vhci_hcd: invalid port number 0 01:17:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:48 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffff00000000}) 01:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:48 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x7}, 'syz1\x00'}) 01:17:48 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:48 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = memfd_create(&(0x7f0000000040)="d03a2700", 0x4) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x11d) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x1009}}, 0x2d1) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x9}, 0x8) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 284.529888] vhci_hcd: invalid port number 160 [ 284.536065] vhci_hcd: invalid port number 0 [ 284.545997] vhci_hcd: invalid port number 0 [ 284.550433] vhci_hcd: invalid port number 0 [ 284.599169] vhci_hcd: invalid port number 160 [ 284.623014] vhci_hcd: invalid port number 0 [ 284.677100] IPVS: ftp: loaded support on port[0] = 21 [ 284.873641] device bridge_slave_1 left promiscuous mode [ 284.879332] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.923841] device bridge_slave_0 left promiscuous mode [ 284.929407] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.987300] team0 (unregistering): Port device team_slave_1 removed [ 284.996122] team0 (unregistering): Port device team_slave_0 removed [ 285.005836] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 285.026653] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 285.084513] bond0 (unregistering): Released all slaves 01:17:49 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:49 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x800000000000000}) 01:17:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:49 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:49 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80000, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/226) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) socket(0xa, 0x4, 0x81) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:49 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x3ffffc, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="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") clone(0x10000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1f, 0xa5, 0xfff, 0x3}) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f00000001c0)={0x200, 0x0, 0x7, 0x200}) socket$bt_bnep(0x1f, 0x3, 0x4) recvfrom$unix(r1, &(0x7f0000000080)=""/96, 0x60, 0x10000, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x410003, 0x0) 01:17:49 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 285.294731] vhci_hcd: invalid port number 0 [ 285.300499] vhci_hcd: invalid port number 0 [ 285.304851] vhci_hcd: invalid port number 0 [ 285.319141] vhci_hcd: invalid port number 0 [ 285.514766] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.526426] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.537444] device bridge_slave_0 entered promiscuous mode [ 285.602210] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.612422] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.622320] device bridge_slave_1 entered promiscuous mode [ 285.677928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.741780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.907396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 285.947883] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.102447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.111066] team0: Port device team_slave_0 added [ 286.154334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.161437] team0: Port device team_slave_1 added [ 286.183384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.206841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.230363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.237730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.246024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.269998] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.277225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.285216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.499381] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.505766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.512350] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.518773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.526217] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 286.654277] device bridge_slave_1 left promiscuous mode [ 286.659795] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.684135] device bridge_slave_0 left promiscuous mode [ 286.689596] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.757016] team0 (unregistering): Port device team_slave_1 removed [ 286.765723] team0 (unregistering): Port device team_slave_0 removed [ 286.774812] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 286.806187] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 286.874140] bond0 (unregistering): Released all slaves [ 287.523276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.735711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.807580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 287.878421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 287.884814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.891732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.964591] 8021q: adding VLAN 0 to HW filter on device team0 01:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:52 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x1000000}) 01:17:52 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:52 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) 01:17:52 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x6000000}, 'syz1\x00'}) 01:17:52 executing program 3: socket$inet6(0xa, 0x80003, 0x800000000000004) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 288.382057] input input150: cannot allocate more than FF_MAX_EFFECTS effects [ 288.410465] vhci_hcd: invalid port number 0 01:17:52 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 288.430823] vhci_hcd: invalid port number 0 01:17:52 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8}) [ 288.495334] vhci_hcd: invalid port number 160 01:17:52 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x60}, 'syz1\x00'}) 01:17:52 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7400000000000000}) [ 288.515476] input input151: cannot allocate more than FF_MAX_EFFECTS effects 01:17:52 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 288.599952] IPVS: ftp: loaded support on port[0] = 21 [ 288.657214] vhci_hcd: invalid port number 0 01:17:52 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x20000000}) 01:17:52 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:52 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x1000000}, 'syz1\x00'}) [ 288.680132] input input152: cannot allocate more than FF_MAX_EFFECTS effects [ 288.690052] vhci_hcd: invalid port number 0 [ 288.704853] input input153: cannot allocate more than FF_MAX_EFFECTS effects [ 288.801347] cgroup: fork rejected by pids controller in /syz1 [ 288.810977] input input154: cannot allocate more than FF_MAX_EFFECTS effects [ 288.846613] input input155: cannot allocate more than FF_MAX_EFFECTS effects [ 289.341116] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.347721] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.354737] device bridge_slave_0 entered promiscuous mode [ 289.378987] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.385470] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.392324] device bridge_slave_1 entered promiscuous mode [ 289.418516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 289.441658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 289.509431] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 289.538105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 289.583728] device bridge_slave_1 left promiscuous mode [ 289.589253] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.634437] device bridge_slave_0 left promiscuous mode [ 289.639887] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.686496] team0 (unregistering): Port device team_slave_1 removed [ 289.695184] team0 (unregistering): Port device team_slave_0 removed [ 289.703688] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 289.746390] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 289.793693] bond0 (unregistering): Released all slaves [ 289.887189] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 289.894523] team0: Port device team_slave_0 added [ 289.916675] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 289.924142] team0: Port device team_slave_1 added [ 289.946858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.972132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.008972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.047904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.391419] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.397803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.404473] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.410830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.418165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 291.123306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.181054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.255541] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.327440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.333896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.340850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.417471] 8021q: adding VLAN 0 to HW filter on device team0 01:17:55 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x80000, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000300)={@remote, r1}, 0x14) timer_create(0x4, &(0x7f0000000040)={0x0, 0x28, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) getdents(r0, &(0x7f0000000140)=""/128, 0x80) 01:17:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4800}) 01:17:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:55 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x3f000000}, 'syz1\x00'}) 01:17:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:55 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 291.857896] vhci_hcd: invalid port number 0 [ 291.868155] input input156: cannot allocate more than FF_MAX_EFFECTS effects 01:17:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000}) [ 291.900402] input input157: cannot allocate more than FF_MAX_EFFECTS effects 01:17:55 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x700}, 'syz1\x00'}) [ 291.941848] vhci_hcd: invalid port number 0 01:17:55 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 291.993393] input input158: cannot allocate more than FF_MAX_EFFECTS effects [ 291.993401] vhci_hcd: invalid port number 0 [ 292.006857] vhci_hcd: invalid port number 