0x0000000000000000 16:43:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$nfs(&(0x7f0000000480)='nfs\x00', &(0x7f0000001700)='./file0\x00', 0x8001, 0x1, &(0x7f00000017c0)=[{&(0x7f0000001740)="b09d79c417ebc4f7233be5c8c35a61fdc9df9e4d0a79ece7b8c79a209c5bb58eecef46507a2b022fafca43937eb74020cffd83a18b1830acd52679b79b883584749d586d1443bfd7efb9e2e521ad77e63f998c9bafc805767dab6d219252cf003e445be877e76d03c7098dfb3d76d9490ecd74a2", 0x74, 0x7ff}], 0x2000, &(0x7f0000001800)='bsdgroups') syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x6, &(0x7f0000000340)=[{&(0x7f0000000100)="c897e329452520759a29b6a5bb6e50f8125ec33aa2588ae42a4595cf23fff830fd2395a7a4ede0b768f8bbff47f58a9729871a080c2db06a29eb85ed27fad9360c4a1307be0ca27dc0c79c37d9ced4aa82702725ff413762e260d736085408c324d520937fe92dea711b92583f7316", 0x6f, 0x5}, {&(0x7f0000000180)="c2e50d5a072f", 0x6, 0x5}, {&(0x7f0000000500)="b9840324fbf9e1b1140b4f80bfec7bbbaa43083bc5a056d08faea6e22c7aa8836b8709505109d6d0873740f7dafb04d1295d8751ad9e0933f349f330f4e81d377be6fd9cd665cb67e969b65313f22b41df44da5d0d316577288bfded97bb00ad8e8284e7fdebb2fcc3a6efe74dd9ea09feaf1374b5ec9a794fff32d94b57778d527d936b159ac8ffadb77f6ac8f1ca7b2e97069d97f850e8422a8b6fe1afa4905ad114b45d7a0c082bcdee7c9ddcb79a816717c9a2ac6011a41a062f95efad4eca3d2e3e19fac71df13b514c55ae8a7500ec183737edab4434a118db86413f4cff516c008ee098dc0bc363645719a0491cad0ab98c8a82487a0ac7cd61c788b756ba0f92887ccb53e0384dbe76b995d2048b72efeeb0afebd136655cf8f763fc7f8d86c0e3f604aced465a9e76bfe1754e8c894c5633575050bad07745bb1ebbef07e1f0f723912f50d30dfc75b3e1baf7501b5fb17b136b2c8a91f6eab073e3a41eaf70f1a3b10a06eba14350da09dfbbdcac265056314c63cc0686946c5c91a63cd11ee6e7f241827c8a54b39fb2666826c49a4b4cb0efe2294e3218805543b92caf2319e79e83a63f3bb96a7da685dfd28131f96174cda31d1e5f236b546351743e694f8e97f2ffcc9028aae076eaaf6463c3e637c854f392a7c015ed91b4ba250c8ed261a350ffa3f110eee50579ef58dc502bd37668000bbb93617aae48ed0a8ec1218545819070955ef6e9e191c4846b7abc7301b87bda1283cbc0cd9c91112ef0b0b54ce6c4a00b10df681f88fbc0c4e8a243ce3bb5414e1ec24ce074f537b974bd72c6af8fc3d11dd87a30e4a2f5cac6fe522bc1370b021fcdfc6c9b3efb741759932c27767b0a51e2656c1e27ac597510477440b9accdcdbdf85e7567c52cfd2f2726b984a4c4e182983d86ee2e8d7ebcf01be58b76ad7e3cd0d62d4c66c29a0017b39a58987d612443c13488938abd557f5ec70fa32cd3746a2a350763b97f1dab5d387492046b380d75531364e9f356ea07e6f131a5dc80216ec96842d0795dae37750c73fd70b2e069bf4bc1c3a4872349e67a8b12d2bf9275604a030c39ca38dca135ee88586f18152faf05d3306e8296e99b969f2a4ea437abcff2c284758490f2f3cc2767325535cd89aa4965dd5bfa8188dd7b92511eb51fda67c153c83b20dafe18a5a6376296fc2200f146fe3fbb40ba579032e46031879fb1885243c9a60bf985ca78d962cf7126b1ea63c7087efe5edcd803494662ebacad6d3d6c15f36187134a448d9f6eac01f011833086777773541b0a9da0542d8ecf1e85a24e1f6bb8997222311e8acd7e67c574161382e024ea8e67119827665238047b60068a65b2b0e67dae7e4ae611b3890ad54ef8c1057b1999d8959e1b8fe482cfdb482b8a627c85597b3387d6ef2ddc1bc50e9d199f5aa515f0072322ecfbe5dd8c25a7f025b6447d5066175432cc34059a3f0680bf534dabc4c47b67a4ed6e23be057495b52cbf4a0ac58fe61032b5a8bc3dd884859b8c3c55c30af0f396381cc781abf92479ed6a785797a577b6b8ec273ea320e5baac0721e5ab8306b0c212cb43c04cb04fb6871bc6f2f60b0b2b45c6458221e60b099539a6ff608254a29a1814ef439e6aecb76b69cf5dab709510813a50a8a3d5310d906d1464e4bb65cef5f736073b4471f484cd85f62259961dd7cd0f5677bbb83f1e9eb9c9c9f37e1e07433bf85b2e3b71cd7eb74e13acad15c2d44643117f7ea4760cf3b1ab3db1b932fc087c65ca5d9b31151b8c491d633fbff62eb60010fac22a5260d33db2c7dc3279a8f6b11cbbc959b23bacb676b83a5debedb6945289b9e87b9b1fb7ec4b51b1f8787b13c3bf86b83a178fcc8de1c50dc6eb66c65b08406b798ff828e0ac1357f3b3e5f7820c3f1cbe8256b2b73bc03f10672584374cadfdeeb7e2a884f0832503e0d90e6d131c1f36145a89dae03095612c5ce25079052c5272c1e8cd90a0c9563776ed0d733beb6e74880accba80f5129577201afd3ed52188aac56dc35e4ba1154fc1487c6870266a3664d501630eb138f05ecb765655b65425a8abacdae67dd909dc413492a1ee10e07bb356462786419ad5333185b72f6963fb80ea192ab636cd575cc30b43e5b9f5a2bcc1e240a9737bd181d4fa3c8642aa5c68a2058dde62e75072322ce0b420df3b0226def0b559cde03f84cd6280198ee4bbf11940e7509f667bd038373261acd341f721a0aab97ef72c5d971b5656a6744e5cbc0e39504ee24cb48473f3507e2504fb7122f50c523f9c98fc4640e16f529794c7e6e6018ddcc9b49c131542eaaedd8a8bc32c849f2d5c18d8e09b9eb848f8fd9f3509f7e288a29a84cabc3882f39e764cdea2dabd117a49c9fef55f681e43e88102a00cbaf10e8475956dc6ff607d5aea9cefc2fa0a6d4f9d4d1baa70e726e8cda6cffde8401453921d47ac6030d3f0721f689ebf15e5d66d38a14e92341e4d6e5a17c9df04c1eb9dee878c15d390916b547b5fd9a38869547957499db0078bb6d976b0aebf437658c7c27c6503f2867ad39d35d9a209b151cb9a7ee9d2ba212e212caeb5fc1cb1524b19ce2c3b91d0b4ee872b621fe51f47442be40cea84fa291ea8271f4854c88ead37e3a0c3d88e1cb33cef505edd0eded7d4c78d31ede12eebcbebbd6ffa66f1af81ec98e50bd2f2b3d39d95e066829d17af34fad7fa2f3b833ba79763ece2d112f82a6a4529bd0a652170be3e91e306fe59b461629fb2ce3f9187d1401eb96687814c111f5903279269c691f23ebb81634c4f6f8351007fee7dc9d0681e8a6fd46275334ac8567d2fd32be039ba1a80e48f08952ec074b9c857de8ccc8820c1dbac29595eef9f4281f08eeaf90200c0bf7631528297efdd0d69cb202220f1d97be38eae73b26b996811670f7a369acb0f1ce72411afcc6cf7aca6111ad69b533fdb7afa9c280149b462c683e92ea16981b47cc9ad25abfb6b245582bee3f1622cfd2087c9ab663ad39224f8a11c4e0515f0e13f0966de1bfb162340c2910aef93f7b3039058cbd2e44598ccfdf4c8c871c810d153d72413d903730410b09ebacf795c083cce1ccfe63db99ec4c084fe27689f9fb9a2e6cb43b56f520af21556f94ed8da665e11d4c34be3c66ed81affa669f09ea9b421e90e93f7a25ba6dace96a637fd4c0ddcc3ab731df62d81f66a0a721abe2b48678c8726b6b383d33fe43c1d12fc34a50d525ba314f00616521fb73b14489c4670a1e38eab80f87e77962d867592cfdc828ccdcf64d68e72bd3ef4265475d45c80126865faa724cec8b713bc7d18f80121ecd5966cbbf7f143d3f48e6eaf19ea975c607e42cb45d4cc8ff00ec9505a3e91ff76cbfef90b27376aba769bd18f546240b18340e33b177516c79155e5328fe0b1b830f0c54974e3d58a12e185bdb186edfe92fa94e8af4613e240f54b62248c139b056592e92ff8e3e6b486468d36f83a780e5c02f28c4f31360b08627747be9a073306ce2f19d1ec2bc1db0ac7478dfd9faf0953c1d4caca819301d6a97ba6d4bcab28d808de44f27dcba10ef87b4960ff520b81e20f52086335dd60e7e952ccadf7e4f44566d93d3ef07e759ce6734ce3e375540fc07cd9a0034c34a29f6e030ba9209dbeb3ffdbe37cf5f9e3d05b710996a0cdf418e191a06a599f3d2bd9afe6944633623e4fad471c51abd96cbbea43b423384417b31f801ee7cc9eb82c184cef683bcd46958b0522604ce84a1c9f6942eb2019fc01b34e48240e83faeeca521893bb1ad6e28533afb66794fffcd85e5f420b9ce4c823b0040d7daebffa3b4fc415e4c38918c8c85f0aa2710e1ff838f0882475da9224e1063c4ff2f471cbcc9c06fd1e41926521184a11c95563bab12b73c960390865e4dfc46b6293197142387b0747899d3c92916454aecd8f7fd82fb03988a698136cd9d4dddc144b309db9f1cf42670e7a7102d49602ceb496821d49efe75abdd38b16cbe4d3aeba3798c7a9e32d29c0234291a1f5e8c4887d96024b7b44998196811a7a4206c09407e4278cce4eea83ec04bb2885e7a4b861d69c48c907a1238bcb5a188650e6bf178d57a52a4e96376a5a956784130f590fa7f86f60ba45dcc2127bb430286bd6e96fcd187a92d63af6d9a2bdf96a030d56304cc0b78ae38df641b0c7ae68b5ebd26eca1b39fcdfb8bdb11eb42667451b5bb992905bb88f1808d791b065e1030e95c336ea934cad454d9a7cd8cba45434234f0d80421594585af677fd7ca0a9061ceaa1f0bd3d430f9278c564821de98018033dcd63b68e9c807c88ddc7793be12a853ec2996981897ec8f2206114d54fc43efabbe45c9298448579654cdec169bcca89ec7908b847e9946720922c60ab5ae6a21b6bb8f8f441b643684b708e984529bfda5459888cff62222873be5020935af0a86fdda1f3e622e11b106f3a716558bb908d30e1de617c4acfb56cc333a3fa03acb4eacb70d86ea6c90a23821264b9c7962e13b920bf3f0874980184dcdf7f109a0c937468db603341fb2544b3f3eb778023f6d991d512935ba01b24a02e8691026051afff39db99eb53de945e674a22ce5da14e1a1d2a38dd98affea277d7af56038f4d609395be8b5bc6921f863ce2c99b19f7198b09adde917c9d81657b2dac8ca10667bf97854313411824d0dc192190ecce5764df872b4fd59833191b0d623774fba56a850441125586a01b6045f7da26eef7ba5dd08b2ea1417b1ae73e524cb3111e2cc859d2832646d2ee9262aa63f4553487d31b981619000e7175d9f963faf29cf8d9360005870980bd4d4cbfebd6ec1c64e8f7781ddf23d0f483a2aa77e8edb56a78472fa26327fbcc6ba4e6d9deaaeeb369109cb1ceacffa9670443dac89550a1dab94a7b58958bc1070bdee9f716606d9689b929a0dda58a8f334088c419645c2f2a19ac87db3b2d862cbb51f7881a5ace431dff6237a40560b98288a27e102d98df69060385e71245f029e9daca44393553b8f65fd4e850d3fc99537ea6ed5b3bd15c4747676ff02f9766a86c5ac319de4cabab585c73de626d75da1f05d72ff68fec0c52e32ef64f05a0aee5b94940e75dd0e5678aa9ef28e1880d6e7e48ee325a4d2bd8a85e66bbd7fb9090c2a396f22ddbf06ca75ed52b5fc560f191d5b10fb1e21151fa2a93af377262e4847165ebfa9814dad7cdbfb808301c7d6f31a1de4d4357df48e09b7e6f1cb3302fd74ad199da5b030f81e16e860f9ed2d3eca5f7d15b0d4066f2286842589d635595b2c4022c09cb7829e6b1af7bbc8aeafc824fb19a28631243fe4520c07069a37ae1a6fee08570ba7f363032e1a61c67618800984d4181759c5dcdf6e89641c33d4f350d776a8ae0656622e0fdbd5d43a6a56c774fdd3b13c7d4c7531f902d0f7bffee9772786be795f68232f7b7586b939eb2c99f8a3fb6c4bd0030ca16283a230267d4289b0af55b06a6a60930fc464cdefe72b997778711e5d1f27ca1048809529b10ecc9c95a0dd99368649d96f7823b1b35401c0890783bef4cefb22f49f6b5393a00b8aa851345a0116fe75e8aeff76a2d0ded9a7af22e04b0e3560a74298e72697be4995a62c7d9d0bcd0c44f5c9fa3a41c00a2d5fd144418e904f4065abfc08fe8740d4ed8670261a6538f004d6fe9c508b4134c367732719a51a8a64fe579c8cf794c3407c6a0f098a85e1e0df228d6a144ad6b87eada170cc0500b1bca999d4a1bee811e046110d1b02c916417098088cf0016a16c7200c9f4d3beb03d2e26a0ef", 0x1000, 0xca}, {&(0x7f0000000240)="926cab2a0744f953a6151c223d84ee4073c562e2d0c802c2e3bc247683b86d953867bce1d1db2b20f207a0f6d08fe3fb41808232b769196b60d8e4e26b45fb48f2e34524f8583330384a3d70fa10d1f759106088c7e198787b6fdba864270fb80678ed452547539cd87c634b41c054a0a7cad6553b127578446a1b108cbd51d553625ce8bf95548df7c11e9fd4614d9267e54ecc7e9488a800ab28730979db96cab86a70a2a13a6e37", 0xa9, 0x2}, {&(0x7f0000001500)="0165396981d9e28be10bee7f638d18c1d9482d32bd1faec12ccf8536bda3c9d83569df8b0332a5532f4df570eab6de933db0129cf4aa8a82e0aa8746baad3405c144291a358954482afd531ceebc54dfd04000efc84e0401fedfe277c8794587237313a90a8db4b4d2dd464e04e4a156a1fcc6fa30124a775e41891b5f19fa30d3889cc9583c650c86592a80f38ded27a1e6ecfa8194a42c3235a03802fb730bc3f2d2dd9670c31bc62ecc7068b2693d8bf8c32a2751204f3d386f0c737b4f49db09e0c26dc15249f7de22095472bd9aed86c9490ed28afd", 0xd8, 0x7c02}, {&(0x7f0000001600)="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", 0xfe, 0x9}], 0x1, &(0x7f00000001c0)={[{@bsdgroups='bsdgroups'}, {@lazytime='lazytime'}], [{@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, 'rootmode'}}, {@dont_hash='dont_hash'}]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000001840), &(0x7f0000001880)=0x4) read$FUSE(r0, &(0x7f0000002000), 0xfa3) [ 437.036211] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 437.063901] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 437.098186] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 437.122535] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.138339] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.148069] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.156755] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.165549] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.182840] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.193230] GDTR: limit=0x00000002, base=0x0000000000000000 [ 437.206196] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 437.229058] IDTR: limit=0x00000000, base=0x0000000060000011 [ 437.245041] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 437.261413] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 437.268950] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 437.277130] Interruptibility = 00000000 ActivityState = 00000000 [ 437.284021] *** Host State *** [ 437.289946] RIP = 0xffffffff8120262c RSP = 0xffff88017ffff390 [ 437.296827] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 437.304420] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 437.312939] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 437.324174] CR0=0000000080050033 CR3=00000001ba12c000 CR4=00000000001426e0 [ 437.331408] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 437.338591] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 437.345568] *** Control State *** [ 437.351402] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 437.358517] EntryControls=0000d1ff ExitControls=002fefff [ 437.364592] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 437.371702] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 437.378644] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 437.385702] reason=80000021 qualification=0000000000000000 [ 437.392594] IDTVectoring: info=00000000 errcode=00000000 [ 437.398128] TSC Offset = 0xffffff1428ec8708 [ 437.402769] EPT pointer = 0x00000001cc89701e [ 437.425393] *** Guest State *** [ 437.428891] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 437.438418] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 437.447829] CR3 = 0x0000000000000000 [ 437.451741] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 437.458308] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 437.464836] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 437.475616] CS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.484395] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.492615] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.500695] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.508933] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.517103] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 437.525403] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 437.534719] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 437.542890] IDTR: limit=0x00000000, base=0x0000000000000000 16:43:47 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000340)='nfs\x00', &(0x7f0000000380)='./file1\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x10, &(0x7f0000000880)='security.evm\x00') ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000140)) 16:43:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:47 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x2, 0x0, 0x7400000000000000}) [ 437.550879] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 437.558944] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 437.565437] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 437.573600] Interruptibility = 00000008 ActivityState = 00000000 [ 437.584596] *** Host State *** [ 437.587818] RIP = 0xffffffff8120262c RSP = 0xffff8801864c7390 [ 437.594623] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 437.607978] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 437.635482] FSBase=00007f8d189e9700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 437.663466] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 437.678208] CR0=0000000080050033 CR3=00000001ba12c000 CR4=00000000001426f0 [ 437.688425] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 437.695443] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 437.702198] *** Control State *** [ 437.705770] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 437.712748] EntryControls=0000d1ff ExitControls=002fefff [ 437.718493] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 437.726391] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 437.733141] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 437.739726] reason=80000021 qualification=0000000000000000 [ 437.747166] IDTVectoring: info=00000000 errcode=00000000 [ 437.752741] TSC Offset = 0xffffff1428ec8708 [ 437.757082] EPT pointer = 0x00000001d86d101e 16:43:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x8001}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x4, r1}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000200)}], 0x5, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x44000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x7fffffff, 0x2, 0x4, 0x27, 0x19, 0x1}) 16:43:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:47 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x100000000000000, 0x0, 0x7400000000000000}) [ 437.838387] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:47 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x7000000, 0x0, 0x7400000000000000}) 16:43:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x15, 0x2) 16:43:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r1 = getgid() r2 = getuid() lstat(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x6, &(0x7f0000000600)=[{&(0x7f0000000240)="3b32d83e0def025eee1d3517fceb4fa9e85cdd03e971e203a7adca1d8f6d92edb3250389b0ca801fca97efb0843573ff08ae26b54acd11c1ef1a58315a11f48ffcdf6f8f7f586d3b7bf27dcf8dad3769f3121f3d62f48dbb0c844cea5beba6fff196199f7728bab2e3eecbddf17ee3d9f84aa3f06bf3adff408791be1d46", 0x7e, 0x5}, {&(0x7f0000000340)="2a272205956b86546939ffae28b14246ee07a9c5c5fa4c99f5e6a6a08d1ffbd97a12e57f1175fbbe03df15756377a2f68053ffd48b1a244220016d2e2c57a70936d5e82f681e534ca6cea26bb36a2a7f535a69a663afe03238eefa1a06aa64dd1dfb5d1fbaf447cc0ba8c46a23f02af3536315d03d01f3de15e126ad947d2f8b00b3ffebcc388b746de8a330d9ccba825e87d6518756a216175b08299b841befbfdeeeaafb35", 0xa6, 0x4}, {&(0x7f0000002000)="2dbd1fa9a2c26d616c5902daac9ec86d543bcdd3c9f6c18b8dcde1f78bb9a6e8a367b3bb3e36fed5547b996d4c85746cfe06f62a8ead576739dbd64b32f67a1d99494f416b4e309b2eebacef028565117b50c5916d659ac8bd1633bb9edde36a4ec8b5600c0d44b20d51c5eef6d4ae762d27bff25b293c1794fb8bde51ce1e87fa23c2e2080e23f5ebbf098b7881b59153190c64b181a2e8c47396a0a40af73cfb26877f527e467889345b1d66d46a1159da91f95468248d0176111e10bdd77ca61cb242cafd61421463104597c1edd1f935c13aca946bc0d2b088b7dfc93153d21ea2d1952f0ef88c496f85bb4ae61edc712220daa09ed10eb6b2fb1ec6423ef3d98d103584fc4dc2c97a79de94be4b01503ee46feb6c6e637f4d4df34df2e4f4488c1dccd14d3c78491d9a75c7ec7e26b156b5192c5333ed5166e91635e25270e877d82d365a2285c9496939e61b7ea64913d06035e5204bb3211fef0a338cc6c61dd6535d7ff2fa1727284a9bbc52facd21229b8800c2829afffc58e9e7cdb4901c4cad68ad8902f0e631dd42643827714b7d95ecfdefd3dc3eec6571cc5881be0dba63f10933a7e1b9066fcb99e902a151afa25814b1fede9d941c14fc1b53a0c899a2192e1eda9b6cf8c4b04af7778097c528490fd73dd267ef5b0c246474f0b5153a9e2086e415d089250ef689fadc5477bac4982d4cd8f03e2826fe50485bc47c8a80034eb240eea1f539cdeca3d1f7886d553ff1958fd4233e48b7ae76f4a4a1fa40286e6241952f73a0e26f137f483f1db89d86c8ecb6063ea5a0b839a910de8c6ab4a9d60368c1f140d0676d5fa856c6d8328f635816dbc61d5f483cc6f3b692ce9752794d8dcdbeb77887c7939ae6cd14e80cc0dc0fb2e2f18360baad885f58995d553d1c084c82cd55e6d4aabaabf905d0e664d93b19275760fe8177b3b7ccc6882bda80cc4171ca8248a9474f7a1ffebac649db9c57e35235e7b2b8015dbde60b2203c3cd9469cb8b2a43139224c2df31c2196579bdc6e337451a3a63a0d44c3efa97465edf71109e777d80546696dc87e4f97ab575941c4af1b0825ca7f6003c2161a7f656129237572bd95418e5ae0e05c5c45efe5ecdb573095614c185cf975354a5d56ce42b19b1e4372f6e356500fb1febf874f9a5f3b58db550dd6f2bb12acf3772715024c37c295bcaea7e2a3cc25f88ff8788337fc440fa6fdedbc225f559ded2f46f856860997aaa63a1ff3dfad2c79a811bb19c6cd053b066b71a506055dd77857ace70aa111063a28caccd4ba6a3051e81641fc5ce4c82e8e1542855afad4274ff43d60648944714ecb2e6d3dffba0bb4ba557480fc61ea3d79ef1b5de7004e7f29fa42fb4d4da9de5bda88ebd02c0257d50993fba605f408c6f6833b3009757002b1b5fb765b8f88dd13b11d6d533c4513e6920358a3ab7589f0f2fc5b28124402d054d930132ffff0bb13b00ff3c136a0fae8bf8f372f73213cce8a131bc23aea8c42df4a11c3d0a94a7d426bb953079088f8da1994c690d55ece410ef751d82f02eee92e12d0aa20858fd02c0759a984e750cd8eed8546a8279ee024d29f5c0552022963783dc331bb4bb842d02103d2633df543d1ba4a3ca6da03b67f70e21fe20afec1893ce1e55a0184d0ce4b52a1a86a95421eeef0c4055a34f0f65f75e52cb8c2577a349c013e38badc68909925e8c12cd3b4ad9e2840560216dc95e73c42d1edca9adebb7c0abb191ed23e6d876005fdd3c3333364313e5aac54e43f2d3376ee9750b59455c56cc0cee19bfaf60299dd66a1c85bf15fd1691a316a48fd386126785055ab51366580b620a64767614b705955fefe50b2db5fecd93a6def539f19e8a1835d664d6e64e1bee8207e6edde685741f089498f3e1b859b064017800d0ef500e3469539e55fc565093acde1df71ef89230bdf29baa4f916882cd0a6a0e52c07bd0378873eb2614c88c276c92979aaf909acca6e0860599ae63c56d8171684ac500aa4c58c8b34dcf1b314b4ad653df602fad07f7050bf7e34daee97b0051e0c6d1a4903b52c4e96ee2bdd160c8794557f0ce6093c6a80bbf88efbbf258c779fecd8207ed728bceee50f0f31fd728d0f65060821018e08739db44921126f40dec0df038eb989b0e4cfa7119906bb6c5decad6db2067a4f631902856771321d7e0937a6e9dd12315e624ae61c95d88528ddf9a6c844c90f4afd041ba5c88be03244ad8e99eab7bff311f77834f452fecba5a43f9789e6e572eeae2346a4442150cec1c55b66134e49ec44a937b59849ad588256c4ff98e0eaa6373f1b75e1a3ee892ebd1a2ab9e10c8197db5b9f9458243ad1d06128706e85fa3086a3beca95e7049e539f95c4f58a13efcce479b163eebaa6f788d67c01525fe1e203468f9248990a53cd8231c65a16834ffa6f9fdd7276ef94370603564357434b00ac440b71889ac0a18e6a6c90f81fc2da1463a71c42b646c0ba3f20ca0fe330be1d16055b2ebaa7216f0d73be9eb83bf275345e30eb0135a7ddc8eea84221739ebe7d5fb51d0091f960cd0458f5788e9834ad7cf6618d3c060a4adb90d1277704f83e8570e09ea4575a32edf52274047a8205bf146987c07343b00602e5e52ee61e695d571002fb0ca47700a4214fd8c01c0f61a60fe4bfdced092af2d8c0cbbb9e3a9ea3626ce9afcf62a345601c4bf7200a4092d4945c7219f74d87ea77d1ccfa2aad8dfb9ea7b6b0445ef18ce11e650c150c86714d2d91ba1a5ffcca2b6fd9f36eb1463450dfdce89ce20a8c2dc3c2743619b55378340d727c474e87e62af0e09ca79a76ef77d2ea674fde06cd0d757a573d141e5309c801e70553cd4ff7daf09810f827e67cd34cef1b117e2498de235a0d0855fe3a17722f8ba7988c4fecf79340cb4b3404ebd32b5fdcd320387f2653d2dec1030ace64e088fce7f038b424ac4c69cf810c132fc739c1a0e1587476854eeb76e9c0a6e662a58baa6b9516eac3e480f36c167afdf494d6aaf77f34a28ac74a057eb50186f3db1aa7a7b64af23a8d6addb5cd9cee1e678c3dbedd609424637b9d09342e78dfaca0497cc11483013c853f622e472ad9ea5f7e63acc51ff8f552323a36309d95b64da0af27c2aa2d65db4837a993a508644c40746325723c1b0ac88b15df75c9868842cb4838a31725a2e410935fc75388c9e66241c98439c0e16c4651a04259ec4a0e8d71cb40103e41b271f29f8df77218429934718b5387cb9e1e6f524f4d417bf26028df6db5a3a613a8ccbd483889a12be887be8bd406b7bbdf6c0aee296fb6201f21e5c331c55a7881a49838d071801caaca4c18ccc98f201542c7534f9148a5d09f768a7ce17da51d0b2fb359214343e65e0a4a48f3d0812913f342eb9cd7f81d963db1013fe44a967815ce8a4cd0933540ebf76f30eff819bcd8e6caaf39b4b4c3d59f1a94431942618f6166d5cf144ef7441a4315a60c00d672f730dcd044ac49ca2f7c5006552d46daa89d3ad89d786f44d10bd375bf0713969ccffb3c0d0b30016010e07e76b23ae541180ee7a48ec36942e3aaf9374082ad5614da7340b72f3bf331c7bc8013fc01e4a14b792b2df27de14c96b08fdf03adb9edf33d44b27327df3d9abc1b7efb58ee3257cda8b5229c15876bf61f48b63e399087118855d8685b326f7ca632b257723e0776832e949c3c0046e3ae824aa6803e233ed01384bbe528c5f1769de98eb66e600f6d3daec3d19785367be0357d5e3f01bad093d2569e8b143f058514e71fa1c86ff8319dbd9183df01e85464dcf6578734c1cbea649844d90071052deb9f208b501a0c283a5bee050b2dd9e848f107f1803baa65e108ffc30912237ad3668c0786c8c3e1ec55f6c655840a2fcdcd84b8e18053c2617e5f76b02a8da301b5045c38fbea6cc426c38b7d88abe0b3c4edb8586366a3466a7f68ea5c6587ac86417459d6ed7d4e34e884f9f7b64499979befeb2853ef9dab4728dee73872a8b51e3934b1a7d7e563fb476347315d702175ba9a98f1eec5b43a295007b2a77d92c15a6d73ca1e5da21b14dbc2f8d2f5b05e881603f5fad5ac7b42f855a021d79ef25766d70484100f6cf46410e6ef39dbf7ea5370951c1c79743e98df489d7eb6e8e12ca258525e2ba542d01e718f03108f57e98f191660ee57de58838dec9dad67d8a3de8b17023161d4f916b3cc803a30693020ba82b3b63c6bab2938099ca2134b346699b5b02afbcf44332616bcbf0263ffa45e0192ed95db11ecfd20fd581a544b17c03fbad1af4f6fcae6658acc643e10ecbec00cdfbb07a5bfe93a411999bdcda65baabd89802575ea32d77fdd6211b80620b8acca84eeda273d90ed37d1738c649797c1a87ebce7e5face0f78b15a4740e2a937f5447abe1581169f882f5c5e285b5a31a95e3460908a60fe926c349b25a306128f69d894efbff9b797fbd7b443f672db21422bd2d7584ddbc4912f9b184a2b644ea92810e20b3ede6b33c49309923231a4e56b5de19586d60f3df969827bc0ad919b21e903d0c802411805db1824b65361343a8cdacd346ddcd0a6a8b76347fd2bf7534a96ff4282ef9b40d66dcf7e534b3b73e78b5eb667dba4cd1bc839f0533b3f3bd4ca480e365e88725b30411b9316cc96c36550d91755e04e15160125d7ffaaafc074f8d104aa57b4581d15f81cfae5c6347fa8322c480a1af8780b3cb2bd4c8a389864063d0be4e9da7ce70c0da291d973e5560b5e71efb2f4e026f915211f2fe67589fc8314d5e95531aca7cffb80c1026af534da8d4188c0c5cba2c5b1124990c61836e73f06c60b88a2f13afa1463cf4a3359915286e7000833931d224920120a4a0103f9fec5e142f02f8f60960c6f41407b5f5425cd5d84f758e76ccd3572108913189869ab6d33a1d963c9a577e4e1d6c57961ca2f08d012f962cea42d902dfba5d25f33377eac3c745669205b633086381d7ad9efb06c89ecf7c78ad4522f28dd6c50bcd16f731a971bf87e0f59465a4b1ec5b671027547a20aeaf424195152ee877f2d832ca12e045739d3a3c57441780c351387d5139fc9af586590ef6d8844d43f933f80922dbc66ae8c91bd5faf21c5406fe48d387e79f9a27da2c57005546478c53bc9b420e1cbc4708efaccda13c8e852e6d614f2b8868a022681eca5374e744a0e2e1b70892b45d68733c29d97144a51bfcc2b404fbcbee9ee8a0ddb209062c6134b989ff43c9cde31050dd95a7ab4534506c3ec2825d3db5522f157e0048fb184f6b9de280146a02ec6fc7087a585cd04d0103ab368cca13a66a4db8d5c74397f73fe43ed1ba4f97605e97bd66a638ece4fc9d8a1c20091303d6e6e65a3513e6df8439fbb90dd32e7b6e8b5ffeca9492553eb34c728b61a67122a0f5c8d37cb928a262b9a043f2581fee785bfca5725d53b90e92b304e8c1d3ac5b7c368a876eaf5a591f315ebcc4c1b4e23f01f790caf07ba8281f7a5ea615b056de6804db3ca14cf541190c6394108164a1ca944c7db52cbd9f7e075743103f29edfbe209dab03eb0c0eb26b5137a6291fd27f588e43873a58234678cf0f2098c9dba2f8332c3bb4384ef24d985dd3e11939918015baf47291b5155bcbc5a68e095c6e509ea977b26abb23a695dec01726326d4517724ac25ba4da138f31f4de3357c7ac4cd88d730174ae7d3071849afd6cdfe35c3987a691611065c40c804fea7ecf69296f1140f96701580d01717eeacebac91e9bf1f09b86285e12a5f73ffbce975554b659f4c59791ce", 0x1000, 0xffffffffffff8000}, {&(0x7f0000000500)="639c1f8d69a86cb5aef98d571ffd8fa38277043f9450a9ef4ec1fdd43d429726577f9289bb9fbf1f7b442c8f40db4a7c2321519d7a75b543a7b5508cab37bfb5405c715ffb84ea53925b05d19bd7c7f47d80cf3130b4193aa6446aab14d2a773bea3b5bc6718fc41a42f6df41213970fd5b4f6bfd1d3098d6fcfba8e1c12dcc165b92e32f06ff05ecdd9367db257bcde6e14535d7a86eac69281a2d245c13674be696bf14625cc17cb654e74a7b854468eba4b87e9b19bc2f3927547a1196b1804cdc3be33976bba7e60ba8ecfa5f6a7d1279bce", 0xd4, 0x2}, {&(0x7f0000000400)="653323ae3033fd681e3bddad2ff2c85eef5d6b4e1555d0199dccc88dd8a168c6a154645a25c693a82d64320893a324764cfdf6d6d9d2a78a3b32631e719e2acff7bbadccdf6d5a18c6402680e75dbd27a1257caf906af63b2366ee867607314318388a019d6858e97a5394ddc76db711ddc377c94adc6cf7759f2005e93a181bd029c1ac028466ab007fbdd254ff5d08d2548bbd9d194f97caa733641790c81f8d6d1ec29fc95735ee64", 0xaa, 0x1}, {&(0x7f0000003000)="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", 0x1000, 0x8000}], 0x42000, &(0x7f0000000840)={[{@case_sensitive_yes='case_sensitive=yes'}, {@gid={'gid', 0x3d, r1}}, {@case_sensitive_yes='case_sensitive=yes'}, {@disable_sparse_no='disable_sparse=no'}], [{@smackfsroot={'smackfsroot', 0x3d, 'fuse\x00'}}, {@fowner_gt={'fowner>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x73, 0x7d, 0x31, 0x37, 0x36, 0x7f, 0x61], 0x2d, [0x0, 0x37, 0x66, 0x39], 0x2d, [0x7f, 0x66], 0x2d, [0x39, 0x38, 0x77, 0x38], 0x2d, [0x35, 0x77, 0x0, 0x0, 0x0, 0x3b, 0x77, 0x65]}}}, {@euid_eq={'euid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = syz_open_dev$dmmidi(&(0x7f0000000940)='/dev/dmmidi#\x00', 