0 [ 292.023016] vhci_hcd: invalid port number 0 01:17:56 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5}) [ 292.039172] input input159: cannot allocate more than FF_MAX_EFFECTS effects 01:17:56 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x6000}, 'syz1\x00'}) [ 292.066108] IPVS: ftp: loaded support on port[0] = 21 01:17:56 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:56 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:56 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa}) [ 292.115044] input input160: cannot allocate more than FF_MAX_EFFECTS effects [ 292.146714] input input161: cannot allocate more than FF_MAX_EFFECTS effects 01:17:56 executing program 2: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 292.182681] vhci_hcd: invalid port number 0 [ 292.196111] vhci_hcd: invalid port number 10 [ 292.206738] vhci_hcd: invalid port number 10 [ 292.609654] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.616152] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.623038] device bridge_slave_0 entered promiscuous mode [ 292.647405] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.653865] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.660774] device bridge_slave_1 entered promiscuous mode [ 292.689137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 292.730452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 292.794899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 292.819823] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 292.917456] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 292.924574] team0: Port device team_slave_0 added [ 292.947291] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 292.954465] team0: Port device team_slave_1 added [ 292.977878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.002256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.025945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.051104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.259468] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.265890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.272465] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.278891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.028301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.102199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 294.175442] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 294.181603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.189262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.260629] 8021q: adding VLAN 0 to HW filter on device team0 01:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa0008000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x46a, @local, 0xff80000000000000}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0xfffffffffffffffc, 0xffffffffffffffc0}, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x1000, 0x800]}, &(0x7f0000000200)=0x8) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f00000001c0)={0xa3}) 01:17:58 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x5000000}, 'syz1\x00'}) 01:17:58 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00000000000000}) 01:17:58 executing program 2: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) 01:17:58 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:58 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x500000000000000}, 'syz1\x00'}) [ 294.677386] vhci_hcd: invalid port number 0 [ 294.694867] input input162: cannot allocate more than FF_MAX_EFFECTS effects [ 294.709785] vhci_hcd: invalid port number 0 [ 294.723087] vhci_hcd: invalid port number 0 01:17:58 executing program 2: syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000a0}) [ 294.735191] vhci_hcd: invalid port number 0 01:17:58 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x200000000000000}) [ 294.766813] vhci_hcd: invalid port number 0 [ 294.777348] input input163: cannot allocate more than FF_MAX_EFFECTS effects 01:17:58 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xcd, "d1b43632715bbb7897a2627022e18279e6914369090b6b9f44b6b49eeb824d324b47478e1d694d49a357fdbec9a096a03c0f1e0a9909dfb5b0d1d8e02fa60df1c7f5dbd815a8ea81b7d2a1a96e1ab692d602b811cc1cb2220e5cc15bd3ad79613d31c7b920f6fd60e48cba8dc7b91d1742d31f8aa5ca99a06929db0b13fe7539331a5fde1ba894ed706cb82eb2ffd89e5fcf01ef134010b63dfc4163d791449158e8f5e80288b3ff08f879dc3b791bc947ac8ccec3baf7b42a549befe9dc23a9e59928c942d6617566ac2043f2"}, &(0x7f0000000140)=0xd5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="be00000090ce3dcccd0eed1ffe919d589e9edbac5e2e91681fd34ab0038a4e7062b52bdc8e51dc816ee92df1bcb3f5d20c99bfbcbc9dd8ff47918f73c56da9726d303bc4e26878119b670c21c22943a33782cee722092c7c8dd0ff0c44bf0d21b97f2292afd37935b889b563346b3de8fe05ebed85bc6e9a7482149eb223d59ba2fbe6155b175650f1b6b07fc53c79bfbaf3cd98041bba1cdf6ecf05652a7f423e95a9f26134e6a3571b46017204f56920d2f55b63e2f1774139de7f41c04d6b6bb2cc1c3ec449a6642e8fbc8854ec3e"], &(0x7f0000000280)=0x2) 01:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 294.816093] input input164: cannot allocate more than FF_MAX_EFFECTS effects 01:17:58 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x4000000}, 'syz1\x00'}) [ 294.860351] vhci_hcd: invalid port number 0 01:17:58 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x8000a0}) 01:17:58 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700000000000000}) [ 294.885829] vhci_hcd: invalid port number 0 [ 294.899470] vhci_hcd: invalid port number 0 [ 294.911879] input input165: cannot allocate more than FF_MAX_EFFECTS effects [ 294.920588] vhci_hcd: invalid port number 0 01:17:58 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x2) ioctl(r0, 0x8914, &(0x7f0000000040)="32c5297c2379fda5e75f41fc0137296992a7bf360b269f8ebb3b665eeee1214de1735fdb714d88a1049e9726113df6a6f4e473c58e2523075a29d2c489d40484e75f9d8e09f2694c209947655a7a32b1fb6e200dd0fc66b44e94bb12afdcb30517c9f1a5d0c38dbb5221fe418d0feb5c44278a7d162798a7a5a2ff4a43884b97697d517973ac3016aeb62c4b55d256c825d102d844dc0d01d5c016ac1001ce74c4748426c6d0") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000fffffe, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000140)=""/38) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:58 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x8000a0}) [ 294.941438] input input166: cannot allocate more than FF_MAX_EFFECTS effects [ 294.951788] vhci_hcd: invalid port number 0 [ 294.978611] vhci_hcd: invalid port number 0 [ 295.029020] vhci_hcd: invalid port number 0 01:17:59 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa000000}) 01:17:59 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x20000000}, 'syz1\x00'}) 01:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xffffffffa0010000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000100)={0x1, {0x77359400}, 0x0, 0x40}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) read(r0, &(0x7f0000000040)=""/116, 0x74) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000200)={0x3, 0x7}) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:17:59 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") 01:17:59 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x8000a0}) 01:17:59 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x2000000}, 'syz1\x00'}) 01:17:59 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 295.532187] input input167: cannot allocate more than FF_MAX_EFFECTS effects [ 295.563629] vhci_hcd: invalid port number 0 01:17:59 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) pipe2(&(0x7f0000000080), 0x80000) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xc0000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 295.594510] vhci_hcd: invalid port number 0 [ 295.607888] input input168: cannot allocate more than FF_MAX_EFFECTS effects 01:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:59 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000000000000}) [ 295.634735] input input169: cannot allocate more than FF_MAX_EFFECTS effects 01:17:59 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x2000}, 'syz1\x00'}) [ 295.676928] vhci_hcd: invalid port number 0 [ 295.687471] vhci_hcd: invalid port number 0 [ 295.712032] vhci_hcd: invalid port number 0 [ 295.717073] vhci_hcd: invalid port number 0 [ 295.722059] vhci_hcd: invalid port number 0 01:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:17:59 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 295.735357] vhci_hcd: invalid port number 0 [ 295.753853] input input170: cannot allocate more than FF_MAX_EFFECTS effects 01:17:59 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c00000000000000}) 01:17:59 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 295.782307] vhci_hcd: invalid port number 0 [ 295.793850] input input171: cannot allocate more than FF_MAX_EFFECTS effects [ 295.795824] vhci_hcd: invalid port number 0 [ 295.836465] vhci_hcd: invalid port number 0 [ 295.857036] vhci_hcd: invalid port number 0 [ 295.887527] vhci_hcd: invalid port number 0 01:18:00 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)) 01:18:00 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48000000}) 01:18:00 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:18:00 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2000) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000300)={0xa3, 0x3, 0x4000000000000000, 0x100}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x400}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xf3, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/243}, &(0x7f0000000280)=0x78) 01:18:00 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x4}, 'syz1\x00'}) 01:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000000000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:00 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 01:18:00 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x840, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x83, 0x100000000, @scatter={0x3, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/153, 0x99}, {&(0x7f00000001c0)=""/15, 0xf}]}, &(0x7f0000000240)="e76d1bc2556cdeac1b7634987ea295edc1c02d5d75613d479a2200922bfe781bffe19171515d106d681b3f07fce43195bc190bb8bd41010afaf98978d041a75aeca6969c0aba7e1f6165790e0d27a4dcef20c1eef733a0be4a2e8a191e17cd7f4e489a3ca624f8eb2ad6dc69c9726c3ef581090bfa9e99bc71e21865334c254b37dd65", &(0x7f0000000300)=""/50, 0x7, 0x1, 0x3, &(0x7f0000000340)}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000400)={{0x0, 0x7000, 0x10, 0x6d, 0x6, 0x80000000, 0x400, 0x1000, 0x40, 0x4, 0xf1a, 0x400}, {0x4000, 0x6000, 0xf, 0x100, 0x1, 0x80, 0x5, 0x100, 0x6, 0xfffffffffffffffb, 0x4, 0x5}, {0xf000, 0xf000, 0xc, 0xfffffffffffff287, 0x40, 0x6, 0x2, 0x8, 0x2, 0x9, 0x3f, 0x7fffffff}, {0x100000, 0x5000, 0x10, 0x20, 0x9, 0x5, 0xffffffffffffffff, 0x7, 0x100, 0x1, 0x9, 0x8000}, {0x0, 0x4005, 0xf, 0x420, 0x7, 0x0, 0x80000001, 0x0, 0x80, 0x4, 0xc7d3, 0x2}, {0x5000, 0x0, 0xf, 0x8, 0x2, 0x1, 0x80000000, 0x3, 0x9, 