0x81, 0x507400) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000980)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="c89504c475705f69643c94d8cae70ba63ea07245957c0e0cbf11e3114e6142ee02a5689d7b18c780865f0fe5076b39155754712076a60ea2c79339a7900160668823", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000000, 0x22402) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 438.139061] *** Guest State *** [ 438.149057] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 438.176090] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 438.200331] CR3 = 0x0000000000000000 [ 438.218578] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 438.238003] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 438.253725] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 438.272623] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.281115] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.302290] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.310548] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.333464] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.341827] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.362637] GDTR: limit=0x00000002, base=0x0000000000000000 [ 438.372772] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 438.392574] IDTR: limit=0x00000000, base=0x0000000060000011 [ 438.400960] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 16:43:48 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000340)='nfs\x00', &(0x7f0000000380)='./file1\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x10, &(0x7f0000000880)='security.evm\x00') ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000140)) 16:43:48 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) finit_module(r0, &(0x7f0000000040)='eth1:\x00', 0x3) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x800000000008201) 16:43:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0x0, 0x3}, 0x20) [ 438.420529] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 438.428585] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 438.479735] Interruptibility = 00000000 ActivityState = 00000000 [ 438.510578] *** Host State *** [ 438.524671] RIP = 0xffffffff8120262c RSP = 0xffff88018081f390 [ 438.541482] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 438.550429] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 438.560404] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 438.568410] CR0=0000000080050033 CR3=00000001d2460000 CR4=00000000001426e0 [ 438.587008] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 438.632523] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 438.641357] *** Control State *** [ 438.658991] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 438.673671] EntryControls=0000d1ff ExitControls=002fefff [ 438.679225] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 438.703560] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 438.713377] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 438.731042] reason=80000021 qualification=0000000000000000 [ 438.746186] IDTVectoring: info=00000000 errcode=00000000 [ 438.755331] TSC Offset = 0xffffff137ccf70bc [ 438.759964] EPT pointer = 0x000000017c1f801e 16:43:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x40001) 16:43:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000c0, 0x0) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x2, 0x7, 0x7, 0x47d, "754b4b92a31cafa06e7bc6ed023688792d59db0b3d3911dbf824ab9bcee3623de3ee31bed2faaca47db5ad80adf47eac919cf150d4f5f68f62948cb1a703c2", 0x30}, 0x60) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:48 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x2000000000000000, 0x7400000000000000}) 16:43:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) arch_prctl$ARCH_GET_CPUID(0x1011) 16:43:48 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xe2, 0x4000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000000c0)={0x4, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x1f, 0xca, 0x40, 0x9, &(0x7f0000000080)='rose0\x00', 0x8, 0x7f, 0x7}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffd, 0x3}, 0x20) 16:43:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x240) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7400000000000000}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0xae}, 0x28, 0x3) [ 439.073748] device bridge_slave_1 left promiscuous mode [ 439.081033] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.090339] *** Guest State *** [ 439.109435] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:43:48 executing program 0: socketpair(0x9, 0x0, 0x100000000, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0x100, 0x1, 0x42ea, 0x8786, 0x3, 0x4c66, 0xd46, 0x80000001]}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) [ 439.138634] IPVS: ftp: loaded support on port[0] = 21 [ 439.149388] device bridge_slave_0 left promiscuous mode [ 439.155724] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 439.159458] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.199686] CR3 = 0x0000000000000000 [ 439.212439] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 439.219622] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 439.232000] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 439.243583] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.253971] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.265075] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.274832] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.283660] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.292748] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 439.301759] team0 (unregistering): Port device team_slave_1 removed [ 439.317056] GDTR: limit=0x00000002, base=0x0000000000000000 [ 439.331976] team0 (unregistering): Port device team_slave_0 removed [ 439.343099] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:43:49 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$nfs(&(0x7f0000000340)='nfs\x00', &(0x7f0000000380)='./file1\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x10, &(0x7f0000000880)='security.evm\x00') write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66643dafc4c7dcd80c589830153331ab1ae468eccb57a68d29ed0bb902ff4436cda4df02d3712ed5fb4286", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x3, 0x7}, 0xff16) 16:43:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 439.352997] IDTR: limit=0x00000000, base=0x0000000060000011 [ 439.372780] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 439.385721] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 439.428405] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 439.440919] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 439.452932] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 439.461407] Interruptibility = 00000000 ActivityState = 00000000 [ 439.470811] *** Host State *** [ 439.477522] RIP = 0xffffffff8120262c RSP = 0xffff88017dfef390 [ 439.484112] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 439.491072] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 439.499734] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 439.515343] CR0=0000000080050033 CR3=000000017b1cb000 CR4=00000000001426f0 [ 439.524594] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 439.550602] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 439.584889] *** Control State *** [ 439.591975] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 439.630633] bond0 (unregistering): Released all slaves [ 439.631108] EntryControls=0000d1ff ExitControls=002fefff [ 439.644890] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 439.652576] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 439.664140] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 439.671152] reason=80000021 qualification=0000000000000000 [ 439.678091] IDTVectoring: info=00000000 errcode=00000000 [ 439.684055] TSC Offset = 0xffffff12fb495f00 [ 439.696308] EPT pointer = 0x00000001d7f7201e 16:43:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xf0, 0x1008201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 16:43:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030b2303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 440.000690] *** Guest State *** [ 440.005750] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 440.015601] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 440.027764] CR3 = 0x0000000000000000 [ 440.037587] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 440.047874] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 440.062451] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 440.094491] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.111391] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.122571] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.141629] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.156386] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.174958] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.190240] GDTR: limit=0x00000002, base=0x0000000000000000 [ 440.202448] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 440.226932] IDTR: limit=0x00000000, base=0x0000000060000011 [ 440.236342] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 440.282583] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 440.300430] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 440.325191] Interruptibility = 00000000 ActivityState = 00000000 [ 440.343917] *** Host State *** [ 440.347485] RIP = 0xffffffff8120262c RSP = 0xffff880181267390 [ 440.362449] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 440.374134] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 440.390310] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 440.406371] CR0=0000000080050033 CR3=00000001d190f000 CR4=00000000001426f0 [ 440.422733] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 440.442066] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 440.466914] *** Control State *** [ 440.470823] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 440.479542] EntryControls=0000d1ff ExitControls=002fefff [ 440.486224] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 440.493944] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 440.500982] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 440.508929] reason=80000021 qualification=0000000000000000 [ 440.516564] IDTVectoring: info=00000000 errcode=00000000 [ 440.523693] TSC Offset = 0xffffff127794f5ed [ 440.528429] EPT pointer = 0x00000001b610e01e [ 441.065286] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.071776] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.079875] device bridge_slave_0 entered promiscuous mode [ 441.128039] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.134883] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.142916] device bridge_slave_1 entered promiscuous mode [ 441.188982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 441.235245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 441.379417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 441.430271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 441.576138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 441.583546] team0: Port device team_slave_0 added [ 441.611669] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 441.618910] team0: Port device team_slave_1 added [ 441.648292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.677592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.707342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.736766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.008708] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.015321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.021911] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.028337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.035900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 442.914375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.001783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.094499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 443.187123] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 443.193448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.200430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.293196] 8021q: adding VLAN 0 to HW filter on device team0 16:43:53 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x700000000000000, 0x7400000000000000}) 16:43:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) dup(r0) 16:43:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2010000, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x7f}}, {@mode={'mode', 0x3d, 0x1}}], [{@fowner_gt={'fowner>', r1}}, {@euid_lt={'euid<', r2}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 16:43:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:53 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 443.857150] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 443.867639] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000002, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x1ff, 0x6, 0xffff}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/201) 16:43:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000180)=[0xee01, 0xee01, 0x0, 0x0, 0x0, 0x0, 0xee00, 0x0, 0xee01]) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x80000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'cgroup*'}}, {@appraise_type='appraise_type=imasig'}]}}) [ 444.029994] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:53 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, 0x7400000000000000}) 16:43:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:53 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0xffffffff00000000, 0x7400000000000000}) 16:43:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:54 executing program 0: bind$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x4}, 0x10) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:43:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) keyctl$session_to_parent(0x12) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cb2ef443d", @ANYRESDEC=0x0, @ANYBLOB="2cb2"]) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 444.371286] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:54 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0xffffff7f00000000, 0x7400000000000000}) [ 444.543771] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:54 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "1203356b43d6225b37f5d6fd4db349d4bf295ddb56e5f545de253060f2a0d894cce0ecaa6ca813e27bf062ed46bb02f07ecac6137514b332fcc0c72fb314c362eb153a288feab506c2c860ff5be82980f1d8b56fbffd24661c0712785c439aa970cb1347f7eef3d472ad1fe73b04d616cf5cf5ef764120d16078ada6af121c261249b0e63e666dd5642e9d0b42b5ffc919243df780b25a31980c7c7e68"}, 0xa1) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:43:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x1111) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 16:43:54 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x4, 0x7400000000000000}) 16:43:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x40, 0x5b6e, 0x5, 0x7, 0x5}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:43:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:54 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x5, 0x7400000000000000}) [ 444.817522] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) [ 444.943859] *** Guest State *** [ 444.948658] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 445.002622] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 445.021290] CR3 = 0x0000000000000000 [ 445.035908] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 445.039608] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 445.055924] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 445.073469] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:43:54 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x200000000000000, 0x7400000000000000}) 16:43:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x6, &(0x7f0000000580)=[{&(0x7f00000001c0)="535b45fbdac37799f0432f9c94d51c47952aea67f506303b5c1dd9746fea0727a3b5f05bdb", 0x25, 0x7}, {&(0x7f0000000280)="763305989c61a09e455f6bbfc33e17a944cc1a983f90bda0346642ea67dab3099b91ec54cce4187d62c8ca4ca942a06c0c28e2b25cc0959b7d4bf9e4344bac8d40e2ac9d66d4efe3e3b75aee25e1f12e74613d422f20554eb768d3e9180c96988243bda1a1e0e831c921e31187e8416591cdedfa075aac23a0e85a4431af56bae828dabe6401a9ecc1828b7d6a2b4126224b1e15feb3d674cba2a65529b85006960fcb9fae11736da00f057964f8f1ac7cd09aeaec8d26b35f7df97635c173805b405c73e65d023b21595d0069f413839beeccd45b90f8da2fda68446798dfd1367520002adc486999", 0xe9, 0x10000}, {&(0x7f0000000380)="cbf245e3dd343cb5308e16b302ceba4e1037889556c8f0a84b1ecf375106ccf2246886e31da28ec42a31d23953cbdb418ce2c7f2a48002207c7c13f7c5690f5d5a4d5428cd42fd54a17fbb6940c4d2292ff52ab8032f45ee170d2c2c399f61b38fcc84a1d8c5f9b3144fde9c2311ffd4daebe8de337174cab284cf5773036ee6725aade495e8fae3462008089a9c972ada6a78709b55a33ead740e68cd5f4bb331f0eb4b83de1d3c1aaaf5618baa8080ab63af855c021244dd091e62955c1273e7a0fd5d1d730bcb8d20f1ff", 0xcc, 0x1}, {&(0x7f0000000200)="89833816c4495c28fd6b6d7a22692fe4982cfdc0c5d3dd2d8380b39991dcf931d284e44f43117eb24e584be5512dc17f", 0x30, 0xffffffff9545765b}, {&(0x7f0000000480)="13420eae8be3d8b4", 0x8, 0x1d27}, {&(0x7f00000004c0)="2e403364e7382bd9aed2b57089f931294368aa0feaa09104d9f4217a67e03d0ded7e437aba6dc04394593f2ba4ef773e90c2492e8ffe9d95deafafd951d3ab1a14df9a7613e1b71f15b0d3674c2c2d253f1e256572d88ef64568dd1a6c1a7ca67f68d8b6b41a5e82600e955a3a3e3fc661f8b0c530ef63a974a7c579dc362a0e0c18a19d22e2bfbaf60e41f85097c4db2e6696772b408ce68fff0cbdc2da8304d3146be52df615b5fa179fd014", 0xad}], 0x200002, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x800, [], @bt={0x81, 0x200, 0xffffffffffffff00, 0xf5, 0x7ff, 0x288, 0x11, 0x6}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000140)={0xd5b1, 0xffff, 0x2}) [ 445.096888] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.147176] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.156418] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.165372] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.185583] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 445.195282] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.216567] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.227362] GDTR: limit=0x00000002, base=0x0000000000000000 [ 445.265395] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 445.284758] IDTR: limit=0x00000000, base=0x0000000060000011 [ 445.296010] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 445.312702] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 445.319337] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 445.327539] Interruptibility = 00000000 ActivityState = 00000000 [ 445.334777] *** Host State *** [ 445.339158] RIP = 0xffffffff8120262c RSP = 0xffff8801800df390 [ 445.345696] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 445.353496] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 445.361551] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 445.368165] CR0=0000000080050033 CR3=00000001c2048000 CR4=00000000001426e0 [ 445.375957] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 445.383295] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 445.389407] *** Control State *** [ 445.393337] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 445.400055] EntryControls=0000d1ff ExitControls=002fefff [ 445.405851] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 445.412879] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 445.419632] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 445.426388] reason=80000021 qualification=0000000000000000 [ 445.433929] IDTVectoring: info=00000000 errcode=00000000 [ 445.439416] TSC Offset = 0xffffff0fd7341707 [ 445.444171] EPT pointer = 0x00000001d74e701e 16:43:55 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:55 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x9, 0x2, 0x2, 0x2}, 'syz0\x00', 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x400) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="dfc42b6b0d215d43688e48e877a956b21c8e4986fc655025f578f532910ea0853b973507c0a62c9b9509a76645d99591d23ea0226d9e8335cdd1a30a07f31115b862b2ee163821f1c051e23a9366739d182b4dab20cd11e948bafe31fd5a1a37ff10b650b09f833b947305b70661b88d477220523efca461df3643312e0c65483ef7ec559bb7a73d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000001000), 0x1283) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000500)="4f2b1fca75ca1d597b03dcdad1303720304d1a8b9030fa1651043be7eb6afb3fb028e50e7c1ffbe29c3241c8e810b55f4b9adb852762b70cbf7a4b67b8774bb2f045776310c3e4819218628318cea870a1ff73dd260000ec620bea0f2c57f2d7b60a3a7f799f36b65e77de92c679f803efb9d1b1e0fbd211ccda2ec69adc6d310aade2b52f602a705e8ac8f2d7580c117963ceac812d1ff06ff13972d9f19c2ca9600da545ae7c0742883bf3af9456162e21d0294446facd6d87c29321e9cc76400017a79392f059742fd0ac4739fd", 0xcf) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0xebc}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @remote}}, [0xfffffffffffffffe, 0x2, 0x0, 0x4, 0x3f, 0xdcd6, 0x2, 0x40, 0x2c, 0x7, 0x1ff000000000, 0xfffffffffffffffd, 0x7, 0x9ba6]}, &(0x7f0000000240)=0x100) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 16:43:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x5000000, 0x7400000000000000}) 16:43:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1e) 16:43:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x6000000, 0x7400000000000000}) [ 445.761376] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, &(0x7f00000003c0)="dfcbcfc5d98c8b0f20528bb040ff62c45635") lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/251) write$P9_RSTAT(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5d) timerfd_create(0x7, 0x800) prctl$PR_MCE_KILL_GET(0x22) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000700)=[{&(0x7f0000000400)="46a74e415a15edfaf2590e87b10e76ee57", 0x11, 0x6}, {&(0x7f0000000440)="7cf1b621666e494a0dd5a85e67d0ce45cf7f68a929c7c3ad10895605053ebdf401a0a26523c36715385ca6d5c37a7160267f7b1accc786484d34ab907cc5f158d44db772b4900b50c955341c5146e2f64b825bba77e15040c6713c3ea12223bfcaba8fea34f41692af4a198e39787d44da70e6dda8cfc14bfe18129c5d97127a2b01c6f68532", 0x86, 0x8}, {&(0x7f0000000500)="17a407c1b8800a75230264cea232a435bafab27440c347cb4a810281e4d050dd32fb321c05", 0x25, 0x5}, {&(0x7f0000000680)="94074c2490e00c3dc4469f1525d19436c142c240a7750e4678baa8a3325b4aec6c1e023e6bc8b775912d5dd192e72416fdda1b8be4f605251b23f9e5d381110aa0ff10131feb2698938128327818529e4fac52b4ec3e0d3df139943fd06b96d3c63fa67091933c5c9e0833", 0x6b, 0x40}], 0x110410, &(0x7f0000000780)={[{@gid={'gid', 0x3d, r3}}, {@file_umask={'file_umask', 0x3d, 0x4da}}, {@quiet='quiet'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, 'cpusetGPL-usernodeveth0em1}*-(vboxnet0'}}, {@dont_hash='dont_hash'}]}) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{}, {r4, r5+10000000}}, &(0x7f00000002c0)) 16:43:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) getegid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) prctl$PR_SET_TSC(0x1a, 0x1) read$FUSE(r0, &(0x7f0000001000), 0x1283) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) [ 445.916011] *** Guest State *** [ 445.936125] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 445.974660] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 445.975854] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 446.002554] CR3 = 0x0000000000000000 16:43:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad), 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 446.025666] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 446.057517] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 446.064537] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:43:55 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 446.071865] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.080728] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.090099] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.098943] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.107706] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.119432] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.136897] GDTR: limit=0x00000002, base=0x0000000000000000 [ 446.154583] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 446.165512] IDTR: limit=0x00000000, base=0x0000000060000011 [ 446.196890] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 446.217539] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 446.225972] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 446.234427] Interruptibility = 00000000 ActivityState = 00000000 [ 446.241171] *** Host State *** [ 446.245452] RIP = 0xffffffff8120262c RSP = 0xffff8801800df390 [ 446.251981] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 446.259142] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 446.268530] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 446.276441] CR0=0000000080050033 CR3=00000001d8896000 CR4=00000000001426f0 [ 446.286583] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 446.293601] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 446.299748] *** Control State *** [ 446.303573] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 446.310414] EntryControls=0000d1ff ExitControls=002fefff [ 446.316352] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 446.323795] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 446.330508] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 446.337185] reason=80000021 qualification=0000000000000000 [ 446.343739] IDTVectoring: info=00000000 errcode=00000000 [ 446.349339] TSC Offset = 0xffffff0f554d93e8 [ 446.354028] EPT pointer = 0x00000001d758c01e 16:43:56 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x9c, 0x1, 0xd5, "ef05da130df2b4574ff0ac0de21d775f", "1f7fe7bbf6b9761b3ceeb4f368146dfef3f940129d8fab802c304626b887d0c4e0c3fb3c4b00633d12c77d0d49ada112efad81c0c3b5791d85e2a49177462645c47d8ad96568b4ae4b3b4807b6d3520d71fc2800b61ce71d78a1cddbef69ba2de59baad79fd0169705cd6791f1edaccac104072065999e0e154283bca853b5cfa2cadcfb1f320d"}, 0x9c, 0x519349c87e401e9c) read$FUSE(r0, &(0x7f0000001000), 0x1283) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$FUSE_OPEN(r0, &(0x7f0000000040)={0xfffffffffffffebf, 0x20000000, 0x3}, 0x20) 16:43:56 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x7, 0x7400000000000000}) 16:43:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad), 