0xff, 0x18e2, 0x985}, {0x10f004, 0x100000, 0xf, 0x9, 0x3, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x551ac94a, 0xd4, 0x5}, {0x3000, 0x4000, 0x1f, 0xad, 0x0, 0x100000000, 0x6, 0x0, 0x80000000000, 0x400, 0x7a4f, 0x80000000}, {0xd000, 0xf000}, {0x7005, 0x2}, 0x40019, 0x0, 0x3000, 0x40000, 0xc, 0x1000, 0x6000, [0x8, 0x7, 0x8001, 0x4]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x7) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 296.399185] input input172: cannot allocate more than FF_MAX_EFFECTS effects [ 296.407086] vhci_hcd: invalid port number 0 [ 296.414791] vhci_hcd: invalid port number 0 [ 296.426879] vhci_hcd: invalid port number 0 [ 296.432345] input input173: cannot allocate more than FF_MAX_EFFECTS effects 01:18:00 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x300000000000000}, 'syz1\x00'}) 01:18:00 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x9a41fffa03cd3858, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x744, 0x0) sendto(r1, &(0x7f0000000180)="9dcd19bf80eed483dd5a2a6919333ba7d18a73", 0x13, 0x44804, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x2, @broadcast}}, 0x80) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6c5, 0x600) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 296.516772] vhci_hcd: invalid port number 0 [ 296.523318] vhci_hcd: invalid port number 0 [ 296.547405] vhci_hcd: invalid port number 0 [ 296.558312] input input174: cannot allocate more than FF_MAX_EFFECTS effects [ 296.572475] vhci_hcd: invalid port number 0 [ 296.591840] vhci_hcd: invalid port number 0 01:18:01 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000}) 01:18:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:01 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x6000000000000000}, 'syz1\x00'}) 01:18:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa000000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:01 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)) 01:18:01 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0x1}) [ 297.253218] vhci_hcd: invalid port number 0 [ 297.260512] input input175: cannot allocate more than FF_MAX_EFFECTS effects [ 297.277589] vhci_hcd: invalid port number 0 [ 297.284643] vhci_hcd: invalid port number 0 [ 297.292139] input input176: cannot allocate more than FF_MAX_EFFECTS effects 01:18:01 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000080)=0xb5) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0xa3}) 01:18:01 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x74}) 01:18:01 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x100000000000000}, 'syz1\x00'}) [ 297.299635] vhci_hcd: invalid port number 0 [ 297.314619] vhci_hcd: invalid port number 0 01:18:01 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 01:18:01 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) fanotify_init(0x8, 0x40000) [ 297.375915] vhci_hcd: invalid port number 116 [ 297.382791] vhci_hcd: invalid port number 0 [ 297.391845] vhci_hcd: invalid port number 0 01:18:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:01 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c}) 01:18:01 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x700000000000000}, 'syz1\x00'}) [ 297.430051] input input177: cannot allocate more than FF_MAX_EFFECTS effects [ 297.446929] vhci_hcd: invalid port number 0 [ 297.463233] vhci_hcd: invalid port number 0 [ 297.469711] vhci_hcd: invalid port number 0 [ 297.480254] vhci_hcd: invalid port number 0 01:18:01 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20003, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x4, 0x9, 0x85, 0x694]}) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000140)={0x80000000, 0x2, 0xffff, 0x100000001}) [ 297.505170] vhci_hcd: invalid port number 0 01:18:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6800}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 297.534094] input input179: cannot allocate more than FF_MAX_EFFECTS effects [ 297.549205] input input180: cannot allocate more than FF_MAX_EFFECTS effects [ 297.621578] vhci_hcd: invalid port number 0 [ 297.647291] vhci_hcd: invalid port number 0 01:18:02 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x7000000}, 'syz1\x00'}) 01:18:02 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 01:18:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:02 executing program 4: ioctl(0xffffffffffffffff, 0x5, &(0x7f00000000c0)="ebc032331c20443287abb538ea509cd5fb72203e89f5bd9148bbc5bcd01a15d98a4199722f7f2bfd23c4ba5c5ae097d8fd5148876e024fa92d1b1c850ef7e35834111bd46382bd34d2a885c9f74e6260c55ac77d942212cd9748d9bf2e6437ca0c941e4e46d71fe8f8a1473816a2efdc88733d4d0079e11fd4c7957e04405e474a36e7abc7a55b7bce27a6c9690e7a30a2406d4386a57f686d66") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x210201) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x100, r1, 0x308, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x410}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x94b9976c78b11aed}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x16}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0xfffffffffffffee5, 0x2) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:18:02 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)) 01:18:02 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6}) [ 298.154445] vhci_hcd: invalid port number 0 [ 298.165731] input input181: cannot allocate more than FF_MAX_EFFECTS effects [ 298.180019] vhci_hcd: invalid port number 0 [ 