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0x7400000000000000}) 16:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad), 0x0, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 446.660850] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:56 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x10000000000000, 0x7400000000000000}) 16:43:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xa89, 0x8205) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x9, 'syz0\x00', 0x8000}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000100)={0xb22, 0x54, 0x1}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x6, 0x0, 0x9, 0x0, 0x0, 0x7400000000000000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x2, 0x3, 0x9, 'syz0\x00', 0x2}, 0x0, [0x2, 0x1, 0x0, 0x7, 0xe243, 0x8, 0x1000, 0x200000000, 0x8, 0xfff, 0xeb12, 0x3, 0x1000, 0x1, 0x0, 0xffff, 0x465, 0x9, 0x9, 0x9, 0xffff, 0x6, 0x9, 0xfffffffffffffffa, 0x8, 0x4, 0x200, 0x3ff, 0x1, 0x80, 0x1000000020, 0x7ff, 0x0, 0x284, 0x1, 0x9, 0x3, 0x2, 0x8001, 0x5, 0x3, 0x8001, 0x8, 0x200000000000, 0xb4f, 0x1000, 0x5, 0x8, 0x0, 0x40, 0x5, 0x7, 0x6, 0x5, 0x8, 0xba07, 0x0, 0x81, 0x0, 0xffffffff, 0x187d, 0x1, 0x5, 0x7fffffff, 0xab, 0x9, 0xffffffffffffffbb, 0x6, 0x7fffffff, 0x0, 0x5, 0xa438, 0x3f, 0xfffffffffffffff7, 0x5, 0x2, 0x9d, 0x54, 0x80, 0x722, 0x6, 0x490, 0x2, 0x10cb, 0x81, 0x1, 0x2ec6, 0x10001, 0x2032, 0x2, 0x62, 0x593, 0x3, 0x0, 0x0, 0x20, 0x4000000, 0x6b13, 0xfff, 0x7b, 0x80000000, 0x0, 0x100, 0x5, 0xede, 0x2, 0x0, 0x3, 0x0, 0x1ff, 0x5, 0x1, 0x4, 0x1, 0x1f, 0x80000001, 0x3, 0x5a, 0x400, 0x3, 0x2, 0x9, 0x4, 0x5, 0x7, 0x8000, 0x7]}) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x35, 0x5, 0xd, 0x12, 0x9, 0x2, 0x2, 0xe5, 0xffffffffffffffff}) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x8000}) 16:43:56 executing program 3: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x24100) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:43:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 446.923981] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 447.134197] *** Guest State *** [ 447.143685] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 447.153442] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 447.162969] CR3 = 0x0000000000000000 [ 447.166855] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 447.173506] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 447.179644] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 447.186846] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.195805] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.204304] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.212897] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.220960] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.229376] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.242955] GDTR: limit=0x00000002, base=0x0000000000000000 [ 447.251008] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 447.259402] IDTR: limit=0x00000000, base=0x0000000060000011 [ 447.267686] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 447.276039] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 447.282811] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 447.290376] Interruptibility = 00000000 ActivityState = 00000000 [ 447.296862] *** Host State *** [ 447.300097] RIP = 0xffffffff8120262c RSP = 0xffff88017cfdf390 [ 447.306186] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 447.312728] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 447.320585] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 447.326682] CR0=0000000080050033 CR3=00000001d5e77000 CR4=00000000001426e0 [ 447.333867] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 447.340605] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 447.346906] *** Control State *** [ 447.350558] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 447.357520] EntryControls=0000d1ff ExitControls=002fefff [ 447.363280] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 447.370400] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 447.377253] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 447.384065] reason=80000021 qualification=0000000000000000 [ 447.390448] IDTVectoring: info=00000000 errcode=00000000 [ 447.396080] TSC Offset = 0xffffff0ea1e12133 [ 447.400485] EPT pointer = 0x00000001ba23f01e 16:43:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x1000000, 0x7400000000000000}) 16:43:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x9, 0x4) 16:43:57 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(seed)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0xfffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x7) 16:43:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) r3 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) r5 = getpgrp(0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) getresuid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000c80)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000340)="b40a9b07cc27bc031297343e66e72459a1e2e8ccc32a233a7833b9af4a2014674b35c62a6a4f75c46af318043dacb820947e002fd24925d18ef8be6c6b1b47d0ad1cb5ebdc13656a24731a954b13061d02beef892b86b9cd51c898ddd38982cf3ef7c48cd53f945b2e215a907e74a96194b0a8f4f891a9d7165c5fdfdc2076d096466d1c4787682eb527e62bc50e53846063dba30434805c8124e69935506de5aa5f193acf41395b834c5857388a0ef271700cdf", 0xb4}, {&(0x7f0000000400)="474f817244e14533934321c53d774ee92c74c0a1bd3b15aa03e6cfa5c0fcafac39dbdfcc36543e1a9cc7f8da3c5c13f3d793cf65951772dad615056a609b68f3b605b1a4efbbfad71ebf82195f7a3c7ebbc55d1a62f8868698fab78a6da516799be3831d28c51785b2cca5171112be07d4da63a72611eadeffdb1f34d54249c0ede826a658e10aa13ad4b9fcc7", 0x8d}, {&(0x7f00000004c0)="63acc5f7899b8d9992b627af7067540d865f90f77ca0e9d60a703f99cb422253b142150ce54c3218bc66117cbe95e20d2d61a43e4d3b865aa4f311968132b0a3f9afdb2e919b6ad0194b219f0b54d2e0c25406f2c65ed4ad32a58f9d4e650d6d3b0effcdd99ff8a332705f828a89040423d0968cb4050c6ff4238cfe79b60f943b0de4bba9d10587ad44b8b3a8ac16a7982d2bc06657f1984740b0932fc4944c67dc037e", 0xa4}, {&(0x7f0000000580)="a8f4e225436504e198242dc312f5722afacfab14c1fbeedf62074e48f29eadf04fa519a7d0918c563604d8b20bc8414c8560a642ac583e61b1775fb864d8a297cdfef7b91049431c12ec847f3287153510f44dbb47a28cd398e09ed5d042b0319cd00a3fdf5ade8d2b0719419e1eba64414d9d522e7b9824571f1e94ce5e64c54377ed580c5cf6665dcbe5fcc45705619a64f12c3be70d0ba7782179a87bfaf3a6ef22f44068ca588231f16d479aade33a7e36000c7c1eb93d04366f9b3eda65f1aff09518c8d51edbbf04a6dda16222c8e22935ec58ca1e5f32442b260b28af6e04a5cb81f70a60e6ab986cc497ca47d61ef3b1d4fa", 0xf6}, {&(0x7f0000000680)="5cbf13568674aa76f9ab1b54986445f0ce8bc39cb47c92db5354fb6012a73d3c1b70851b4a7f801c6c3fb7f39d1b7c26b288c18cd3e4e18392c6dee547e07682abc57a70", 0x44}], 0x5, &(0x7f0000000b80)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xf0, 0x40}, 0x20000004) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r11, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff) 16:43:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x3f000000, 0x7400000000000000}) [ 447.554080] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:43:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x700, 0x7400000000000000}) [ 447.763727] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x7f, 0x20000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000180)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x16, &(0x7f00000000c0)="3c4cb4a7ae599686c6fe60019b61213f93bc28cd10d8"}) [ 447.959106] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 448.031868] *** Guest State *** [ 448.038375] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 448.048065] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 448.058763] CR3 = 0x0000000000000000 [ 448.064076] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 448.070140] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 448.076367] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 448.083281] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.091538] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.099677] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.107880] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.116188] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.124548] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.132877] GDTR: limit=0x00000002, base=0x0000000000000000 [ 448.140950] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.149196] IDTR: limit=0x00000000, base=0x0000000060000011 [ 448.157334] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 448.166257] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 448.173153] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 448.180776] Interruptibility = 00000000 ActivityState = 00000000 [ 448.187988] *** Host State *** [ 448.191281] RIP = 0xffffffff8120262c RSP = 0xffff88017c877390 [ 448.197677] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 448.204233] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 448.212175] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 448.218138] CR0=0000000080050033 CR3=00000001835e4000 CR4=00000000001426e0 [ 448.225845] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 448.232733] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 448.238921] *** Control State *** [ 448.242494] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 448.249195] EntryControls=0000d1ff ExitControls=002fefff [ 448.254972] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 448.262294] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 448.269090] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 448.275794] reason=80000021 qualification=0000000000000000 [ 448.282384] IDTVectoring: info=00000000 errcode=00000000 [ 448.287901] TSC Offset = 0xffffff0e260d39dc [ 448.293450] EPT pointer = 0x00000001bf75001e 16:43:58 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) r5 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r6 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) fsetxattr$security_evm(r5, 0x0, 0x0, 0x0, 0x1) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r6, 0x0, 0x0) 16:43:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(0x0, 0x0, 0x400000000e3) dup2(r1, r0) 16:43:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff81, 0x88200) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={0x0, @local, @loopback}, &(0x7f00000008c0)=0xc) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000780)="062f703785e57c120582c8565023e4fdec91f0ad7a46ed8743061c437cf97dd8d020bf08805888f6a96cb000ca0aead9b4fdcf6ca2089a089ba7313fe1f9a3358c484afdff0e68d673e05679d934248b9aef2f99f96011ff66c614e3eb00efa57da72aa9cd4252560fae76e2dc013859077c1aaeec94c55148b0568a49971bb5a9d477e9ebb8a55fe00b02ca4703aa07") ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000740)={0xce, 0xfffffffffffffff7, 0x2}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x8001, 0x0, 0x3, 0x3, 0x0, 0x7400000000000000}) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)="c7387633901cc37ac73d54527790d65713afbfb116b93a36f94ff55b216acedf8773f5bfb73abbb30bc26d88d8e584e1727d8c2d690223b62bb0cd6121a36ffce4e32aa1a27eb17ffe3644891ef407145e2b42e86fc82d4ead3b2eeabfb76114380b52d9af31cbc88f52c8af97646e0982ba226b38ba887999ab1c76d46f9507b14769941244d3610998284b5e31628c50026a285db9fbe656c148f4b51a9968918b6ddfcf5b2f8d028ce24f6c3a80fe73563773765657a4170c29df4b03ce60ab433c1997224c0fdbe20a150e08fff1b41a4cd0cdb1a11140d7819185a5abfa", 0xe0}, {&(0x7f0000000140)="02ef829f30500876dea639d80863cfc6f31b0b7a353c0a945b50a15bdb35a6af8a827a1f74b7a7a3e4cec42d0b5572af6fdeac705bdf0c2e22de3b2d8ad3a68b1206111a4ddd378b11cca685195f089061ff6f2e59ce87e91f109a7257c554001ef348e86b96a23378269b13b6dad03396d1ee815b", 0x75}, {&(0x7f0000000280)="d1e04ae3c02a1b5fd7e040be9aabe42ed5a6aaccaa0e281878d3674daed310dc6641da29fb470a0a7dbe5c59e210f6f30dda08122cadf244a5993904a7f41b5863ee9aeef6013b7a7a4462231a0254fc8023413c6faa76ece262f55eadbed08572ee330d09840f84b21d9512759586c858d733fab187f2b82ebe7d94c1e00722a8aa3cf53b18658aadbf5712fcfd69a79e669731d5ce7a3da3f69676216b285337b629b23a9ae723290a57582eddea632ae216a0bbdcd007d1ca15374842c87f3c47809ee266774fccf827172901b18e2d", 0xd1}, {&(0x7f0000000380)="6937f46bd8c6de980464899999c2c9e1a6704e7dd05a3da0d8067e3f1eb65405d03131e2c9696ecf7ac91db0e34fac7cdbef5003c4b395694898dc3c4961b6a1f76fe9cd76911b77b8e9a13f4f3f7589541e04e8d0b38e1a59704098b54cc5bc9c78d3377480e1138592de5815b04a05f710d894e7244bb902dd38a47758f6af4d224424ea4372b0d055303ebc378556747afc509b132dbded00877f1dd65c3d8fc4a67abc6da50fab20b1fc9dc86d3bacf8f186ca7291de9e5a085281d90cc8453e838de867bb3d69be455e5cb8ffffc3613b590dff25", 0xd7}, {&(0x7f0000000480)="4e78bf7236272590d25b997f61fc6f3b07caae2eb0774bfe19ea9ef31725122a4ddd8d45467253fcb2481c7e99385800824313d39c32d7c8adf65a5a650ee90cda683fd29bd24476364299dcd473dce29bda8fbf112f3b76e0bc644388e387216c017ea77cb8d14d9fc0e17123f14855c7ff1a848e41759dfafcd388ab6855ef75b20cf6c58ee95cae65e73fe1e8e9e05a5fa94fbf1d81f078f22bbc684ca927c5577fb0c401dfc7446e66d5a5a6", 0xae}, {&(0x7f0000000540)="0985c13bb6d968821b042a010d5cb48306e5660330659d9274230361db90fddcedc0f7ff57849acf243919c68720a214bfd7a6db9ae89f3c9620047639d2b9b26c411cc703ca80b9fed24a8ad53fbdbac5829ef56ea93a4e1ebb035dd3e24934c166f37f40ab341584782f92d691f6035fa2e22862ff3eb647a81b87d9051a4df588ca3a828ab987600873909535c2a721a9ab057200510650ecf0d1877a1160121e6885d56d2b995f4df0340350c7", 0xaf}, {&(0x7f0000000600)="a65fcc0c0c7eb1877a7ad1254fa1a849ff465e1e489c6cb808894df3fae3f4f0525cf8796909d2c2b120afcdde880f75d5d76bff38da7fc025e0b9ee681f7816fe548f4eb3d2425c998be316c6d8a9a62b2c9ff130cb0922fb3fee3f1d29f86a3c633226c335f8ac1fa1b9f6fdf4d3455bf0584e69856227b21eba4cd196913a86b39ccf58d243a51b2c4c1afffa296f22abd2aac13323bb6bbe79170b5e2ac438cb15250fa4a34145fa5a2a70fc76fd08f46ae9a58ae932e9c04ad3", 0xbc}, {&(0x7f00000001c0)="97c3310f0452afd2f21d3f3ef743f2a0280f1ed55af0c581ba3afa25330e6dcfcf949280c00e476fc7c3b1fa537b2003daa9aac8d43caa144f11144a35c98a2084548fab663f8633dfaeeca43e5791f4f3", 0x51}], 0x8, 0xa) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, 0x4) 16:43:58 executing program 3: syz_execute_func(&(0x7f00000001c0)="cd8075fcb0b06969ef69dc00d9c4017d50ee8adcd0d01192000880410fd1b0b5d90000797c2a0f0fcdc4e3a95fd965eae23c3b4d4d408064797f41dfdf400f01efe5e59d7d2f2f1c0a1a63460fc4c161fccddfde9f") 16:43:58 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x3, 0x7400000000000000}) 16:43:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:58 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x400) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20000) [ 448.489583] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:58 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x500000000000000, 0x7400000000000000}) [ 448.624308] *** Guest State *** [ 448.632799] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 448.643040] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 448.652484] CR3 = 0x0000000000000000 [ 448.656628] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 448.663399] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:43:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(0x0, 0x0, 0x400000000e3) dup2(r1, r0) [ 448.682715] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 448.692729] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.707723] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.716900] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.726762] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.735805] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.745483] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.754967] GDTR: limit=0x00000002, base=0x0000000000000000 16:43:58 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x20000000, 0x7400000000000000}) 16:43:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ftruncate(r0, 0xace) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x2, {0xfffffffffffffff9, 0x4, 0xffffffff, 0x5}}, 0x20) [ 448.775974] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 448.789506] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 448.803341] IDTR: limit=0x00000000, base=0x0000000060000011 [ 448.830786] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 448.851037] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 448.877176] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 448.895589] Interruptibility = 00000000 ActivityState = 00000000 [ 448.906745] *** Host State *** [ 448.913067] RIP = 0xffffffff8120262c RSP = 0xffff880180b5f390 16:43:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 448.923543] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 448.938095] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 448.949213] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 448.967359] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 448.976566] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 448.984110] CR0=0000000080050033 CR3=00000001c2b02000 CR4=00000000001426f0 [ 449.006255] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 449.024343] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 449.044666] *** Control State *** [ 449.050869] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 449.065988] EntryControls=0000d1ff ExitControls=002fefff [ 449.086887] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 449.110464] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 449.122837] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 449.129907] reason=80000021 qualification=0000000000000000 [ 449.137538] IDTVectoring: info=00000000 errcode=00000000 [ 449.143758] TSC Offset = 0xffffff0dd8d2f392 [ 449.148626] EPT pointer = 0x00000001cd81201e 16:43:59 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r5 = creat(&(0x7f0000002840)='./file0\x00', 0x104) rt_sigsuspend(&(0x7f00000000c0), 0x8) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r5, 0x0, 0x0) 16:43:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0xffffff7f, 0x7400000000000000}) 16:43:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x3, 0x0, 0x7400000000000000}) [ 449.315465] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:59 executing program 3: socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) 16:43:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(0x0, 0x0, 0x400000000e3) dup2(r1, r0) 16:43:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x10, 0x7400000000000000}) 16:43:59 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000001c0)={"d8f7b8605dbb22b54413998d8f4db61da2b07cc28ee3e043f5f12a0caf0328d83353abb31418374a8ca8d20b9b52f95cdd753bf2c4fa71904d95d4c22fdcc65e6949e505a63d3eb9bf124c55cfae75775034d74216d6436c7244bf6192a18697528db11590d519a2c832ddd4d742e7faf7e4e156c01ec3991b0cb41da13e20aa7baac4fd1bfa5d357ebe57208d02d7242b405d13b36a576f6bc68f215996108c139ef60065a2da208904c0a7ac13739882c0925739d23b799d27033628bb20305165a5b504034cc727a70d8493f9814bfb13eab8541e238bb432c0345979172a6cee78a0b5550ea6117d7144f842b4a362441051ed21fb40d65d2965974fea91b10cbc71d897623ee3f0407c153bf92214294068b7e704bad0fabc6e0479396fc2029188c4582ae3edfc66c193948a594c0032912ec305cee2e9aa4c18b60d4bf5ce2e4932679c41a7a198f61e96f3734360dd4f909750424dfbf2c819ce11e7fdcfcf19f94aac5f3c8f2e41cf31dab30ff734fb7d45ce41b4c486bf05716e62e16e88d7eea7c08f99a1907c94ed931f5ab7c5e1b7802ac41c9407d2b6566667bd15c43f62b3bfef63a662140251481142b6009c2b77f971a28c4a49a454c9762b6343b9524669146c9468dd2aaa76c138a63bd8312ad9ee3d11b99d00228b040d8484a5d89b5b5914a61b1fbf0010a31bea8bc429b3fb14792739d73c4ad7ecf1b3619f106d414a73ecc5dc056f18598dfb60bff395d42f976ab3cd5b579c0471264c1eaa48f801eebb093886217d527483616cbd37451cba42c40e7cd6e5cf04d7d970a16eaabd7aa05550696715c2f9b830e3ce7013327ba89c2502ace6cb6bfcc13a0ab24c9555e7888216d0ebb3987a915dfcd98da251669bdd45f80a0d06bbab4814b4905bea87d02212ffce4cd81c604cd160370e256d63c0585b4cfc6840bc6b1ef539ead768e9d6802ccdb79c9457db15a52032332307f5b689e89a9ef4cb90724419c1a47f61228b8c4fc05b0db903d715e0842020b10a1c4b55f26bfca356d28f6058ac9431479fd847b7446b97370f300ac61fa4c875b5d08c244111ebf16703d3841839cee5eaafe25aad840a9b724ce6df717723ee98269f69bf33b065c33f5cfcd6a5ee46c6dda297175bdfa13cced3ac34aef062b29e4be941ed2317c2cbdd569a2c86bd50307947141429c7919dae811aa406eda054f8c7ceb52a097a30aff722bc25b161fbcefbf5ab6578220e6d1d9012558dfb503faeb6290256b627bd7b9eb7272f72d052560e394cda0b1983724494d4e9d81f4bc31b076693b36da1dfafbe6482564bcf8f5d458f4c036f3887e5ca3103a59214cb866cad5125c2055cc26265d626903df892d2ef48d64086cd862a3e6694faef302fe4e5a7aa98a57a25b19c45f7af6bafa931de5ad7fd547cecb466e79d064004"}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000100)=""/181, &(0x7f0000000080)=0xb5) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f00000000c0)={0xfff, 0x1000, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 449.473784] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x6000000000000000, 0x7400000000000000}) [ 449.584043] *** Guest State *** [ 449.588434] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 449.599316] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 449.610046] CR3 = 0x0000000000000000 [ 449.615655] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 449.622727] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:43:59 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x10000) 16:43:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x8004c00, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) [ 449.636532] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 449.654223] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.668292] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.685500] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.702439] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.717336] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:43:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0x400000000e3) dup2(r1, r0) [ 449.732745] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.752672] netlink: set zone limit has 4 unknown bytes [ 449.762913] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.773125] GDTR: limit=0x00000002, base=0x0000000000000000 [ 449.783891] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 449.792272] netlink: set zone limit has 4 unknown bytes [ 449.792928] IDTR: limit=0x00000000, base=0x0000000060000011 [ 449.823737] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 449.845168] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 449.863511] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 449.885958] Interruptibility = 00000000 ActivityState = 00000000 [ 449.904870] *** Host State *** [ 449.911873] RIP = 0xffffffff8120262c RSP = 0xffff88017e617390 [ 449.918391] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 449.933753] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 449.943363] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 449.949397] CR0=0000000080050033 CR3=000000018666c000 CR4=00000000001426e0 [ 449.957230] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 449.964376] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 449.970553] *** Control State *** [ 449.976944] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 449.984047] EntryControls=0000d1ff ExitControls=002fefff [ 449.989632] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 449.997108] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 450.003896] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 450.010509] reason=80000021 qualification=0000000000000000 [ 450.017145] IDTVectoring: info=00000000 errcode=00000000 [ 450.022727] TSC Offset = 0xffffff0d4f2e5f78 [ 450.027126] EPT pointer = 0x00000001bd06b01e 16:43:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x100000000000000, 0x7400000000000000}) 16:43:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x40811) 16:43:59 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x405, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 16:43:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:59 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r5 = creat(&(0x7f0000002840)='./file0\x00', 0x104) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r5, 0x0, 0x0) 16:43:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0x400000000e3) dup2(r1, r0) [ 450.204999] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:00 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x400000000000000, 0x7400000000000000}) 16:44:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x8202) timer_create(0x5, &(0x7f0000000280)={0x0, 0x1e, 0x1, @thr={&(0x7f00000000c0)="ea3504c7a01d884ce4662e3d173a8c1f809aff50058e6e6e4c48d39146ac4518caaa2bb36456c35e40abce309e44b33e1b03fd679c7055574d51666247c84d9030b607e2a6cbe88971f4a0", &(0x7f0000000140)="ef669dfc5010e72be5d68ae6136bbedc9924e4c0a00c02539274776f54ae997fc3a5d2205b822219f472860fff8974821c77f31573c260817324e47199ed0153d4b351dd71f0f4da2d3ed7e2c8b109261bb4d311e7475e478c1ac5837feee78278bfbe19519e42f8914cbaee73ea82cbef051126861bb25a9991ce1932fb226db97394385dfa4b36ed501d505fab95169b01e307de94c7440ac9fcfd7afa62e5a0552f588a6a52dfa4452016d47e9fb36a57af3b8bf737f1a11987859249b5b0f9a6546566b4bec3d9adfd4561fc380ce6f197"}}, &(0x7f00000002c0)=0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000400)={0x0, @reserved}) timer_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x989680}}, &(0x7f0000000340)) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, 0x0, 0x7400000000000000}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:44:00 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x40811) 16:44:00 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x600, 0x7400000000000000}) [ 450.412806] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:00 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r5 = creat(&(0x7f0000002840)='./file0\x00', 0x104) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r5, 0x0, 0x0) 16:44:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x80000003, 0x0, 0x40001ffffff, 0x0, 0x7400000000000000}) 16:44:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040), 0x0, 0x400000000e3) dup2(r1, r0) [ 450.623966] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:00 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x300000000000000, 0x7400000000000000}) 16:44:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x3f, 0x3f, 0xaf, 0x0, 0x8001, 0x9, 0x2, 0x9b, 0xfffffffffffffffc, 0x869, 0xffffffffffff0001, 0x9, 0x73dacc33, 0x17f0, 0x7e]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x100000000, 0x5, 0x8, 0x9, 0x7, 0x2, 0x7, 0xfff, r1}, 0x20) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 16:44:00 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x3000000, 0x7400000000000000}) [ 450.813435] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 450.846052] *** Guest State *** [ 450.854376] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x400000000e3) dup2(r1, r0) [ 450.942699] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:00 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) r5 = creat(&(0x7f0000002840)='./file0\x00', 0x104) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(r5, 0x0, 0x0) [ 450.998080] CR3 = 0x0000000000000000 [ 451.042771] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 451.073292] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 451.076870] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:44:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000e593, 0x0, 0x7400000000000000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x100000000000, 0xc247, 0x100}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)=0xff) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="197b3adfa7e54ffb14864ecbe35b493f41b5393a1be08067974731aa9de008c6e123bf7e171c15b8af42d6b66268e14a195f78552a6ea7e5b9a2c815c965c2979d130938ac67766585aea168fe4e0934595bf84da73ed9f6716cf4985863531d6d967b12c1bed99e3b4517ffc1ceb237a03b58df60ad89eb74a620edfffde870b7b48eb2d877d85c32b7e1ed84fdd3112be91aa4242166c743c49267d0f5053287ea6411aacfe20c4562795914e51f060370f8dac903") [ 451.093126] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 451.099951] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.155031] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.208814] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:01 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x500, 0x7400000000000000}) [ 451.253118] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.291939] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {0x0, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x400000000e3) dup2(r1, r0) [ 451.317427] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.337667] GDTR: limit=0x00000002, base=0x0000000000000000 [ 451.356334] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.377954] IDTR: limit=0x00000000, base=0x0000000060000011 [ 451.395498] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 451.419915] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 451.439388] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 451.440425] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 451.511989] Interruptibility = 00000000 ActivityState = 00000000 [ 451.531109] *** Guest State *** [ 451.536322] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 451.546897] *** Host State *** [ 451.550198] RIP = 0xffffffff8120262c RSP = 0xffff88018a35f390 [ 451.556625] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 451.565982] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 451.573160] CR3 = 0x0000000000000000 [ 451.577293] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 451.583399] FSBase=00007f69827fa700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 451.583414] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 451.583430] CR0=0000000080050033 CR3=000000017bf60000 CR4=00000000001426f0 [ 451.583447] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 451.583461] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 451.583466] *** Control State *** [ 451.583477] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 451.583486] EntryControls=0000d1ff ExitControls=002fefff [ 451.583500] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 451.583510] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 451.583520] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 451.583529] reason=80000021 qualification=0000000000000000 16:44:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:01 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:01 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x7) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:01 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x600000000000000, 0x7400000000000000}) [ 451.583545] IDTVectoring: info=00000000 errcode=00000000 [ 451.591662] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 451.598196] TSC Offset = 0xffffff0cabf40282 [ 451.605364] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 451.612288] EPT pointer = 0x000000018adfa01e [ 451.618252] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.628488] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.691545] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.723069] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x400000000e3) dup2(r1, r0) [ 451.772345] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.796674] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 451.823677] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x4100) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 451.879905] GDTR: limit=0x00000002, base=0x0000000000000000 16:44:01 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x2000, 0x7400000000000000}) [ 451.926203] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 451.956772] *** Guest State *** [ 451.962094] IDTR: limit=0x00000000, base=0x0000000060000011 [ 451.980154] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 451.990596] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 452.018940] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:01 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 452.020157] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 452.043050] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 452.058444] CR3 = 0x0000000000000000 [ 452.082740] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 452.083107] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 452.088928] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 452.099001] Interruptibility = 00000000 ActivityState = 00000000 [ 452.099091] *** Host State *** [ 452.099162] RIP = 0xffffffff8120262c RSP = 0xffff8801b8487390 [ 452.099321] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 16:44:01 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x3) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 452.099340] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 452.137165] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 452.172617] CR0=0000000080050033 CR3=00000001cc558000 CR4=00000000001426e0 16:44:01 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x3f00, 0x7400000000000000}) [ 452.203476] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 452.256052] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 452.285557] *** Control State *** [ 452.299967] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 452.306257] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 452.321344] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 452.332482] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.337957] EntryControls=0000d1ff ExitControls=002fefff [ 452.343793] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.354882] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.369896] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.379854] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.385888] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 452.389586] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.405489] GDTR: limit=0x00000002, base=0x0000000000000000 [ 452.414240] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.424637] IDTR: limit=0x00000000, base=0x0000000060000011 [ 452.433607] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 452.441685] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 452.441870] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 452.449007] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 452.455468] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 452.455478] reason=80000021 qualification=0000000000000000 [ 452.455494] IDTVectoring: info=00000000 errcode=00000000 [ 452.480524] Interruptibility = 00000000 ActivityState = 00000000 [ 452.489044] TSC Offset = 0xffffff0c451e5474 [ 452.493607] EPT pointer = 0x00000001bf35501e [ 452.512697] *** Host State *** [ 452.516582] RIP = 0xffffffff8120262c RSP = 0xffff88017e267390 [ 452.524413] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 452.530968] FSBase=00007f69827fa700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 452.539344] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 452.545657] CR0=0000000080050033 CR3=00000001bbc3a000 CR4=00000000001426e0 [ 452.553099] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 16:44:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r0) [ 452.559915] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 452.566116] *** Control State *** [ 452.569873] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 452.576766] EntryControls=0000d1ff ExitControls=002fefff [ 452.584728] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 452.592058] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 452.612366] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 452.626221] reason=80000021 qualification=0000000000000000 [ 452.634290] IDTVectoring: info=00000000 errcode=00000000 [ 452.648015] TSC Offset = 0xffffff0c1d2bd68f [ 452.653791] EPT pointer = 0x000000017f7e901e 16:44:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:02 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1e5) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:02 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x6000, 0x7400000000000000}) 16:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r0) [ 452.734692] *** Guest State *** [ 452.738020] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:02 executing program 0: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40000, 0x0) [ 452.784010] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 452.799313] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r0) 16:44:02 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x300, 0x7400000000000000}) [ 452.837207] CR3 = 0x0000000000000000 [ 452.852629] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 452.870462] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 452.890516] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 452.903568] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 452.932224] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 452.991007] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.028193] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.036542] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:02 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x8, 0x10001}]}, 0xc, 0x3) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 453.092020] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.154581] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.205898] GDTR: limit=0x00000002, base=0x0000000000000000 [ 453.242706] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.254734] *** Guest State *** [ 453.262653] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 453.275064] IDTR: limit=0x00000000, base=0x0000000060000011 [ 453.293912] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 453.303592] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 453.314034] CR3 = 0x0000000000000000 [ 453.318043] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 453.325448] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 453.332536] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 453.338964] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 453.348492] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 453.358240] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.367130] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.369615] Interruptibility = 00000000 ActivityState = 00000000 [ 453.375880] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.387443] *** Host State *** [ 453.390309] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.393431] RIP = 0xffffffff8120262c RSP = 0xffff8801844d7390 [ 453.401470] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.407718] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 453.415678] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.423279] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 453.430636] GDTR: limit=0x00000002, base=0x0000000000000000 [ 453.439452] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 453.446657] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 453.452786] CR0=0000000080050033 CR3=00000001d38a9000 CR4=00000000001426f0 [ 453.461052] IDTR: limit=0x00000000, base=0x0000000060000011 [ 453.470397] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 453.476363] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 453.485679] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 453.492215] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 453.497784] *** Control State *** [ 453.504192] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 453.508005] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 453.515337] Interruptibility = 00000000 ActivityState = 00000000 [ 453.521893] EntryControls=0000d1ff ExitControls=002fefff [ 453.528377] *** Host State *** [ 453.534497] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 453.537451] RIP = 0xffffffff8120262c RSP = 0xffff880189aaf390 [ 453.544466] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 453.550613] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 453.558369] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 453.563929] FSBase=00007f69827fa700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 453.570450] reason=80000021 qualification=0000000000000000 [ 453.578549] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 453.585399] IDTVectoring: info=00000000 errcode=00000000 [ 453.591144] CR0=0000000080050033 CR3=00000001d7243000 CR4=00000000001426e0 [ 453.596828] TSC Offset = 0xffffff0b9fcc8856 [ 453.603789] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 453.608367] EPT pointer = 0x00000001c185b01e [ 453.615019] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 453.625563] *** Control State *** [ 453.629404] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 453.636685] EntryControls=0000d1ff ExitControls=002fefff [ 453.642611] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 453.649933] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 16:44:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x3f, @local, 0x4e20, 0x0, 'rr\x00', 0x10, 0x100, 0x56}, 0x2c) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(0xffffffffffffffff, r0) 16:44:03 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x3f00000000000000, 0x7400000000000000}) 16:44:03 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 453.657380] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 453.664504] reason=80000021 qualification=0000000000000000 [ 453.671177] IDTVectoring: info=00000000 errcode=00000000 [ 453.696654] TSC Offset = 0xffffff0b5a5a4eca [ 453.705813] EPT pointer = 0x00000001b67ae01e [ 453.748430] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xc6c5, 0xd3, 0xffff, 0x10001, 0x9, 0x0, 0x7, 0x9, 0x1, 0x4, 0x100000000, 0x8}) 16:44:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(0xffffffffffffffff, r0) 16:44:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:03 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x4000000, 0x7400000000000000}) 16:44:03 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000001, 0x81f6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x400) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) [ 454.077641] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(0xffffffffffffffff, r0) 16:44:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:04 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x100000, 0x7400000000000000}) 16:44:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x81fe) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0xfffffffffffffff9, 0x0, 0x0, 0x9, 0x0, 0x7400000000000000}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x0, 0x1, 0x2b99, 0xc12b, 0x18, 0x5}) 16:44:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, 0xffffffffffffffff) 16:44:04 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 454.429002] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x80040) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:04 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x7000000, 0x7400000000000000}) 16:44:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, 0xffffffffffffffff) 16:44:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) poll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x2, 0x9, 0x40}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 454.763065] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:04 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x81, 0x51f9657e, 0x1af, 0x29b, 0x7ff, 0x374, 0x2}, "aa943aba1f003f6bbe24dbf10f3dcbc0f1129cb8491a", [[], [], [], [], [], [], []]}, 0x736) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:04 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x60000000, 0x7400000000000000}) 16:44:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, 0xffffffffffffffff) 16:44:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 455.132801] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1ff, 0x10, 0x7b0}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$TIOCSTI(r0, 0x5412, 0x1f) 16:44:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x2000000, 0x7400000000000000}) [ 455.279317] *** Guest State *** 16:44:05 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 455.317106] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 455.359563] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 455.370285] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:05 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0x7400000000000000}) 16:44:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x2, 0x7400000000000000}) [ 455.410948] CR3 = 0x0000000000000000 [ 455.426310] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000000, 0x8201) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='+{$vmnet0[/\x00', &(0x7f0000000140)='@\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='loppp0procposix_acl_access*&^:self-\x00'], 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 455.480830] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 455.523443] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 455.558223] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.600531] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 455.614239] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.662012] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.671085] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.694231] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.708589] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.718416] GDTR: limit=0x00000002, base=0x0000000000000000 [ 455.727153] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 455.736181] IDTR: limit=0x00000000, base=0x0000000060000011 [ 455.745439] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 455.756281] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 455.763744] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 455.789497] Interruptibility = 00000000 ActivityState = 00000000 [ 455.802063] *** Host State *** [ 455.806768] RIP = 0xffffffff8120262c RSP = 0xffff8801b8c17390 [ 455.815240] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 455.823782] FSBase=00007f69827fa700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 455.832814] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 455.839361] CR0=0000000080050033 CR3=00000001cbe23000 CR4=00000000001426f0 [ 455.846748] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 455.853556] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 455.859619] *** Control State *** [ 455.863129] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 455.869809] EntryControls=0000d1ff ExitControls=002fefff [ 455.875375] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 455.882344] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 455.889011] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 455.895651] reason=80000021 qualification=0000000000000000 [ 455.902000] IDTVectoring: info=00000000 errcode=00000000 [ 455.907532] TSC Offset = 0xffffff0a5144630d 16:44:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:05 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0x7400000000000000}) 16:44:05 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x6, 0x7400000000000000}) 16:44:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @window={0x3, 0x100000001, 0x5}, @window={0x3, 0x4814, 0x200}, @sack_perm, @window={0x3, 0x7c6, 0x3}], 0x6) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 455.911874] EPT pointer = 0x00000001bae0601e [ 456.029207] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:05 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$RTC_UIE_OFF(r0, 0x7004) 16:44:05 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0x7400000000000000}) 16:44:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x60, 0x7400000000000000}) 16:44:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8200) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 456.334672] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x6, 0x7400000000000000}) 16:44:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = dup2(0xffffffffffffffff, r1) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) [ 456.617171] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:06 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r8, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 0: getgroups(0x5, &(0x7f0000000100)=[0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xee00]) mount$9p_virtio(&(0x7f0000000040)='em0eth0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1009, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl='posixacl'}, {@cache_loose='cache=loose'}, {@version_9p2000='version=9p2000'}, {@version_9p2000='version=9p2000'}, {@fscache='fscache'}, {@msize={'msize', 0x3d, 0x7fff}}, {@cache_loose='cache=loose'}, {@fscache='fscache'}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@seclabel='seclabel'}]}}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:06 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 456.982483] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8207) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:06 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:06 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40000) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) [ 457.206596] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:07 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000100)={0x3f, 0x8629, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$sock_bt(r0, 0xdd1f, &(0x7f0000000040)="ac8d182a5f5d7729635c288075d7b6263a305c8124ce1e2831f048a60fd6ae87877fdf10d2b3ee44c6b03034") 16:44:07 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 457.562584] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:07 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:07 executing program 0: r0 = memfd_create(&(0x7f0000000100)='-selfeth1vmnet1[\'vmnet1wlan0-\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x9}, 'port0\x00', 0x40, 0x110000, 0x7, 0x1, 0xfffffffffffffff8, 0x2, 0x0, 0x0, 0x4, 0x2}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000280)={0x7, 0xffffffffffffff00}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="5a6161d71b1609e0259944454e8d27d90300b16b18fef99c") ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x4d, 0x2, 'client1\x00', 0x2, "7b145da486df684d", "938e8b646753b9defa974e0b6e95e9ff82133a5ea77ebc8254bca7626bc3dada", 0x1ff, 0x3ff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 457.756205] *** Guest State *** 16:44:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 457.783241] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 457.820444] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 457.849437] CR3 = 0x0000000000000000 [ 457.863040] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 457.888527] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 457.891952] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 457.916563] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 457.946322] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 457.976526] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7400000000000000}) [ 458.045417] *** Guest State *** [ 458.048922] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 458.062713] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:07 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 458.092612] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 458.102123] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 458.161658] CR3 = 0x0000000000000000 16:44:07 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 458.197597] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 458.217640] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.273857] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 458.282849] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.290971] GDTR: limit=0x00000002, base=0x0000000000000000 [ 458.297577] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 458.318822] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 458.338106] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.339057] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.372337] IDTR: limit=0x00000000, base=0x0000000060000011 [ 458.427580] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.431549] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 458.476152] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.492684] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.500949] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 458.524905] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.548593] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.560737] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 458.583240] Interruptibility = 00000000 ActivityState = 00000000 [ 458.585995] GDTR: limit=0x00000002, base=0x0000000000000000 [ 458.589664] *** Host State *** [ 458.601097] RIP = 0xffffffff8120262c RSP = 0xffff880182d0f390 [ 458.607400] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 458.610294] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 458.614027] FSBase=00007f69827fa700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 458.630286] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 