298.187822] vhci_hcd: invalid port number 0 01:18:02 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 01:18:02 executing program 4: ioctl(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0xffffffffffffffc0, 0x4) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:18:02 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0xffffff7f}, 'syz1\x00'}) [ 298.207744] vhci_hcd: invalid port number 0 01:18:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:02 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 298.235900] vhci_hcd: invalid port number 0 [ 298.241297] vhci_hcd: invalid port number 0 [ 298.275027] vhci_hcd: invalid port number 0 01:18:02 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 01:18:02 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x600}, 'syz1\x00'}) [ 298.296081] input input182: cannot allocate more than FF_MAX_EFFECTS effects 01:18:02 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x202080, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) write$P9_RSTATFS(r0, 0xfffffffffffffffd, 0x0) [ 298.374269] vhci_hcd: invalid port number 0 [ 298.382517] input input183: cannot allocate more than FF_MAX_EFFECTS effects [ 298.408880] IPVS: ftp: loaded support on port[0] = 21 01:18:02 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) [ 298.424768] input input184: cannot allocate more than FF_MAX_EFFECTS effects 01:18:02 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x5}, 'syz1\x00'}) [ 298.474714] vhci_hcd: invalid port number 0 [ 298.479633] vhci_hcd: invalid port number 0 [ 298.494516] vhci_hcd: invalid port number 0 [ 298.550285] input input185: cannot allocate more than FF_MAX_EFFECTS effects 01:18:02 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") [ 299.276912] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.283480] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.290451] device bridge_slave_0 entered promiscuous mode [ 299.314224] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.320611] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.327676] device bridge_slave_1 entered promiscuous mode [ 299.366501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 299.389768] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 299.517009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 299.543062] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 299.768220] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 299.775604] team0: Port device team_slave_0 added [ 299.814363] device bridge_slave_1 left promiscuous mode [ 299.820359] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.873865] device bridge_slave_0 left promiscuous mode [ 299.879319] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.763338] team0 (unregistering): Port device team_slave_1 removed [ 300.771882] team0 (unregistering): Port device team_slave_0 removed [ 300.781396] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 300.836368] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 300.903399] bond0 (unregistering): Released all slaves [ 300.956360] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 300.963627] team0: Port device team_slave_1 added [ 300.985027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 300.991858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.000254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.022851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 301.029755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.038675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.066976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 301.074704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.089090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.118426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 301.126049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.136945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.467450] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.473840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.480438] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.486827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.494077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 302.003993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.270013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.338370] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 302.407046] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 302.413223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.420154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.490462] 8021q: adding VLAN 0 to HW filter on device team0 01:18:06 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 01:18:06 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c}) 01:18:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c}) prlimit64(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 01:18:06 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 01:18:06 executing program 5: writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000400)="12c818a2b75f9672db07d64a181c3757c184710d4cce6b21da", 0x19}], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f00000003c0)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000000)={{0x0, 0x3f00}, 'syz1\x00'}) 01:18:06 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x800000078, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xc02a) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") [ 302.917793] input input186: cannot allocate more than FF_MAX_EFFECTS effects [ 302.922236] vhci_hcd: invalid port number 0 [ 302.933487] vhci_hcd: invalid port number 76 [ 302.942848] vhci_hcd: invalid port number 76 [ 302.947070] ================================================================== [ 302.954718] BUG: KASAN: use-after-free in vhci_hub_control+0x1b6d/0x1be0 [ 302.961568] Read of size 4 at addr ffff8801cda344bc by task syz-executor0/14031 [ 302.969187] [ 302.970826] CPU: 0 PID: 14031 Comm: syz-executor0 Not tainted 4.19.0-rc7-next-20181010+ #91 [ 302.979315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.988671] Call Trace: [ 302.991269] dump_stack+0x244/0x3ab [ 302.994906] ? dump_stack_print_info.cold.2+0x52/0x52 [ 303.000110] ? printk+0xa7/0xcf [ 303.003395] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 303.008160] print_address_description.cold.7+0x9/0x1ff [ 303.013527] kasan_report.cold.8+0x242/0x309 [ 303.017941] ? vhci_hub_control+0x1b6d/0x1be0 [ 303.022466] __asan_report_load4_noabort+0x14/0x20 [ 303.027399] vhci_hub_control+0x1b6d/0x1be0 [ 303.031734] ? vhci_hcd_probe+0x240/0x240 [ 303.035884] ? kasan_unpoison_shadow+0x35/0x50 [ 303.040472] ? kasan_kmalloc+0xc7/0xe0 [ 303.044375] ? __kmalloc+0x328/0x760 [ 303.048094] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 303.052686] usb_hcd_submit_urb+0x17bb/0x20a0 [ 303.057186] ? vhci_hcd_probe+0x240/0x240 [ 303.061340] ? usb_create_hcd+0x40/0x40 [ 303.065320] ? do_syscall_64+0x1b9/0x820 [ 303.069414] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.074787] ? __x64_sys_ioctl+0x73/0xb0 [ 303.078851] ? do_syscall_64+0x1b9/0x820 [ 303.082915] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.088289] ? lock_release+0xa10/0xa10 [ 303.092264] ? perf_trace_sched_process_exec+0x860/0x860 [ 303.097723] ? __mutex_lock+0x85e/0x16f0 [ 303.101788] ? plist_check_head+0xea/0x150 [ 303.106028] ? __lockdep_init_map+0x105/0x590 [ 303.110529] ? __lockdep_init_map+0x105/0x590 [ 303.115036] usb_submit_urb+0x893/0x14e0 [ 303.119108] usb_start_wait_urb+0x13d/0x370 [ 303.123439] ? sg_clean+0x240/0x240 [ 303.127080] usb_control_msg+0x332/0x4e0 [ 303.131146] ? usb_start_wait_urb+0x370/0x370 [ 303.135645] ? alloc_pages_current+0x17b/0x350 [ 303.140229] proc_control+0x9ae/0xf00 [ 303.144048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.149591] ? proc_bulk+0xa90/0xa90 [ 303.153329] usbdev_do_ioctl+0x1eb8/0x3b50 [ 303.157585] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 303.162510] ? futex_wait+0x5ec/0xa50 [ 303.166327] ? mark_held_locks+0x130/0x130 [ 303.170580] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 303.175799] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 303.180930] ? futex_wake+0x304/0x760 [ 303.184754] ? is_bpf_text_address+0xac/0x170 [ 303.189257] ? mark_held_locks+0x130/0x130 [ 303.193502] ? do_futex+0x249/0x26d0 [ 303.197221] ? kasan_check_read+0x11/0x20 [ 303.201377] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 303.206660] ? rcu_softirq_qs+0x20/0x20 [ 303.210632] ? unwind_dump+0x190/0x190 [ 303.214525] ? exit_robust_list+0x280/0x280 [ 303.218855] ? __fget+0x4aa/0x740 [ 303.222312] ? lock_downgrade+0x900/0x900 [ 303.226467] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 303.231412] ? save_stack+0x43/0xd0 [ 303.235045] ? __kasan_slab_free+0x102/0x150 [ 303.239461] ? __fget+0x4d1/0x740 [ 303.242921] ? ksys_dup3+0x680/0x680 [ 303.246670] ? __might_fault+0x12b/0x1e0 [ 303.250740] ? lock_downgrade+0x900/0x900 [ 303.254906] usbdev_ioctl+0x25/0x30 [ 303.258544] ? usbdev_compat_ioctl+0x30/0x30 [ 303.262981] do_vfs_ioctl+0x1de/0x1720 [ 303.266907] ? ioctl_preallocate+0x300/0x300 [ 303.271319] ? __fget_light+0x2e9/0x430 [ 303.275297] ? fget_raw+0x20/0x20 [ 303.278752] ? _copy_to_user+0xc8/0x110 [ 303.282735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.288331] ? put_timespec64+0x10f/0x1b0 [ 303.292486] ? nsecs_to_jiffies+0x30/0x30 [ 303.296645] ? security_file_ioctl+0x94/0xc0 [ 303.301061] ksys_ioctl+0xa9/0xd0 [ 303.304519] __x64_sys_ioctl+0x73/0xb0 [ 303.308411] do_syscall_64+0x1b9/0x820 [ 303.312302] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 303.317673] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.322614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.327463] ? trace_hardirqs_on_caller+0x310/0x310 [ 303.332482] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 303.337507] ? prepare_exit_to_usermode+0x291/0x3b0 [ 303.342554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.347408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.352595] RIP: 0033:0x457519 [ 303.355793] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.374786] RSP: 002b:00007f71a5f2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.382504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 303.389785] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 303.397059] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.404338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f71a5f306d4 [ 303.411612] R13: 00000000004bf65f R14: 00000000004cf538 R15: 00000000ffffffff [ 303.418894] [ 303.420529] The buggy address belongs to the page: [ 303.425467] page:ffffea0007368d00 count:0 mapcount:-128 mapping:0000000000000000 index:0xffff8801cda340c0 [ 303.435176] flags: 0x2fffc0000000000() [ 303.439075] raw: 02fffc0000000000 ffffea0006eb6188 ffffea0007185a08 0000000000000000 [ 303.446987] raw: ffff8801cda340c0 0000000000000001 00000000ffffff7f 0000000000000000 [ 303.454870] page dumped because: kasan: bad