458.632415] IDTR: limit=0x00000000, base=0x0000000060000011 [ 458.636363] CR0=0000000080050033 CR3=00000001d5e63000 CR4=00000000001426f0 [ 458.651463] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 458.653515] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 458.658213] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 458.658219] *** Control State *** [ 458.658241] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 458.683551] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 458.683703] EntryControls=0000d1ff ExitControls=002fefff [ 458.696112] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 458.704032] Interruptibility = 00000000 ActivityState = 00000000 [ 458.710464] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 458.717622] *** Host State *** [ 458.720919] RIP = 0xffffffff8120262c RSP = 0xffff88017cf67390 [ 458.727022] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 458.733841] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 458.740426] reason=80000021 qualification=0000000000000000 [ 458.746987] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 458.753585] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 458.761521] IDTVectoring: info=00000000 errcode=00000000 [ 458.767086] TSC Offset = 0xffffff08fb7ab7e5 [ 458.771421] EPT pointer = 0x00000001c020101e [ 458.776047] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 458.782047] CR0=0000000080050033 CR3=00000001ceb25000 CR4=00000000001426e0 [ 458.789319] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 458.796185] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 458.802507] *** Control State *** [ 458.806063] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 458.819518] EntryControls=0000d1ff ExitControls=002fefff [ 458.825218] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 16:44:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x121400) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000940)={r9, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:08 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 458.832455] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 458.839292] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 458.846057] reason=80000021 qualification=0000000000000000 [ 458.852742] IDTVectoring: info=00000000 errcode=00000000 [ 458.858310] TSC Offset = 0xffffff08ce47174a [ 458.862873] EPT pointer = 0x00000001ba21b01e 16:44:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 458.977199] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000180)={0x2, @random="fc2acd28db6c"}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x0}, {}]}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000280)={r2, 0x1}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/83, 0x53}], 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:08 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:08 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000002, 0x8180) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x3ff, 0x102, "2c74930fe80d60c4af36f13b2c862d8fa346e129a2721386e1e7ae953db98177", 0x6, 0xfffffffffffffbff, 0x10000, 0x80000000, 0x1}) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x40, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) prctl$PR_GET_FP_MODE(0x2e) 16:44:09 executing program 5 (fault-call:15 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 459.289556] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:09 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:09 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) write$P9_RSTATFS(r4, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r2, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:09 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 459.537037] FAULT_INJECTION: forcing a failure. [ 459.537037] name failslab, interval 1, probability 0, space 0, times 0 [ 459.595017] CPU: 1 PID: 19403 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 459.603653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.613023] Call Trace: [ 459.615655] dump_stack+0x244/0x39d [ 459.619306] ? dump_stack_print_info.cold.1+0x20/0x20 [ 459.624517] ? debug_smp_processor_id+0x1c/0x20 [ 459.629208] ? perf_trace_lock+0x14d/0x7a0 [ 459.633461] should_fail.cold.4+0xa/0x17 [ 459.637533] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.642647] ? debug_smp_processor_id+0x1c/0x20 [ 459.647320] ? perf_trace_lock+0x14d/0x7a0 [ 459.651569] ? check_preemption_disabled+0x48/0x280 [ 459.656598] ? graph_lock+0x270/0x270 [ 459.660401] ? lock_acquire+0x1ed/0x520 [ 459.664466] ? lo_ioctl+0x25d/0x22a0 [ 459.668198] ? find_held_lock+0x36/0x1c0 [ 459.672280] ? __lock_is_held+0xb5/0x140 [ 459.676373] ? perf_trace_sched_process_exec+0x860/0x860 [ 459.681886] __should_failslab+0x124/0x180 [ 459.686140] should_failslab+0x9/0x14 [ 459.689955] kmem_cache_alloc_trace+0x2d7/0x750 [ 459.694634] ? check_preemption_disabled+0x48/0x280 [ 459.699671] __kthread_create_on_node+0x137/0x540 [ 459.704525] ? loop_get_status64+0x120/0x120 [ 459.708943] ? kthread_parkme+0xb0/0xb0 [ 459.712942] ? __lockdep_init_map+0x105/0x590 [ 459.717445] ? __lockdep_init_map+0x105/0x590 [ 459.721993] ? loop_get_status64+0x120/0x120 [ 459.726414] kthread_create_on_node+0xb1/0xe0 [ 459.730916] ? __kthread_create_on_node+0x540/0x540 [ 459.735945] ? _parse_integer+0x134/0x180 [ 459.740111] lo_ioctl+0xcb3/0x22a0 [ 459.743671] ? lo_rw_aio+0x1ef0/0x1ef0 [ 459.747570] ? find_held_lock+0x36/0x1c0 [ 459.751638] ? lo_rw_aio+0x1ef0/0x1ef0 [ 459.755596] blkdev_ioctl+0x98e/0x21b0 [ 459.759496] ? blkpg_ioctl+0xc10/0xc10 [ 459.763390] ? lock_downgrade+0x900/0x900 [ 459.767541] ? check_preemption_disabled+0x48/0x280 [ 459.772573] ? kasan_check_read+0x11/0x20 [ 459.776737] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 459.782023] ? rcu_read_unlock_special+0x370/0x370 [ 459.786972] ? __fget+0x4d1/0x740 [ 459.790439] ? ksys_dup3+0x680/0x680 [ 459.794244] block_ioctl+0xee/0x130 [ 459.797893] ? blkdev_fallocate+0x400/0x400 [ 459.802237] do_vfs_ioctl+0x1de/0x1790 [ 459.806144] ? ioctl_preallocate+0x300/0x300 [ 459.810561] ? __fget_light+0x2e9/0x430 [ 459.814542] ? fget_raw+0x20/0x20 [ 459.818005] ? __sb_end_write+0xd9/0x110 [ 459.822085] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 459.827636] ? fput+0x130/0x1a0 [ 459.830932] ? do_syscall_64+0x9a/0x820 [ 459.834921] ? do_syscall_64+0x9a/0x820 [ 459.838908] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 459.843514] ? security_file_ioctl+0x94/0xc0 [ 459.847932] ksys_ioctl+0xa9/0xd0 [ 459.851397] __x64_sys_ioctl+0x73/0xb0 [ 459.855302] do_syscall_64+0x1b9/0x820 [ 459.859210] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.864581] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.869518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.874382] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.879404] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.884428] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.889456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.894318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.899543] RIP: 0033:0x457569 [ 459.902744] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.921647] RSP: 002b:00007f69827f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.929359] RAX: ffffffffffffffda RBX: 00007f69827f9c90 RCX: 0000000000457569 [ 459.936635] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000003 16:44:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x8, 0x8, 0x80000001, 0x7, 0x7e881001, 0xec, 0x100000001, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x9, 0x2, 0x5524000, 0x7, 0x3}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x0, 0x7fff, 0x9a9b, 0x3}, &(0x7f0000000180)=0x14) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x400000000e3) dup2(r1, r0) [ 459.943998] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 459.951274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69827fa6d4 [ 459.958547] R13: 00000000004c0780 R14: 00000000004d10b8 R15: 0000000000000005 16:44:09 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 460.022506] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:09 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x9, 0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000280)={'rose0\x00', {0x2, 0x4e22, @multicast2}}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x3f}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 460.195556] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:10 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:10 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x82201, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0xf9, 0x200008a2e}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) socket$nl_netfilter(0x10, 0x3, 0xc) 16:44:10 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x900000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe6bc00, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="9076a9e002e79f00db94bdc331", 0xd, 0xfffffffffffffffd) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x7fffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x9, 0x1, 0x6, 0x7ff, 0x4, 0x7, 0xab91, 0x80000001, 0x1, 0x7}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 460.757151] FAULT_INJECTION: forcing a failure. [ 460.757151] name failslab, interval 1, probability 0, space 0, times 0 [ 460.773818] CPU: 1 PID: 19460 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 460.782429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.791793] Call Trace: [ 460.794419] dump_stack+0x244/0x39d [ 460.798072] ? dump_stack_print_info.cold.1+0x20/0x20 [ 460.803296] ? debug_smp_processor_id+0x1c/0x20 [ 460.807986] ? perf_trace_lock+0x14d/0x7a0 [ 460.812240] should_fail.cold.4+0xa/0x17 [ 460.816332] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.821453] ? pick_next_task_fair+0xa35/0x1c90 [ 460.826138] ? rcu_read_lock_sched_held+0x14f/0x180 [ 460.831180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.836743] ? check_preemption_disabled+0x48/0x280 [ 460.841778] ? graph_lock+0x270/0x270 [ 460.845597] ? print_usage_bug+0xc0/0xc0 [ 460.849672] ? perf_trace_lock+0x14d/0x7a0 [ 460.853930] ? find_held_lock+0x36/0x1c0 [ 460.858012] ? __lock_is_held+0xb5/0x140 [ 460.862111] ? reweight_entity+0x10f0/0x10f0 [ 460.866537] ? perf_trace_sched_process_exec+0x860/0x860 [ 460.871999] ? put_prev_task_fair+0x80/0x80 [ 460.876355] __should_failslab+0x124/0x180 [ 460.880617] should_failslab+0x9/0x14 [ 460.884443] kmem_cache_alloc+0x2be/0x730 [ 460.888615] ? _raw_spin_unlock_irq+0x27/0x80 [ 460.893131] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 460.898182] __kernfs_new_node+0x127/0x8d0 [ 460.902444] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 460.907241] ? lock_is_held_type+0x210/0x210 [ 460.911677] ? _raw_spin_unlock_irq+0x60/0x80 [ 460.916219] ? __schedule+0x168b/0x21d0 [ 460.920207] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 460.925330] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 460.930448] ? graph_lock+0x270/0x270 [ 460.934444] ? graph_lock+0x270/0x270 [ 460.938258] ? enqueue_task_fair+0x24d/0xa50 [ 460.942701] ? find_held_lock+0x36/0x1c0 [ 460.946790] kernfs_new_node+0x95/0x120 [ 460.950787] kernfs_create_dir_ns+0x4d/0x160 [ 460.955222] internal_create_group+0x5fc/0xd80 [ 460.959850] ? remove_files.isra.1+0x190/0x190 [ 460.964440] ? up_write+0x7b/0x220 [ 460.967993] ? down_write_nested+0x130/0x130 [ 460.972413] ? down_read+0x120/0x120 [ 460.976146] ? resched_curr+0x1f0/0x1f0 [ 460.980145] sysfs_create_group+0x1f/0x30 [ 460.984317] lo_ioctl+0x166a/0x22a0 [ 460.987969] ? lo_rw_aio+0x1ef0/0x1ef0 [ 460.991869] ? find_held_lock+0x36/0x1c0 [ 460.995943] ? lo_rw_aio+0x1ef0/0x1ef0 [ 460.999850] blkdev_ioctl+0x98e/0x21b0 [ 461.003755] ? blkpg_ioctl+0xc10/0xc10 [ 461.007651] ? lock_downgrade+0x900/0x900 [ 461.011811] ? check_preemption_disabled+0x48/0x280 [ 461.016853] ? kasan_check_read+0x11/0x20 [ 461.021015] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 461.026315] ? rcu_read_unlock_special+0x370/0x370 [ 461.031280] ? __fget+0x4d1/0x740 [ 461.034755] ? ksys_dup3+0x680/0x680 [ 461.038508] block_ioctl+0xee/0x130 [ 461.042147] ? blkdev_fallocate+0x400/0x400 [ 461.046479] do_vfs_ioctl+0x1de/0x1790 [ 461.050385] ? ioctl_preallocate+0x300/0x300 [ 461.054804] ? __fget_light+0x2e9/0x430 [ 461.058797] ? fget_raw+0x20/0x20 [ 461.062282] ? __sb_end_write+0xd9/0x110 [ 461.066821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 461.072377] ? fput+0x130/0x1a0 [ 461.075699] ? do_syscall_64+0x9a/0x820 [ 461.079686] ? do_syscall_64+0x9a/0x820 [ 461.083675] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 461.088285] ? security_file_ioctl+0x94/0xc0 [ 461.092710] ksys_ioctl+0xa9/0xd0 [ 461.096190] __x64_sys_ioctl+0x73/0xb0 [ 461.100095] do_syscall_64+0x1b9/0x820 [ 461.103996] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 461.109372] ? syscall_return_slowpath+0x5e0/0x5e0 [ 461.114312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.119170] ? trace_hardirqs_on_caller+0x310/0x310 [ 461.124203] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 461.129240] ? prepare_exit_to_usermode+0x291/0x3b0 [ 461.134290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.139156] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.144362] RIP: 0033:0x457569 [ 461.147574] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.166480] RSP: 002b:00007f69827f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.174197] RAX: ffffffffffffffda RBX: 00007f69827f9c90 RCX: 0000000000457569 [ 461.181474] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000003 [ 461.188749] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 461.196029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69827fa6d4 16:44:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 461.203319] R13: 00000000004c0780 R14: 00000000004d10b8 R15: 0000000000000005 [ 461.246166] *** Guest State *** [ 461.249754] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:11 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfec0000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 461.317691] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 461.328802] CR3 = 0x0000000000000000 [ 461.334513] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 461.340898] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 461.363169] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 461.375974] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") accept4(r0, 0x0, &(0x7f0000000140), 0x80000) [ 461.465703] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 461.491100] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:11 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 461.524544] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 461.534624] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 461.557854] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 461.612584] GDTR: limit=0x00000002, base=0x0000000000000000 [ 461.621322] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x14) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) [ 461.675342] IDTR: limit=0x00000000, base=0x0000000060000011 [ 461.717958] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 461.750953] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 461.769067] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 461.788283] Interruptibility = 00000000 ActivityState = 00000000 [ 461.801577] *** Host State *** [ 461.801593] RIP = 0xffffffff8120262c RSP = 0xffff88017dbdf390 16:44:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x800000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 461.823799] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 461.836154] IPVS: ftp: loaded support on port[0] = 21 [ 461.841658] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 16:44:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000100)={0x3, 0x1, 0x1, 0x0, 0x0, 0x7400000000000000}) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000040)="7724d8ea670c96bf1784d948e8b21c9ff556b6fa84346f836cb62d477b5260c4e8252c1ae74c634463fc95e74b055cb99f6aca56766712cf69ef3abca7a5a1bd9fafe24d7fbe5b174cc257486729ecb6b5b997c8de47a770527692a0f9cb331f40c54fa39dfd95bc86a8a06f52034382a9cbdb3e8ef9a5223aa141afcc7a08860a0d8ba852a525386c84f238", 0x8c) [ 461.870446] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 461.887702] CR0=0000000080050033 CR3=00000001d2025000 CR4=00000000001426e0 [ 461.897810] device bridge_slave_1 left promiscuous mode [ 461.911961] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.922765] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 461.934234] device bridge_slave_0 left promiscuous mode [ 461.939731] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.960280] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 461.972672] *** Control State *** [ 461.980054] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 461.999308] EntryControls=0000d1ff ExitControls=002fefff [ 462.023906] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 462.040559] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 462.054802] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 462.064225] reason=80000021 qualification=0000000000000000 [ 462.070716] IDTVectoring: info=00000000 errcode=00000000 [ 462.076664] TSC Offset = 0xffffff0751b619ee [ 462.081037] EPT pointer = 0x00000001bb35201e [ 462.081866] team0 (unregistering): Port device team_slave_1 removed [ 462.110291] team0 (unregistering): Port device team_slave_0 removed 16:44:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:11 executing program 2: getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) fcntl$setsig(r0, 0xa, 0x1c) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 462.126655] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 462.158136] bond0 (unregistering): Releasing backup interface bond_slave_0 16:44:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) 16:44:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x100000000000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 462.341971] bond0 (unregistering): Released all slaves [ 462.386968] *** Guest State *** [ 462.390467] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 462.435183] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 462.453813] CR3 = 0x0000000000000000 [ 462.458759] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 462.466399] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 462.472768] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 462.492713] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.506990] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.529317] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.542813] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.556708] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.566419] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.575082] GDTR: limit=0x00000002, base=0x0000000000000000 [ 462.585176] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 462.612742] IDTR: limit=0x00000000, base=0x0000000060000011 [ 462.628226] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 462.652682] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 462.667815] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 462.682970] Interruptibility = 00000000 ActivityState = 00000000 [ 462.702337] *** Host State *** [ 462.705890] RIP = 0xffffffff8120262c RSP = 0xffff88017c8e7390 [ 462.714125] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 462.720818] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 462.745740] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 462.762779] CR0=0000000080050033 CR3=000000017b7dc000 CR4=00000000001426f0 [ 462.770144] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 462.787371] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 462.802259] *** Control State *** [ 462.806079] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 462.822811] EntryControls=0000d1ff ExitControls=002fefff [ 462.832746] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 462.852612] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 462.872332] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 462.879331] reason=80000021 qualification=0000000000000000 [ 462.892534] IDTVectoring: info=00000000 errcode=00000000 [ 462.898263] TSC Offset = 0xffffff06792f4b3a [ 462.910264] EPT pointer = 0x000000018088c01e [ 463.488605] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.495173] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.502687] device bridge_slave_0 entered promiscuous mode [ 463.549546] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.556481] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.564019] device bridge_slave_1 entered promiscuous mode [ 463.611684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 463.657850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 463.797576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 463.846723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 464.070153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 464.077719] team0: Port device team_slave_0 added [ 464.120869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 464.128290] team0: Port device team_slave_1 added [ 464.157353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.187692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.218034] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 464.225604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.234128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.259066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 464.266548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.275138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.538622] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.545018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.551602] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.558004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.565659] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 465.549400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.563448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.651808] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 465.745613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 465.751758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.759816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.850714] 8021q: adding VLAN 0 to HW filter on device team0 16:44:16 executing program 2: getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x1f}, {0x3, 0x21b}, 0x0, 0x1, 0x542}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7400000000000000}) pread64(r0, &(0x7f00000000c0)=""/151, 0x97, 0x0) 16:44:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfff, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000080)={0x0, 0x7, 0x1}, 0xc) 16:44:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfcffffff00000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 466.468863] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 466.479222] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x0, 0x8040) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000080)=""/16) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:16 executing program 2: getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 466.659346] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x14, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x5000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:16 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x79, 0x1, [0xd6]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [], @rand_addr=0x4}, 0x1}}, 0x3f, 0x3f, 0xfffffffffffffff9, 0xfe, 0x10}, &(0x7f0000000240)=0x98) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) [ 467.006815] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x424100) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 467.045578] *** Guest State *** 16:44:16 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:16 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 467.077508] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 467.097638] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 467.113053] CR3 = 0x0000000000000000 [ 467.133980] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 467.165221] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:44:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0, r0}) 16:44:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) open(&(0x7f0000000040)='./file0\x00', 0x80203, 0x4) [ 467.182765] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x20000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 467.249350] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 467.259030] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.289284] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.331128] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.344244] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.353122] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.365798] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.374654] GDTR: limit=0x00000002, base=0x0000000000000000 [ 467.383370] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 467.391456] IDTR: limit=0x00000000, base=0x0000000060000011 [ 467.400247] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 467.432528] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 467.439104] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 467.449014] Interruptibility = 00000000 ActivityState = 00000000 [ 467.456212] *** Host State *** [ 467.459545] RIP = 0xffffffff8120262c RSP = 0xffff88014abbf390 [ 467.466735] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 467.475097] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 467.483761] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 467.494798] CR0=0000000080050033 CR3=00000001c691c000 CR4=00000000001426f0 [ 467.501951] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 467.509050] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 467.515584] *** Control State *** [ 467.519097] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 467.527197] EntryControls=0000d1ff ExitControls=002fefff [ 467.532991] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 467.540084] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 467.547011] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 467.556825] reason=80000021 qualification=0000000000000000 [ 467.563255] IDTVectoring: info=00000000 errcode=00000000 [ 467.568817] TSC Offset = 0xffffff03fce8cccd [ 467.574471] EPT pointer = 0x000000018493801e 16:44:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:17 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:17 executing program 3: prctl$PR_GET_SECUREBITS(0x1b) syz_open_dev$loop(&(0x7f0000001740)='/dev/loop#\x00', 0xfe, 0xfffffffffffffffc) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x8, 0x2, 0x1, {0x200000000000000, 0x5121b38f, 0x200, 0xbdf}}) r1 = syz_open_dev$loop(&(0x7f0000001780)='/dev/loop#\x00', 0x8001, 0x2000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x80, 0x0) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000300)='./file0\x00', 0xcdc7, 0x6, &(0x7f0000001640)=[{&(0x7f0000000340)="c4974c4ef6f9e6046cefd55a6865bdef34f50ec1b1806bead88b48823500af1d04bf919a0043eb87c04aacae5ef33d30ee7146053d579a08c84a34991ef25611207ece", 0x43, 0x7}, {&(0x7f00000003c0)="a31bda883bd4bf08b40f91138e32adec72827a494c7e0b09b496a1ab419086a283da4f93fcdfae5509dd60c07066188f7629f80a9a6be4b690c2cc8ff45958b58702b9678b4f1909fc16b9f9825fdb88f34e2d9f0cb4b6e231a6667901c39fdfe68ae40d3c736beebfac57e43408efcd72d3ee25f7a62596da724188170a846a51cb6ed5eb1dfd0089d888a3a981f4740178bff747539bc22e052d7974a3", 0x9e, 0x81}, {&(0x7f0000000480)="9b6f8632b98f9bfd8a012428478f06c865988ea898a89b1861a843b160265ca7dbc7cf5216f48e9b1dd79f9767dbf8ad0d671c5e930dcac2dc2d9990fd7c115cbbbafb64b863e219824b4eaa2692019791687bdaf50f4a32ab05b5a44ff0705126c7277547014ded745190bb45da8d5009720e35b86f90a1cbb8be824c11c208ef35a474b76e643c7ee38ff907e0a049c329a64b84ee11c312dc52e8055db1a994fb26d7e3698cdb0df7702e78e3104780475ad549dd91d53ed02e3f0a8c4dd8416b3bfcae90d4c36a4a8801b88fe512cd1e3f91e18b18982296b378b37de9c6da7972ec6c19e54650d1ebc292d69541542022ed6e7abb81c9fcdc8fddddca7bec8ce83e4b44554b3a2f197df91162408a25bf3d2adf7cada9b0033c0236e2b93e44079acc0c07edeecaf45d472f6ba7154e6a415c100344248216b8c3125f16895d39be82941b1155d78861b801e62790dbcbd32c647d1abce2da9c271b610d25ece781738c8af498d9c19bed92b4079e74bd205b4c6e3dc2cfb9f578340e835fca238ea1a3481bea4eeebe31691582998a35e8603f2eaee82d41823737ce1190c867fee68db65cf7abfa453e177e2f78352c68b6bc472b7f29d2f86a4ca318fb90d96e647c8b7d48c14b788b8898568cd70ce63d3e177647459a1cfe973d3b1bab7f000247a4a70e4c8ebe121f62a0569d4501e1c5719bce538a534ee2f09e3d6ada1b70ce564374182a7b9c9293adac93f261400ee33532c51426b96c7d5000377da47232cf49207c9f2933a95c7994b18590b2d690713eb939ca49642c6c31edd70deade0578469c420e0017ae22448e8ab33226a0fedb5a6fdafee2478197160d8462c862071be10b222b2ee3c6a5b39480290fa5eb9ddc8a22c1493a90cf6dc7d315eae78c14626621d171e21bea7b29b79c6c65244984deeb3a43c6d13d95eeed4b4258b1f937d8681438cf5f7a0ca35c0d30bf6262ad4f4a36af68a4f69faa736a04a9bc7c0fe417d2f79dac8b0ac591def41d5636064497894e90878c314cc455a17a965ad63fa2fc9ee10064c2f603ee140ab6836134931bc3c8f69b7d74286a6da17f923e8202375e2970e6984023f801a49413a3583407e96ad518e88fa0f215d24e80bac7ccb59f7f4b6f40c85e2f8acbf2dfd3f452a71d7037f2069df2a9971de1422a7ccba0dea6808c53da4688a65fcf74232c1febcb939aae2dcdd5f78871db2ef4d868ec6023d2a757543764df760bb81f1d0e580ee7220bad4d618c30fd93b59139d2512df14fdf3aaf23e4192f0c0f2a1b2a3431876c782439ab4bb77dbbfbd1e597ec206b56ac08691b52c85d1594d4d300837546f44c628d17e89825573c23493ddcebb70719b3c006bfd9416c8b36055c4be17afc77af986634261008a525c475009fd12a11c21aac03835063c39c5876d9cbb071c9cbc0dc90a57002617ea773aa9af3412cc8e52be4b29821a86437ec4fda772501bf06a49f837fec565e1be4bc9f40f7ad25cfcddf098c19931ad6c563f2da9bf6ef40cba6d331da3e6e92077109bdc7d438077fb81b33eb34cd7ecaad917de3eb666f4a14dee9d3e89f9ec8b17f78402ea08e0ee4dbbea3a1431b91d569b1240924fbc66a33289688574951b7b4877bd3913d00381da23c4dee5b83377e99233cb6489901e99176a851381c41e253ccfb03d76bd1ecb659166babe37a34a2036dba8dcbe3b4cf79f79ff6ff2e673ceca7e1e2b7268e83c234c7460b87167b8674e087d5f1a76656cef257d7cd2efc6577a06634d39a4b598c8310ffb9c6700ec000b065ee5c354a9a9c056dafa92b2a7e6c27ce0d5007d2b0b1c8dd23133ee9e1d73c502f8e6f15318c7b0ae4ec86022fc750e499bddab6f29af5a5334d27cd29f9e9246f599fe7efd2bcd36345f33e5dedf32edfb08ab53b7302adcb3a005944496072ec5a9ac52ab6cfb529d701637b2c8a684cb873fd7740d4a6b21c559128bd418023b7293e5e680fd13055b42164d2832b51352508697da9f06e28eb7a827083e79855fee467c9bafc61ddff267617fcd03f60b80699d57024e8d47d02f9c8d9cef343c7e54eeed497449e06495ac2f2f1ab59c0889915ad4f0e15894799f5426fe8242139546d99973878665ac124046bee21b37580ea1c8b08559a7589b04cb1ec5055472a711afd20241d1d17291c022e4c72ca1e6e9c89e2f59d778c0b83106632a843f6f9eea5c8da1a579da1defc2a71fafb4b36e9c7eb5fe8fdb1c82e840ba9c57fdbb710f6440478398f43a5eda8c0bd63844848969e13b6bd0a1eca83d34fb3eb34e3e7ad47be7c2c2129754525847b422a61a31e8fa0fc032282d02aeccca5c95b92259146f31403b6f88b2089b0d0bc59352d73c40af0ab10a49d29ff82106477fc851bf92cefc0b289f03c02cb4133b2e594688ddfc0ea8de66211af2934a1a5379d22a46115aba288d7beaab2e66828697faa01f5c2106e56885d25d3f049dfe266650395915cd9d7f57a8c8a606f28aff1d015d19ca21109be065580975cc6b9065d6e5c229678611c1e9da3aa6bb3d6559531c2278ad8a4f500b7fec56969146ecaf11fe145596fc2aa9eeaf4dc0a3c0476bc44618f372477cfa390c7c9eda20db7f6e8c45f9e17fd011e56025203ecb7c9bdb513383a3fa9944ade0a58ff89b5f740ca3e342932ecd7d4db22639cfcc10ac086a85d045d7aa4d3949aaccfa56c870a16a32cca726769e8c6839763513858de6ec03efca01cfa7a2997c08f150890b8b7494e9903d37cda89384bd779a95055fa86330913fcdc969c916cea819abe3f8f423c16174eaeca2326ace179de503ff9f23e69e408fb75d3f044d0373ab000b61627e2f282da934adc5ac789d2d58def0f13cd5dbe8ed08b6fc738e3ac52ae15f813b90edafe670d86303137deee32eb5e1c5e523010616588f859876e9933380c824cca95a05a78865f7e17637ce07a677b3b9bdeabcec024484aa4d43cef229f22b33c8f66f0570548b4092e160c915e4e10eac9e951739d2dc31ee9d7eedad32a615641d8e1bca828c69b1398ecdd41cb40ad4353097c1e195c8ba28ae5dbdd45ffe259a416ce8fe5e3b96d58e6f31455f4f8f77212ae465e4f73487c5d57a74f82a28ec4ba378c1c09d7aca7a46f75546c6387a7cc8d756c2fbf26f10ed126a75d7e58216112dfbbcd8da0295f3c9265bee7423b7b6fec823f070b244353fca936f40492ab46904979feabfebbf16127cc801c825ca3af53564ca4cc027cb0c29dbd99c15912be21accd4b3a316fff85f91b1f8a279bae2c67cf5a824f479701a43610dac248ceb061d9326f8ef6487ad9d527bb744ac16641e47c671271d7405331166a352e2f4cf83b75ea0e8bc4b02c7242e5e688b3cc01ba679d722f27d7b02d08678dfbdf500319b31a9a1565abcf5656f9d7a725113d356604b7ce239b3a0357e23dfe58295661025fce466b156a76b2fd34de987d88f0706340ab53b26df1f915c81500494a063d0532718fe28f2c37d8a3c48f8ca6bfcfec71e2a49e86593b5b82eff11269f0c9e678b72f2b05d7232cb6fbbeaf613a14ab3f02685cd725512a02fe0750d47760e9920392f94a52ee7ebc43071f5f828e64b6043ffb2a9ffdf60c95ee86cc009cfac688afb9d59a9a305dea7ea8a3468b8bc974ab169d48cae9ad4d4790a6461f997c428500e5ac3185adb38d9fe89c893326a51d2b6c5bafba0550a488ef14ba0a572285a59d11bfe7f5a5f6682fa48e23ff079e7ebf0770a9f26db8e503dfa99a88d04b8529e03e69cc15f438d872b2e653a698b27565f7b0715d06a329a1b1467f1f4a5f3618ae26a36146a2ce2b9df1826d691e51fadca25439264c87b7067df49ffa649c36db4b896642c46834de2be0059cf138d00418954bed5627b958bccab3ade54ccaac45d7a1094d9d0b7aafc255fd2e0d5f7b3afb46e0a168ce92fb9f54575c55cf9864d8485d56c31cf4bd403a53149bd817a9b6486011f70c2932d32b59ac5fb246ca8481011e46f3f1abcbed300c382ebbfb423da64c354470eac75cd96afedf8345599ad08797b16a63ed78ecbbf5e93fddcb3efc069d939b442487cce9ab89de0c5db4a4fad593e0bc8607e4236337d319f9b4c6a2357bdebf92ff8c9899de919745a19a20b55d62f9e120d1efbc39ba00b29bc656110be141dc9b2171889d206bfa33c44788a609c3b8565f9d904d83e455d2ae3fdd4315ac7d471e969093dfc32b08052807ee5478ac1b77aa91a59e684768b746dd1b4f784046b16b478fcadbbfba5d2b8b8dbd108bee4ee7e8a4ace9432fca5fafa06b49f52d6a67a4bf5daf1894c36992d832d3a7f206c44e4ee46179d892a85d0022262fd01ce240d3b1ba6e46d406d0c7f99b1578cadf059a0dc8b976936a0e10da6962fa1835e45c5a71f701ed07864af0b0ed30b9b1904f09854360eaa4fef79bfd677f72360ee368fb21d35e5c892bf852496383f789a87feaa14c3b71fa718da64436c1b9bdfd673104785c6ae9c106a8343e1629e063c83fe58d324066d5f7de3c6720b69cedbf68b43f3aaef29b3e07e7fac68ecd385826bb9fbcb35b42b061e63efcfdaf503479894b3bdde36b6715b31bc5dd9d013cd230e3ed0908b188dc49f7a1a08acf0f6a7e3ba190b89002a21fd9f827d03f403b39c55e86cd3dd43c2fd54d850096ca4f4b89d2998b4c91edb75f4cbb618162b1e93ee14a2099552672a256a3fb29996ec7bc9dfadc3b2c032ccbc155b344eb46055c9cfcbf2883c44fc35d16a9b1dfe469c3c4317688bf9cbf5f2925955f9656b7d7a255d619468f04448d0e8028b3e1cea1b6aec1f2b5dc37ba930e0e268d1e4481e45668b35ecb7da20fe2a9cf72046ba36a8164ec1d59937443fae779f9a96eaac492ae59acce040ea8140863a822d9b514caf2d038e457282315a0dccb8ba7b046d7428ee0628fb4e37217ac45b6db5f9991473bfe3769ca615f3482692e2d50ed7059c22bfa143fb35ebc2f988273ca03a3676aab6afd1ae75dda45d0c1064491b29b9ad1df3d404a81c4f1aa3b6ffd0de72cd7018c938f72ded3847b1f22f9c8b0dda0f90e34d5f5dd4f41448db9ef67e83974120242e94ce8499992e1d67f037a162bb46d49dd3709e57d20ab016388288a7c390eb29eab45ba569b2214342373d1e2d2b4c92ac7cee4f20faeea7b41352e08ecee810b09db5c65892dba604913afe319e5ac549dd3e1c0e0fb651987b51d614f74444882147cb7982c7aff0d79923f567f54abaa285642eaf0aa5bb24bdd9e0a99ffbdc0386312e9ec82c35a12c28ecd9f63c95e31f909d8ec5e050ccf033ae029c613ac6c1b9796e70217d19303d5e2436e2b841f5d9bb36ea68abad732606b60392a6994c2856e7e0fa60b69785e48e7d21dd1834b99ae840040f2844ed9a2b9d904ce18b91c1765da2bb1682adc39e7ca908c222f08fd046b5dd7ac1c44b6ac2afab392de8c137570a7f86f9ac2515bf9e38ad7b85804101c770fbc0b18cdd3464204084825b95a705fe955655eb968e40024abdc85a6e6ace7ceaebf63cf891316e5295047a4f9edccc661ce832f5e90d8ae0405f6d351e9575b254fdbe745b16da95018cc06e658011646dda1259e37a15e2cc65c9c02ef3e30840251db15df7ed14087ec99a2c84db18864242e0fde8ccb416116f4b78d39721b05776a055af7d76d5887271c6d425b758261065dccd5f5563c8d9b028a6d993580202e76b7b2256c98564522186b1d6931de2e6f6ee13f72", 0x1000, 0x6}, {&(0x7f0000001480)="fe3ab143a00ff533726016245535461734122e3c326dbc77e6c4ffd2f3c574bdf8a42914a2b12cefc0a499362b5558ce306f483ecbecde5970c1770e8740744b5fd9452d4e76e141641d881a0a54ae2aaa57dcf70b1491c3c8f9f26128587d47162d66eb4df757dff73057a4c8e07597", 0x70, 0x7}, {&(0x7f0000001500)="f3356a94d45ee854b4", 0x9}, {&(0x7f0000001540)="c0f79e97d7aad0edd2725103483022e8778fce3977084ae029a0c317afd83ce2e71983627eb13712b10166d405a53fa74cb632979b841d0983df915012af1ae76828a6ea44ae18d74d21ff1e5d1659f7cbb82e39838c36f4f879d7d1d64aa64eea720dd4ba160198e62b74d69f832262da7cae8246ef7ecbb6fa083b782e2d2f1aa284e1582a0b8d36328c0751a6696e272d7b3802835a42161a6ff25702461929927d5be6d50a9608c0cd876c82cd364b4c5c5807ddb60f300090daa878f556721bf630f51d2d4bddc4be222cff6c48658dfecb0d1a4a47327984fa", 0xdc, 0x401}], 0x80000, &(0x7f0000001700)='/dev/audio\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x3c, 0x1, @ib={0x1b, 0x1, 0x7, {"16448a50b7f825ec12ab260217daef53"}, 0x4, 0x1, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000280)={0x11, 0x12a, 0xfa00, {&(0x7f00000017c0), r3}}, 0x18) 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xc0fe}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000001000001, 0x200) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 467.686116] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:17 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000080)=0x84) sendfile(r1, r0, 0x0, 0x939b) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x7}, &(0x7f0000000280)=0x90) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, 0x7400000000000000}) 16:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfffffffc}], 0x1, 0x400000000e3) dup2(r1, r0) [ 467.908139] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x203) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="bc58c36433b9f462e7bae181b6671deb", 0x10) 16:44:17 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffff, 0x1) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000080)) 16:44:17 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 467.953109] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1847, 0x20000) 16:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3c00}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x2, 0x8000) [ 468.135362] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 468.169977] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:18 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2f, &(0x7f0000000100)=""/247, &(0x7f0000000040)=0xf7) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x200000) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x6, {0x59b, 0x4, 0x9, 0x6}}, 0x20) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) write$binfmt_misc(r1, &(0x7f00000002c0)={'syz0', "dac89e6d43b40b28054682bb592d2f1616452d395e8394f3cfa4a6709b4ba93f5306a6e8edfb77243b37e528a65407bb26b058bbc733299e39cd751598db91e9a9f978a0da147118c2fe00cc9cdb85"}, 0x53) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0x264}}, 0x7, 0x101, 0x1000, 0x9, 0x10001}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0x4}, 0x8) [ 468.372430] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x40000000006, 0x0) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="d5f904cc4318c00ee56b31e5653d22211766fd26b2bdb19fa859070c66a469f90ab837308b64be308f6a52c0f673c2ad7c3ada2f5e0829ce415f808020870f6f5166e990f9ea00ce819d57ee774674d74c4ddec884b678d0d61fc7a82caa1ccd35fda6a67b86777deb37ffc3721cb61946c9628d0eb4b9d2cf13078ad6352c1aa077af140fc198f4796ba5a6c6a8ee73788e3dee33969715febfc0eee1fac624369c0f85f843d5c60ffb", 0xaa, 0x1}], 0x101000, &(0x7f0000000200)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/loop#\x00'}}, {@fsname={'fsname', 0x3d, '/dev/loop#\x00'}}, {@subj_user={'subj_user', 0x3d, 'em0'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'ppp1.!)proc'}}]}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:18 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 468.521629] *** Guest State *** [ 468.531437] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 468.539209] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 468.565478] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 468.580920] CR3 = 0x0000000000000000 [ 468.586810] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 468.594695] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 468.601234] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 468.610740] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x300}], 0x1, 0x400000000e3) dup2(r1, r0) [ 468.620125] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.629507] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.640761] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.677989] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.709111] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.720155] GDTR: limit=0x00000002, base=0x0000000000000000 16:44:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x2001) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x107081, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000140)="10bd42f2ce5de23bfad339b5bc00fb7059fa1706662fd1e0ae8a0082fde382b48bc859bd52e65abf1a6dd12853e0c29639318d00280317f6d9bc44d24281763f83708d452abc0aca52e1cee6e3ee92501cc9edbe86d28c9a3ee894dc21ca210304c17bdaa88e9578c671f39860f4c19cd26c5d509c4c54e7553dd746e34a68663eb30119851724c38ea26ff3d6bf61ad331b7ae2026a220ac3445bdb1253b5eeb39438b7b046060c08ede1a5430c8cfb046a7c7c42ce77c59d81146188518019ed86c8811f418ac3a8cfcc877827cfbeff6add66ce108e") ioctl$LOOP_SET_FD(r0, 0x4c00, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) [ 468.736767] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 468.747077] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 468.757467] IDTR: limit=0x00000000, base=0x0000000060000011 16:44:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0xb, 0x11, 0x7, 0x16, 0x8, 0x100000001, 0x2, 0xd5, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 468.787365] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 468.809199] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 468.875109] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 468.920158] Interruptibility = 00000000 ActivityState = 00000000 [ 468.924503] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 468.960584] *** Host State *** [ 468.973036] RIP = 0xffffffff8120262c RSP = 0xffff880189acf390 [ 468.979230] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 468.995410] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 469.011381] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 469.058328] CR0=0000000080050033 CR3=00000001c3f2e000 CR4=00000000001426f0 [ 469.077307] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 469.098454] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 469.106727] *** Control State *** [ 469.110460] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 469.120371] EntryControls=0000d1ff ExitControls=002fefff [ 469.126520] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 469.135950] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 469.143101] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 469.151495] reason=80000021 qualification=0000000000000000 16:44:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xff00}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0xfffffffffffffffe, 0x9, 0x4, 0x5, [], [], [], 0x20000000000003, 0x90, 0x20, 0x403, "00730cf3a700"}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:18 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)=0x4, 0x4) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) write$FUSE_ATTR(r2, &(0x7f00000002c0)={0x78, 0xfffffffffffffffe, 0x6, {0xfffffffffffffffa, 0xfffffffffffffff9, 0x0, {0x0, 0x1ff8, 0x8ff, 0x2, 0x0, 0x8, 0x200, 0x100000000, 0x780d, 0x10001, 0x9, r3, r4, 0x3, 0xffffffffffffff80}}}, 0x78) [ 469.158654] IDTVectoring: info=00000000 errcode=00000000 [ 469.164375] TSC Offset = 0xffffff0332a9f401 [ 469.168812] EPT pointer = 0x00000001cda9c01e 16:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 469.249542] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x7832, 0x0, 0x0, 0x4, 0x0, 0x7400000000000000}) ioctl$KDSETMODE(r0, 0x4b3a, 0x10001) 16:44:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xf401}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:19 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 469.407253] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x100000003, 0x0, 0x0, 0x7400000000000000}) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x7, &(0x7f0000000040)=0x100) 16:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 469.556505] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:19 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10000, 0x3c1802) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x9, 0x7400000000000000}) 16:44:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x40020000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7400000000000000}) 16:44:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 469.792781] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:19 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 469.987738] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:19 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) write$P9_RSTATFS(r1, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8d2, 0x200102) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="67f20f2d550c0f20e035002000000f22e0b9dd0b0000b802000000ba000000000f30c4c2c9af2a66b84c000f00d80f01c9d86f2e66baf80cb8bc6b8487ef66bafc0cb0d0eeb960090000b800000100ba000000000f3066baf80cb834959d8fef66bafc0ced", 0x65}], 0x1, 0x8, &(0x7f0000000180), 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 470.184875] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:20 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r0) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 470.341962] *** Guest State *** [ 470.355438] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 470.394750] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 470.406714] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:20 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) [ 470.437617] CR3 = 0x0000000000000000 [ 470.483440] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 470.525349] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 470.548507] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 470.563883] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 470.569875] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.592569] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.610381] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.634209] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.685257] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.718260] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.736116] *** Guest State *** [ 470.742622] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 470.743777] GDTR: limit=0x00000002, base=0x0000000000000000 [ 470.763738] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.769691] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 470.777683] IDTR: limit=0x00000000, base=0x0000000060000011 [ 470.789354] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 470.795248] CR3 = 0x0000000000000000 [ 470.800865] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 470.808340] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 470.811400] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 470.817398] Interruptibility = 00000000 ActivityState = 00000000 [ 470.826925] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 470.829522] *** Host State *** [ 470.836360] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 470.839323] RIP = 0xffffffff8120262c RSP = 0xffff88018306f390 [ 470.846018] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.852466] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 470.861368] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.866982] FSBase=00007efc1a9bd700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 470.875961] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.883934] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 470.890921] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.896886] CR0=0000000080050033 CR3=00000001cc2c8000 CR4=00000000001426f0 [ 470.905089] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.922446] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 470.922512] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 16:44:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:20 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x283, 0x4000000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfe80}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 470.922647] *** Control State *** [ 470.922693] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 470.922737] EntryControls=0000d1ff ExitControls=002fefff [ 470.922755] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 470.922801] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 470.922891] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 470.922982] reason=80000021 qualification=0000000000000000 [ 470.923233] IDTVectoring: info=00000000 errcode=00000000 [ 470.930604] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 470.938445] TSC Offset = 0xffffff024243b82a [ 470.940382] GDTR: limit=0x00000002, base=0x0000000000000000 [ 470.946912] EPT pointer = 0x00000001cb64901e [ 471.063586] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:20 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:20 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 471.106049] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 471.118929] IDTR: limit=0x00000000, base=0x0000000060000011 16:44:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) [ 471.152781] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 471.169409] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 471.177052] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 471.188711] Interruptibility = 00000000 ActivityState = 00000000 16:44:21 executing program 0: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 471.217633] *** Host State *** [ 471.230017] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 471.240838] RIP = 0xffffffff8120262c RSP = 0xffff88018bc6f390 16:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 471.275258] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 471.287258] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 471.297418] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 471.307241] CR0=0000000080050033 CR3=00000001c6478000 CR4=00000000001426e0 [ 471.318587] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 471.326160] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 471.333156] *** Control State *** [ 471.337375] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 471.356083] EntryControls=0000d1ff ExitControls=002fefff [ 471.364488] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 16:44:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x900}], 0x1, 0x400000000e3) dup2(r1, r0) [ 471.381291] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 471.421016] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 471.436398] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 471.508570] reason=80000021 qualification=0000000000000000 [ 471.540526] IDTVectoring: info=00000000 errcode=00000000 [ 471.547114] TSC Offset = 0xffffff02016f6fe9 [ 471.551600] EPT pointer = 0x00000001c43ca01e 16:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:21 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x5, 0x0, 0x9, 0x1, 0x100000000, 0xfffffffffffffe01}}, 0x8) 16:44:21 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xffffff8d}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 471.652970] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 471.671297] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfffffff5}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:21 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:21 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x800, 0x20000) dup3(r0, r1, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000001c0)={0x8, "cdc49b3088bef26c251feb2e85699e5c8cdd9f82bfef8bccb9ff99cde5ea1d2d", 0x7, 0x20, 0x9, 0x1000, 0x0, 0x1, 0x3, 0x73}) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000100)={0x0, 0x9, {0x6, 0x5, 0x1012, 0x0, 0xb, 0x8, 0x3, 0x7}}) [ 471.794250] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 471.863128] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:21 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xff00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) listen(0xffffffffffffffff, 0x0) r3 = gettid() rt_tgsigqueueinfo(r3, r3, 0x3e, &(0x7f0000000000)={0x40, 0x6, 0x5, 0x2}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000240)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000a00)) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000640)) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000940)={@remote, @multicast2, 