access detected [ 303.460576] [ 303.462201] Memory state around the buggy address: [ 303.467132] ffff8801cda34380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 303.474499] ffff8801cda34400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 303.481860] >ffff8801cda34480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 303.489217] ^ [ 303.494405] ffff8801cda34500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 303.501775] ffff8801cda34580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 303.509139] ================================================================== [ 303.516499] Kernel panic - not syncing: panic_on_warn set ... [ 303.516499] [ 303.523882] CPU: 0 PID: 14031 Comm: syz-executor0 Tainted: G B 4.19.0-rc7-next-20181010+ #91 [ 303.533755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.543108] Call Trace: [ 303.545705] dump_stack+0x244/0x3ab [ 303.549343] ? dump_stack_print_info.cold.2+0x52/0x52 [ 303.554550] ? lock_downgrade+0x900/0x900 [ 303.558756] panic+0x238/0x4e7 [ 303.561953] ? add_taint.cold.5+0x16/0x16 [ 303.566116] ? print_shadow_for_address+0xb6/0x116 [ 303.571057] ? trace_hardirqs_off+0xaf/0x310 [ 303.575481] kasan_end_report+0x47/0x4f [ 303.579468] kasan_report.cold.8+0x76/0x309 [ 303.583798] ? vhci_hub_control+0x1b6d/0x1be0 [ 303.588309] __asan_report_load4_noabort+0x14/0x20 [ 303.593247] vhci_hub_control+0x1b6d/0x1be0 [ 303.597579] ? vhci_hcd_probe+0x240/0x240 [ 303.601732] ? kasan_unpoison_shadow+0x35/0x50 [ 303.606315] ? kasan_kmalloc+0xc7/0xe0 [ 303.610210] ? __kmalloc+0x328/0x760 [ 303.613929] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 303.618517] usb_hcd_submit_urb+0x17bb/0x20a0 [ 303.623016] ? vhci_hcd_probe+0x240/0x240 [ 303.627168] ? usb_create_hcd+0x40/0x40 [ 303.631147] ? do_syscall_64+0x1b9/0x820 [ 303.635210] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.640580] ? __x64_sys_ioctl+0x73/0xb0 [ 303.644648] ? do_syscall_64+0x1b9/0x820 [ 303.648710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.654089] ? lock_release+0xa10/0xa10 [ 303.658067] ? perf_trace_sched_process_exec+0x860/0x860 [ 303.663533] ? __mutex_lock+0x85e/0x16f0 [ 303.667596] ? plist_check_head+0xea/0x150 [ 303.671841] ? __lockdep_init_map+0x105/0x590 [ 303.676340] ? __lockdep_init_map+0x105/0x590 [ 303.680848] usb_submit_urb+0x893/0x14e0 [ 303.684920] usb_start_wait_urb+0x13d/0x370 [ 303.689249] ? sg_clean+0x240/0x240 [ 303.692886] usb_control_msg+0x332/0x4e0 [ 303.696957] ? usb_start_wait_urb+0x370/0x370 [ 303.701465] ? alloc_pages_current+0x17b/0x350 [ 303.706054] proc_control+0x9ae/0xf00 [ 303.709866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.715411] ? proc_bulk+0xa90/0xa90 [ 303.719137] usbdev_do_ioctl+0x1eb8/0x3b50 [ 303.723379] ? parse_usbdevfs_streams+0x4f0/0x4f0 [ 303.728249] ? futex_wait+0x5ec/0xa50 [ 303.732061] ? mark_held_locks+0x130/0x130 [ 303.736304] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 303.741504] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 303.746616] ? futex_wake+0x304/0x760 [ 303.750438] ? is_bpf_text_address+0xac/0x170 [ 303.754948] ? mark_held_locks+0x130/0x130 [ 303.759200] ? do_futex+0x249/0x26d0 [ 303.762922] ? kasan_check_read+0x11/0x20 [ 303.767076] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 303.772373] ? rcu_softirq_qs+0x20/0x20 [ 303.776363] ? unwind_dump+0x190/0x190 [ 303.780263] ? exit_robust_list+0x280/0x280 [ 303.784610] ? __fget+0x4aa/0x740 [ 303.788085] ? lock_downgrade+0x900/0x900 [ 303.792253] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 303.797196] ? save_stack+0x43/0xd0 [ 303.800825] ? __kasan_slab_free+0x102/0x150 [ 303.805242] ? __fget+0x4d1/0x740 [ 303.808721] ? ksys_dup3+0x680/0x680 [ 303.812476] ? __might_fault+0x12b/0x1e0 [ 303.816547] ? lock_downgrade+0x900/0x900 [ 303.820714] usbdev_ioctl+0x25/0x30 [ 303.824352] ? usbdev_compat_ioctl+0x30/0x30 [ 303.828770] do_vfs_ioctl+0x1de/0x1720 [ 303.832676] ? ioctl_preallocate+0x300/0x300 [ 303.837107] ? __fget_light+0x2e9/0x430 [ 303.841092] ? fget_raw+0x20/0x20 [ 303.844559] ? _copy_to_user+0xc8/0x110 [ 303.848550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 303.854106] ? put_timespec64+0x10f/0x1b0 [ 303.858270] ? nsecs_to_jiffies+0x30/0x30 [ 303.862439] ? security_file_ioctl+0x94/0xc0 [ 303.866852] ksys_ioctl+0xa9/0xd0 [ 303.870311] __x64_sys_ioctl+0x73/0xb0 [ 303.874214] do_syscall_64+0x1b9/0x820 [ 303.878105] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 303.883487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.888516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.893368] ? trace_hardirqs_on_caller+0x310/0x310 [ 303.898401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 303.903440] ? prepare_exit_to_usermode+0x291/0x3b0 [ 303.908488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.913374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.918583] RIP: 0033:0x457519 [ 303.921792] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.940703] RSP: 002b:00007f71a5f2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.948421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 303.955694] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 303.962973] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.970689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f71a5f306d4 [ 303.977962] R13: 00000000004bf65f R14: 00000000004cf538 R15: 00000000ffffffff [ 305.121386] Shutting down cpus with NMI [ 305.126447] Kernel Offset: disabled [ 305.130082] Rebooting in 86400 seconds..