0x0}, &(0x7f0000000980)=0xc) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000009c0)=r7) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000008c0)={[0x5000, 0x10001, 0x0, 0xd000], 0x2, 0x8, 0x1}) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f00000007c0)=""/216) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) eventfd2(0x81, 0x800) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0x8, 0x9}, {0x5, 0x1}, 0x6, 0x2, 0x840}) socket$bt_rfcomm(0x1f, 0x1, 0x3) [ 472.003554] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:21 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:22 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 472.198530] *** Guest State *** [ 472.203007] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 472.212498] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 472.221901] CR3 = 0x0000000000000000 [ 472.226946] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 472.235427] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 472.253555] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 472.316615] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.361264] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.366630] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 472.400351] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 472.458497] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xff0f0000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 472.503093] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:22 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:22 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, 0x0, 0x0, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 472.642754] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 472.703108] GDTR: limit=0x00000002, base=0x0000000000000000 [ 472.770168] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 472.826800] IDTR: limit=0x00000000, base=0x0000000060000011 [ 472.873248] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 472.938306] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 472.981415] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 472.993825] Interruptibility = 00000000 ActivityState = 00000000 [ 473.001940] *** Host State *** [ 473.006513] RIP = 0xffffffff8120262c RSP = 0xffff8801b57c7390 [ 473.014189] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 473.021920] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 473.031067] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 473.048776] CR0=0000000080050033 CR3=00000001d902a000 CR4=00000000001426e0 [ 473.065554] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 473.098114] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 473.118089] *** Control State *** [ 473.126096] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 473.147657] EntryControls=0000d1ff ExitControls=002fefff [ 473.169459] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 473.188706] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 473.204144] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 473.223529] reason=80000021 qualification=0000000000000000 [ 473.229868] IDTVectoring: info=00000000 errcode=00000000 [ 473.245750] TSC Offset = 0xffffff013c1c5427 [ 473.250092] EPT pointer = 0x0000000180b0a01e 16:44:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:23 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x700}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x101, 0x20001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x8, 0x4, 0x10000, 0x8, 0x4, 0x10001, 0x31be, 0x9, 0x1f, 0x2, 0x3ff, 0x800, 0x5, 0x3, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x202, 0x12000000, 0xf94e, r3}, &(0x7f0000000240)=0x10) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:23 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x80fe}], 0x1, 0x400000000e3) dup2(r1, r0) [ 473.582690] *** Guest State *** [ 473.586175] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 473.604022] *** Guest State *** [ 473.620688] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:23 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 473.633139] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 473.675061] CR3 = 0x0000000000000000 [ 473.681026] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 473.700369] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:23 executing program 3: request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='/dev/loop#\x00', 0xfffffffffffffff8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) r3 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) r7 = getuid() stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getgroups(0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a80)={'vcan0\x00', r1}) r13 = getegid() getresgid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000009c0)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x5, r3}, {0x2, 0x0, r4}, {0x2, 0x0, r5}, {0x2, 0x0, r6}, {0x2, 0x4, r7}], {0x4, 0x2}, [{0x8, 0x5, r8}, {0x8, 0x4, r9}, {0x8, 0x4, r10}, {0x8, 0x3, r11}, {0x8, 0x4, r12}, {0x8, 0x5, r13}, {0x8, 0x6, r14}, {0x8, 0x2, r15}, {0x8, 0x1, r16}], {0x10, 0x2}, {0x20, 0x4}}, 0x9c, 0x0) r17 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r18 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r17, 0x4c00, r18) 16:44:23 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4000000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 473.722588] CR3 = 0x0000000000000000 [ 473.726323] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 473.726456] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 473.747542] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.767587] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 473.801082] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 473.801719] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.826248] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 473.865630] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.869779] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.896226] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.904191] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:23 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 473.916966] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.926632] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.931605] IPVS: ftp: loaded support on port[0] = 21 [ 473.960637] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.972799] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 473.988220] GDTR: limit=0x00000002, base=0x0000000000000000 [ 474.024511] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.024878] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.048731] IDTR: limit=0x00000000, base=0x0000000060000011 [ 474.078083] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 474.078250] device bridge_slave_1 left promiscuous mode [ 474.079147] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.093524] GDTR: limit=0x00000002, base=0x0000000000000000 [ 474.103917] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.109488] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.120792] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 474.124443] IDTR: limit=0x00000000, base=0x0000000060000011 [ 474.124586] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 474.124651] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 474.125126] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 474.125243] Interruptibility = 00000000 ActivityState = 00000000 [ 474.125402] *** Host State *** [ 474.125485] RIP = 0xffffffff8120262c RSP = 0xffff8801cdc47390 [ 474.125608] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 474.125655] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 474.135137] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 474.141241] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 474.164682] CR0=0000000080050033 CR3=00000001d78c9000 CR4=00000000001426f0 [ 474.193399] Interruptibility = 00000000 ActivityState = 00000000 [ 474.208519] device bridge_slave_0 left promiscuous mode [ 474.214188] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 474.222750] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.232712] *** Host State *** [ 474.242628] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 474.249468] RIP = 0xffffffff8120262c RSP = 0xffff880184b17390 [ 474.256484] *** Control State *** [ 474.261688] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 474.269088] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 474.276034] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 474.289110] EntryControls=0000d1ff ExitControls=002fefff [ 474.292762] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 474.301292] CR0=0000000080050033 CR3=00000001b58ac000 CR4=00000000001426e0 [ 474.304613] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 474.314517] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 474.318707] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.332034] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 474.339444] reason=80000021 qualification=0000000000000000 [ 474.346363] IDTVectoring: info=00000000 errcode=00000000 [ 474.351120] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 474.351992] TSC Offset = 0xffffff007cf0e5f2 [ 474.361705] *** Control State *** [ 474.362787] EPT pointer = 0x00000001b52fb01e [ 474.366914] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 474.384256] team0 (unregistering): Port device team_slave_1 removed [ 474.399452] EntryControls=0000d1ff ExitControls=002fefff [ 474.406091] team0 (unregistering): Port device team_slave_0 removed [ 474.412647] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 474.419587] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.428219] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 474.435246] reason=80000021 qualification=0000000000000000 [ 474.435259] IDTVectoring: info=00000000 errcode=00000000 [ 474.447798] TSC Offset = 0xffffff0086b4c835 [ 474.454580] EPT pointer = 0x0000000182cfc01e [ 474.465619] bond0 (unregistering): Releasing backup interface bond_slave_1 16:44:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:24 executing program 3: ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000001c0)) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x4000) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0xd2, 0x1000, 0x1, 0x1, 0x2cb8, 0x7, 0x101, 0x7f, 0x5, 0x5, 0x5, 0x100000001, 0x9, 0x4, 0x4, 0x1}}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 16:44:24 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x500000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 474.490717] bond0 (unregistering): Releasing backup interface bond_slave_0 16:44:24 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 474.614400] bond0 (unregistering): Released all slaves 16:44:24 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x300000000000000, 0x2802) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) fcntl$setflags(r1, 0x2, 0x1) [ 474.720932] *** Guest State *** [ 474.742545] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 474.772719] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 474.799223] CR3 = 0x0000000000000000 [ 474.811579] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 474.844462] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 474.870602] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 474.892077] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.927258] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 474.987253] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 475.028618] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 475.062484] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 475.071507] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 475.092382] GDTR: limit=0x00000002, base=0x0000000000000000 [ 475.102889] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 475.111137] IDTR: limit=0x00000000, base=0x0000000060000011 [ 475.120681] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 475.129433] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 475.143692] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 475.162383] Interruptibility = 00000000 ActivityState = 00000000 [ 475.172623] *** Host State *** [ 475.182826] RIP = 0xffffffff8120262c RSP = 0xffff880184e17390 [ 475.202411] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 475.209154] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 475.232411] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 475.252410] CR0=0000000080050033 CR3=00000001b7a77000 CR4=00000000001426e0 [ 475.259821] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 475.282339] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 475.288770] *** Control State *** [ 475.302250] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 475.322312] EntryControls=0000d1ff ExitControls=002fefff [ 475.328156] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 475.342348] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 475.364317] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 475.370926] reason=80000021 qualification=0000000000000000 [ 475.382782] IDTVectoring: info=00000000 errcode=00000000 [ 475.388367] TSC Offset = 0xfffffeffded2c38e [ 475.402574] EPT pointer = 0x00000001bbc9301e [ 475.843007] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.849662] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.858464] device bridge_slave_0 entered promiscuous mode [ 475.907616] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.914191] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.921639] device bridge_slave_1 entered promiscuous mode [ 475.969004] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 476.016138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 476.162760] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 476.211315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 476.437814] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 476.446173] team0: Port device team_slave_0 added [ 476.490660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 476.498305] team0: Port device team_slave_1 added [ 476.546042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.578117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.608406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.638422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.909252] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.915667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.922405] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.928758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.936672] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 477.722309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.931668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.027441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 478.121271] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 478.127549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.135734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.226772] 8021q: adding VLAN 0 to HW filter on device team0 16:44:28 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x7000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x700}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:28 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:28 executing program 3: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 478.876838] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 478.887949] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:28 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000005000000}) [ 479.005589] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:28 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x480000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) 16:44:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 479.243741] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfec0}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r2, &(0x7f0000000540)={0x1d, r3}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r0, 0xae80, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000880)={r5, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r5, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 16:44:29 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:29 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x74000000ffffff7f}) 16:44:29 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000780)='/dev/adsp#\x00', 0x800, 0x40000) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000007c0)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000280)=""/107, 0x6b}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/146, 0x92}], 0x5, &(0x7f0000000640)=""/251, 0xfb, 0x81}, 0x40) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@loopback, @rand_addr=0x4, r2}, 0xc) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000840)) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 16:44:29 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x740000003f000000}) 16:44:29 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 479.579746] *** Guest State *** [ 479.586234] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 479.617114] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 479.630842] CR3 = 0x0000000000000000 [ 479.638893] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 479.646100] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 479.653111] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 479.660951] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 479.672031] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:29 executing program 3: getegid() restart_syscall() r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfc, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) 16:44:29 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40)}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 479.683614] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 479.722805] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 479.745215] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4800000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 479.793644] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 479.813311] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 479.827072] GDTR: limit=0x00000002, base=0x0000000000000000 16:44:29 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000600}) [ 479.857728] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 479.881081] IDTR: limit=0x00000000, base=0x0000000060000011 [ 479.932845] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 479.963386] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 479.978066] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 479.991498] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 479.998464] Interruptibility = 00000000 ActivityState = 00000000 [ 480.013109] *** Host State *** [ 480.017468] RIP = 0xffffffff8120262c RSP = 0xffff8801c4b97390 [ 480.029646] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 480.036961] FSBase=00007efc1a9bd700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 480.045247] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 480.051301] CR0=0000000080050033 CR3=00000001863ec000 CR4=00000000001426f0 [ 480.060644] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 480.067578] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 480.073992] *** Control State *** [ 480.077535] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 480.084517] EntryControls=0000d1ff ExitControls=002fefff [ 480.090102] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 480.099151] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 480.106204] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 480.113538] reason=80000021 qualification=0000000000000000 [ 480.119896] IDTVectoring: info=00000000 errcode=00000000 [ 480.125731] TSC Offset = 0xfffffefd4c3cd91d [ 480.130127] EPT pointer = 0x00000001c341e01e 16:44:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x2030, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 16:44:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:29 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40)}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:29 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000005}) 16:44:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xcc01000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:30 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000003000000}) [ 480.266633] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x4000000000000003, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x4}}, 0x2ba600a1, 0x9, 0xfe, 0x5, 0x2}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0xdb, 0x1f, 0x8, 0x2, 0x979, 0xe8, 0x8, 0x3, r2}, 0x20) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$KDDELIO(r1, 0x4b35, 0x80000000) 16:44:30 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40)}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16:44:30 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000004000000}) [ 480.469058] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7c54, 0x4100) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:30 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 480.701170] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xffffffff00000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:30 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x2500000000000000}) 16:44:30 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:30 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000006000000}) [ 481.000516] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) write$binfmt_elf32(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x648) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) 16:44:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xff000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 481.228513] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:31 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x1, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(0x0, 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 481.287099] *** Guest State *** [ 481.296555] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:31 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000700}) [ 481.347980] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 481.404429] CR3 = 0x0000000000000000 [ 481.413154] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 481.468648] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 481.493046] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 481.505092] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.529902] *** Guest State *** [ 481.536261] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.544968] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 481.555224] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.557821] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 481.567911] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001200)='/dev/dlm-monitor\x00', 0x101880, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r3 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000001240)=""/181) r4 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)="5f98f4f8804723ef7079d2cc4adf29135e9f11c52d2d14b410a3e94b47ad2c4fd6bde1c7ebf38c4a18eb2c0d58d3e12d0305ebca738aab9ac4a2d9ec4d477cf52acc8acecff4000b11751ffed3f795", 0x4f, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="7d68380709b73335879780ad266bef5165365d4ea5678a0aa2beb76062def9d75845810c1f96dde774226de4357b4c63b844802b20d43fc6e426fc738ac14c03a99273966cb51ad8be32a6fc5c19118bd6f0fda972db8df47abfda138b456d18529fa29201c6e38a252890e5295994f0be62fc6ad36fd5851908b73d25c614f1f9d85d2aa8da0743786df7ff8789785451461c1c6c49270bc3a3ad141a5c970774331642acf241d518a51c8e1b1a24aeaf11f16bf92e8e556db94e7e79676872c1b45e9882a5a8ed9dacd156575096af90f733f6a5387cc308e0a95fa91e09596fe0c62cd34f517892cee4eada92694fd434c0e07632512cd461a2e3012782e01d113bbfd9293bd18c8ace3f3f28c8ea11b005d8c964ca54e10221e048f84991a20682980d25b58bb52dcce6e1f6438aab3389f3869bd8f3611b11b7e934b8e466fa41c7ce802e9d2255d054aef1f50bddcba793c2543339ae556f7aebbbbcf1e5609ce13c79a5830fe2ac36d95ed43146d80dbb60ed04a4baab8cd37896fe2f723d1477f0ee3b4cb222986079f7cf3ff4bf6e035ada82ecb12200ec637e3d22b754fb02a9d549fed2be760b5b38ca760acc4a85f33ce4e76d39a1ffc28dab5d1fa7bd5de1f29735c002417ee7d6db67376b9cbbb1700e12d8d73309c16eb98ce92e84a51110cc346ea0ef4e38f3fb20ff663e48168a0bf1ee8281ef4b2af20143ccb4070366a2caffa0ab810c148521f2e23f68d48e3adebbd7d17b6b8fff85cbd89bf865137db680ef5af4c175fc4f7c6c7a0d43a8ea5765a17a1363d620101479037df492ac4d135fef094d6b35a6406e8cfdfd6bb693de2c78b1c7e5d7727315d3b14bf68abad02f0295e5da0c212843af4249c7844741c6430e15d3352d76c7e42d513ed579c62790c14ec5f9b774f269354b2fb52073af952322c5fa78d16755dab974b2401e571f5c0675091312b4fe6dde36cac4bdacd10151c9511d15ad5e4c4bd6c70910fe1eca58577d69bf1b1190ccb777b13e78406744fbc7d53f95964496b8b38780d0d6bb923ac20ad2054bf0ef381b90d81cb409aacffb6f5415a9eb3b585f24960a109d0a6fd8a1123538ae3691bb0f844e1f25e9758747d6507ac20e7c7bd88a8d2e28cc023f8f7cffcf4030e2d68697294e0312cacf6b3043994e5c94207c26498c55a6cd26f544d4597ab045bf80afb543f031cf4c52b87b2d6627393d421dad6bb8d98fcfe82379ee9c15164a6bbdf20f4b8e2f6caf28abdcbc68fe5339750ead2405585de16100ba6bc82a323694d8df79f607aa60b1b6b937b57acdd7764304431418d0d84479fa182fecad61968ed10a18c267ef74ae953be783b9daa66ae2ab5f26fa97f62368bf39507b81b59cd197615787f0a7d493027f07032ad3d7d9b95f133bbb94ad98f01e18a564aa80bc3a39d05c795fce08f4c63837ed4f4e2810427545053c9e9a9d28203fcd5d380ad32bb5cdf848d09219a0cec77c12c5cc06fbc5dcbeb3720c2c321d8f53afbe96f097858e28bd01a4e050fd164526867787f70eebced16f8bafd868860effa739d88098ce69c2f9dc5de15310bf205a375004b7f13f35f7e401f46217f81aee28d747d8159bc1be7154b093ccca5a17e7d1c08a7fe91ba2b81f645255b8dbf02110fb2668725a647eaffe7477459684e22ce52badeacf3eb3b7a36c0dac03eef4cb28ec8b44ee182a450eb9a77e909823b7e524e48f3323f1de036ccbfba1ea79f77e9553715edb51bafe0fca42a8465d1f5c5b0efbe31009df32342876d968fafb7f5a8c0c22ea875265d159c3bccaddc2b042e36e2e5d3be62a91fdf599205079d993935bb29aeae673ef2a50cb7b03622ba91e8c145a615ed1187f05f4532d1001c29a1b5349b6a2e5e6a40f238679292a598f612d08f293196c8eee62db902257f27e3fe37b5ac708388c1d190f4543485939e19ffaa712ef9c63940d3f8020c58cffc790afb9f37e6f3aa2854917f4d98767929b91ffa236861964f3a91bf99c8ff6af2cb4f014b484cf7c026845c7dd211bad47b4df2ef5bef527fbd97414fb327d6565fca4dbf0e0af2a596fa7cd5bf8d5aebddcb53f5b58256470a0e4b2e752d30c3a0fdf59dc56a6400a4e0f7e50dc76b47119471ae430455f1b87bf542706bcbfb19d47bf59ff0b9eb9ddab0f135032d1861c02b73f1332ef518ed4f5851732571dc399226ae46ba4607cccafa0d42b897e1b592437ef71dfec9d1364bab299c561a75de066d44252dccd0c8c243c7e2ec9ec3ad5bb8a4b4f90e0c0b3f987d3ee2f35fdb8cc5159dd3d8aecd2989cf8bade7e1883e74806ea5523e370f8155182b1311448e0b619755ada467be5a14bb23a9cdbec100ec3e9601c3aae7968af259340714f9f4dcc40ea6b311208885ec71eb864c97d3b93ce233b40c55fac8bdda62312c081057d1582322979cced71b25d4afe983d08d9c9198246efa67094976c2f3065d32823807c5772a53c663befaff32f44ac320e81302b5f0aa5b84fd019efc9458e5c76dbe3feb3a57fd4f08bfe6554eb2c66ab0f8daea9d4fc9e9520e9b0621170e791c3887545ba1a6aa7657b0ea29d8f35e00d8ed9734b44f4458965cfd55833013119254abc6fbfc8ae7cd56b878f158f4b1bbad7c98ce6b149a018513f9fa7154e07196da371f5dcf5024c6b1c274ac946f3fe8d04c5662cf8ab54c9658c731198d26658860e1917a166dd1290e5605fbc0dc887eb483e7fbd9ffcf13fc0d3b51de76fda45640809cadd2e85d48bbb2d3b2e1b7a8e880586c84143797f6d010958acde697f881f998e2ad84e36025ce59a8b550253ef06ccb50262173d7d0877ab5e13317720760e032f286bd167ecec8c172997510e35321567a49f07e4c87bae11e976f33d2cc0669685f91ebe04848372b55812afd7fd3a5687a24145cbdb91057f347c05cdd14d52fd9ef0be6a964c02636c272c0dee76e2755a687ff33576ea5b9d58c328baa9b6a3ace9ba8879604ca1e59ee4767b885f191d2ae08e212d05f966e6dddc1882cfbd1b087eb2d9049f96ee632989283412c5e68e860bb66da76fca3da49a91b576c6aeed9d7be4f1846f79bd40c1b3dc020e3af3f6baa2b198dbd5131084bcae878c36c7fb4b1e04adc8308d3eebdcf7fa122b3ea0dc150b79b9074d2625fd40a6c05bfc66b507f4aed0c1da779d701c3f5bed9616b8765bf5659b7e3990517eef9e3e044e8bcc610b7b4ddff1882534966f9abb70b4b82c76825baa5a9693fa331f0969851f5b4ad24c2a3c52eab89e0cb997b99fc3819905a5dfd1df9c49b098a1863b7e4ea4a5aa87c62422756169b9812e03c3e68d16c859d611649248de26d5a49e14b102b6a716bba8fd7c778bc2a66cf27816ff55444b558a1db9670686c56e0857473a31bbb3a33ae37c71396b7f202c7966439c8c15dba97e93318daf2168831dbbecc3fc80e2158199df1b1b469c06219fadfe17ce2ce97c096f2fb26e95c9088606be6c6fa462fac1ce5dc7d8cbd56e1099261d1b6ba1831be1de44652e53886a23080906becdb3521da8946f26e76f774dda5a0757d0f48f3fd7f952ecd3f7767583237c51e3bcb94ef07be0deffd703a9b4d0e6c0b2e8fa5302631c4325779ef0e748f111e3afe05fd53ead9f766a8f7808283ccbb25bec78e2775aef9a16855e0cef07f8ced8ab524b12afde0443f6f903b8dbfee69a31799191255395f0af73a43f60abe44797a8af83c6dd8867906013a01e09f9d4bee20d11bcc42bf6fc9a720a9c5d05621af4bd8e2906b4d432d840b0f02fa807b5c9c4360a70de960fb24500f93c08b66d0a13030a8ae7765232d61f99d9a63e3c4296bec72f568f9a00faa0fc6c105ff891cf49d09975582ab30bb8d256813e12439e1be2e04a88471439bc0c7f942aab50f4a32af3b55f3ed8ca78d34463674408936f435dc4635468d249d3c49891a76c42e53446e38d9a280e5ff99061687967d57cb1a7da4af607567c0073ff9ec4f24d158e5ae4028ca969a14f3e3808ac20059599a9052c728327d9e9164350cc08b83e64f106538ce053728b85325f292a41ea51b42d901058057e05bbef6fc0650f012ce0c449a9dcea279a0a057bda92dccf8c2f63a8c3da3360cb5a5be38d5defc7a97564ee7796a017ea6e3da2abcb8c5f1564850279d783c77614521e691e8346640e33c424257a9fd60ba19bfe4b30e9a7a99e997909daecda42d723b5c7053c2bb9a86d8fef4445f5878ac9c6ff1894b8d9f0bd935b6ebe5b0c39feb04caf1e3b0f5ab0cce4a14e98b5fd275b3900160cad11704b02d44a5be9c5fc475f23da0b497e6310527fa175bc41a100d71fb07afe4e699459947d035b8a2237d72fad488715eae31d2572e8a2f61b7fa236b344e2e34e2595b2705f1df18b2655b575bc81197d794ddd2e30b90ad38fa3020b2a37e87dc81003d0c46f42ebad1aa522c8508b3039c428eb3fb7a3eac2c3c82c45515862399024db397eb9e5daafd0896e039af221cb026f2c7db6485b6fd44ab6438be94d8486a810b846e8f4f6dd3c3e19a87cfc7c8f5fc65daf8397fbb0a899f9fee337c965da4bbb523944aecff6c730102efa8caaf8f5d4179506c2d9c10156b0a50801fae0a3faeaa5bd848e429b6dae2296d30b5eee0314eec77582b98e19a6696211e49a8ba16b6a316f3c0aa0f42463a321216e240127023ede1deb0a62d919630af27c0e851b3933cf21ef49f056791d9f1167d4859a9d65d5f2128e920f5dff1cda31f17dcca16b744660a7f9412226ef0d86b4c2843594bac4f9d280e46ee64c96b1f3c84bb13fd18837510dc582a6d66ffd6025d8bc53839657caa29b82389040295e3e5567dc10d957872954e50ca332741a71876606e0456933742f0d7548a4ec856fcd825114ae383bbd9618c9a0f7112e42186f1335e02ff06ba9b8d401fb951ab6cc6fe8a6fcdc895e43a7bf21f100e550362ccb207d5b252ad8d4092dec755351b7a4f2f58982366545283ca819e44ee09c95704ae3a3a6206f27fa199a827340227e0d4abce6c7c1deca8eddb1bba52c3d69b66259e3b43e8d9d6d7d0efcb0fb24ddca431b49a5b2d06808a74fe804984fe2394c63d9c939ade9d48b5e6d730e834be914f32d21e842db41a16b73e7eea528db6b8a520eb86a8c24fb3a68707abecc94b794d04250e3f4c065ed0b6d346a4b885e810235a07759dc3a547359eb470f938231dfdee08d7f9f5d0228cb5559d50a12c31d396a78797bbf1491910bfcadbbbc5501ea4df1a95a5376d5a68f425d25541fd86f243b5e28cd70bb80702ec589b858a9807c9be37cfdec3a4cbea08f33b1d2412ee1c07d38e4fd2a7e9e3611dc9baaec5fc01dfa9f0c9d18f309991313c73f40c5c24e92acc250299d94c8908c4e8622bd4f9c6ba38a7861df22c3b979bdf256e0c6a41593f3b7fc76f865811885582014c46d882a177603d0c7902b9fa3051c9f5558d9690388f2e3ee3e0d66c78eff46775c43bde0ea4c7188fd4bc16cce8246c751a5ed263bf6155259d79717762a46331c0dae46695e6a987cfdaab2a39e321b6947ffb3e2fb91896e9d1ba94ecbf38c1994f8eda128f8f389ade58594bf71ee3d8d9c7a8ff4a598f6c54950736b167a8d9f688846c854164190677fb52881cfbbd7f6f0046a9ef141822eae8b70e635a7e13497cad1e1592c81492010224c1bfed373bd264b78a2267d9f0c08596b82c7cc216a58179c05043df22105dd608fcd934244f82288c18cea28c1ff7b", 0x1000, 0xfffffffffffffffb) keyctl$unlink(0x9, r4, r5) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) [ 481.581227] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.590297] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.599292] GDTR: limit=0x00000002, base=0x0000000000000000 [ 481.610726] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 481.611121] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:31 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 481.630162] IDTR: limit=0x00000000, base=0x0000000060000011 [ 481.641064] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 481.650401] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 481.660031] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 481.668658] Interruptibility = 00000000 ActivityState = 00000000 [ 481.674175] CR3 = 0x0000000000000000 [ 481.676368] *** Host State *** [ 481.683154] RIP = 0xffffffff8120262c RSP = 0xffff88017d60f390 [ 481.689636] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 481.697012] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 481.704274] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 481.714025] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 481.725176] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:44:31 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000006000}) [ 481.735013] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 481.749442] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.759795] CR0=0000000080050033 CR3=00000001b502f000 CR4=00000000001426e0 [ 481.767921] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 481.776825] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.785804] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 481.793956] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.803076] *** Control State *** [ 481.807132] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 481.815139] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.823227] EntryControls=0000d1ff ExitControls=002fefff [ 481.823341] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 16:44:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xff0f}], 0x1, 0x400000000e3) dup2(r1, r0) [ 481.823424] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 481.857830] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.883608] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.891977] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 481.904813] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 481.914111] GDTR: limit=0x00000002, base=0x0000000000000000 [ 481.927609] reason=80000021 qualification=0000000000000000 [ 481.938966] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 481.947116] IDTVectoring: info=00000000 errcode=00000000 [ 481.947125] TSC Offset = 0xfffffefc5ece9911 [ 481.947136] EPT pointer = 0x00000001844ea01e [ 481.966577] IDTR: limit=0x00000000, base=0x0000000060000011 [ 481.986686] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 482.002694] EFER = 0x0000000000000000 PAT = 0x0007040600070406 16:44:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:31 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000002000000}) 16:44:31 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3}], 0x1, 0x400000000e3) dup2(r1, r0) [ 482.043542] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 482.051230] Interruptibility = 00000000 ActivityState = 00000000 [ 482.125425] *** Host State *** [ 482.166437] RIP = 0xffffffff8120262c RSP = 0xffff8801bacc7390 [ 482.193072] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 482.209547] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 482.216209] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 482.286614] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 482.293469] CR0=0000000080050033 CR3=00000001830ee000 CR4=00000000001426f0 [ 482.300504] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 482.307233] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 482.307240] *** Control State *** [ 482.307251] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 482.307265] EntryControls=0000d1ff ExitControls=002fefff [ 482.339198] *** Guest State *** [ 482.344197] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 482.353697] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 482.360687] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 482.367432] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 482.374075] reason=80000021 qualification=0000000000000000 [ 482.374427] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 482.380400] IDTVectoring: info=00000000 errcode=00000000 [ 482.380409] TSC Offset = 0xfffffefc39a271af [ 482.380419] EPT pointer = 0x00000001cd24b01e [ 482.412647] CR3 = 0x0000000000000000 [ 482.416904] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:32 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000006}) 16:44:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x84, 0x82400) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) getpid() r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x20002) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) 16:44:32 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 482.437236] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 482.462313] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 482.485587] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.534670] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.561597] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x6400000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 16:44:32 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000002}) [ 482.590328] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.615553] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.631547] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.649584] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.672584] GDTR: limit=0x00000002, base=0x0000000000000000 [ 482.692701] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 482.729223] IDTR: limit=0x00000000, base=0x0000000060000011 [ 482.757129] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 482.774952] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 482.803476] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 482.827986] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 482.836132] Interruptibility = 00000000 ActivityState = 00000000 [ 482.843874] *** Host State *** [ 482.847234] RIP = 0xffffffff8120262c RSP = 0xffff88017f66f390 [ 482.855525] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 482.862625] FSBase=00007efc1a9bd700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 482.870847] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 482.877259] CR0=0000000080050033 CR3=00000001c3e01000 CR4=00000000001426f0 [ 482.884691] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 482.891420] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 482.897713] *** Control State *** [ 482.901384] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 482.908470] EntryControls=0000d1ff ExitControls=002fefff [ 482.917205] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 482.924406] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 482.931165] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 482.938188] reason=80000021 qualification=0000000000000000 [ 482.945179] IDTVectoring: info=00000000 errcode=00000000 [ 482.950774] TSC Offset = 0xfffffefbd0274ade [ 482.950787] EPT pointer = 0x00000001d235401e 16:44:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:32 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:32 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000001000000}) 16:44:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 16:44:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x400000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 483.106109] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:32 executing program 3: memfd_create(&(0x7f0000000040)='system\x00', 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 16:44:32 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000010}) 16:44:33 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 483.289877] *** Guest State *** [ 483.302925] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xfffffffffffffffc) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 483.339042] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 483.341570] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 483.377139] CR3 = 0x0000000000000000 [ 483.381391] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:33 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000300}) [ 483.406461] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 483.433204] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 483.484303] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.521578] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.556128] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.560963] *** Guest State *** [ 483.571783] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 483.574541] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.592744] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 483.613021] CR3 = 0x0000000000000000 [ 483.619624] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 483.632564] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 483.639504] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 483.647437] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.650255] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.657782] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.666751] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 483.678736] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.692882] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.693265] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.701388] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.713876] GDTR: limit=0x00000002, base=0x0000000000000000 [ 483.723229] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.737268] GDTR: limit=0x00000002, base=0x0000000000000000 [ 483.739906] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.748087] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 483.762674] IDTR: limit=0x00000000, base=0x0000000060000011 [ 483.769946] IDTR: limit=0x00000000, base=0x0000000060000011 [ 483.771039] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 483.779043] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 483.788324] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 483.795456] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 483.795475] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 483.795555] Interruptibility = 00000000 ActivityState = 00000000 [ 483.795612] *** Host State *** [ 483.795678] RIP = 0xffffffff8120262c RSP = 0xffff88017d8c7390 [ 483.795793] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 483.795859] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 483.795905] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 483.795926] CR0=0000000080050033 CR3=000000018690d000 CR4=00000000001426e0 16:44:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(0x0, 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) 16:44:33 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3f000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:33 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000003}) [ 483.796027] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 483.796185] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 483.796242] *** Control State *** [ 483.796342] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 483.796386] EntryControls=0000d1ff ExitControls=002fefff [ 483.796476] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 483.796539] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 483.796616] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 483.796696] reason=80000021 qualification=0000000000000000 [ 483.796755] IDTVectoring: info=00000000 errcode=00000000 [ 483.796813] TSC Offset = 0xfffffefb4cc0ec1b [ 483.796874] EPT pointer = 0x00000001d258a01e [ 483.819022] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 483.922573] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:33 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000020000000}) [ 483.973686] Interruptibility = 00000000 ActivityState = 00000000 [ 483.986562] *** Host State *** [ 484.002073] RIP = 0xffffffff8120262c RSP = 0xffff880183ecf390 16:44:33 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @local}}, 0x6, 0x4, 0x2, 0x1, 0x15}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x2}, 0x8) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @local}}, 0xf082, 0x2, 0xffffffffffffffc1, 0x3, 0x2}, &(0x7f00000002c0)=0x98) getsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300), &(0x7f0000000340)=0x4) 16:44:33 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0)}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 484.022528] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 484.029696] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 484.039602] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 484.046759] CR0=0000000080050033 CR3=00000001c0d0c000 CR4=00000000001426e0 [ 484.086222] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 484.122917] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 16:44:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) creat(&(0x7f0000000040)='./file0\x00', 0x80) [ 484.182822] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 484.197615] *** Control State *** [ 484.201952] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 484.233937] *** Guest State *** [ 484.239489] EntryControls=0000d1ff ExitControls=002fefff [ 484.260688] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 484.262461] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 484.303129] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 484.318056] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 484.319519] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 484.344581] CR3 = 0x0000000000000000 [ 484.348709] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 484.358851] reason=80000021 qualification=0000000000000000 [ 484.375590] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 484.376742] IDTVectoring: info=00000000 errcode=00000000 [ 484.387891] TSC Offset = 0xfffffefb23846c8b [ 484.392771] EPT pointer = 0x00000001d319701e [ 484.394447] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 484.407505] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.426272] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.435133] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.444950] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:34 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000002000}) 16:44:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 484.472088] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.484254] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.493603] GDTR: limit=0x00000002, base=0x0000000000000000 [ 484.514715] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.520221] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 484.525195] IDTR: limit=0x00000000, base=0x0000000060000011 [ 484.540558] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 484.553375] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 484.563175] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 484.571141] Interruptibility = 00000000 ActivityState = 00000000 [ 484.579117] *** Host State *** [ 484.584606] RIP = 0xffffffff8120262c RSP = 0xffff88017af57390 [ 484.591389] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 484.612664] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 484.621159] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 484.628173] CR0=0000000080050033 CR3=00000001d129c000 CR4=00000000001426e0 [ 484.636378] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 484.640061] *** Guest State *** [ 484.644055] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 484.647324] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 484.662449] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 484.671643] CR3 = 0x0000000000000000 [ 484.671646] *** Control State *** [ 484.671715] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 484.675830] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 484.681019] EntryControls=0000d1ff ExitControls=002fefff [ 484.687112] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 484.705654] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 484.713487] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 484.720661] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 484.727750] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.736141] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.736537] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 484.744899] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.751884] reason=80000021 qualification=0000000000000000 [ 484.759632] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.766373] IDTVectoring: info=00000000 errcode=00000000 [ 484.774712] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.781188] TSC Offset = 0xfffffefacc7172be [ 484.793607] EPT pointer = 0x000000017fad101e [ 484.795722] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:34 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0)}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:34 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x0, 0x4e24, 0x8001, 0x0, 0x0, 0xa0, 0x5e, r1, r2}, {0x5, 0x1, 0xc61, 0x3, 0xffffffff, 0x7, 0x7, 0x8}, {0x4, 0x2, 0x8, 0x9}, 0x7, 0x6e6bb5, 0x3, 0x0, 0x3, 0x3}, {{@in6=@mcast2, 0x4d3, 0x7f}, 0xa, @in=@multicast2, 0x34ff, 0x4, 0x3, 0x4, 0x9, 0x0, 0x180000000000000}}, 0xe8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x84400, 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$NBD_DISCONNECT(r3, 0xab08) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000540)={0x8000, 0xffffffffca545741, 0xfff, 0x7, 0x60b, 0x100000000}) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x400) fcntl$getown(r3, 0x9) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000004c0)={0x1700ae00, "d7f7478146c41712decbd3e98057ba9926f74de326a6bf953f06384dd74b69c9", 0x210, 0xa005, 0x1, 0x10, 0x2}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$NBD_DISCONNECT(r3, 0xab08) 16:44:34 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0xa00000000000000}) 16:44:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xa000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 484.822469] GDTR: limit=0x00000002, base=0x0000000000000000 [ 484.830835] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 484.844139] IDTR: limit=0x00000000, base=0x0000000060000011 [ 484.852571] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 484.860952] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 484.868840] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 484.876917] Interruptibility = 00000000 ActivityState = 00000000 [ 484.907576] *** Host State *** 16:44:34 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000007}) [ 484.922291] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 484.932472] RIP = 0xffffffff8120262c RSP = 0xffff8801c4b97390 [ 484.949903] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 16:44:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)=ANY=[], &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0//ile0\x00', 0x80040, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa179a4ae667f935b, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x8001, &(0x7f0000000100)=0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 485.012457] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 485.033596] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 485.041987] CR0=0000000080050033 CR3=00000001babfd000 CR4=00000000001426f0 [ 485.049446] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 485.057947] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 485.079848] *** Control State *** [ 485.088765] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 485.099835] EntryControls=0000d1ff ExitControls=002fefff 16:44:34 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0)}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 485.108698] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 485.109553] *** Guest State *** [ 485.116420] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 485.116467] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 485.116547] reason=80000021 qualification=0000000000000000 [ 485.116643] IDTVectoring: info=00000000 errcode=00000000 [ 485.131255] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:34 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000060}) [ 485.160869] TSC Offset = 0xfffffefa86610754 [ 485.167542] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 485.176535] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 485.201078] EPT pointer = 0x00000001b5eff01e [ 485.233450] CR3 = 0x0000000000000000 [ 485.237653] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 485.265761] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 485.299625] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 485.321234] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.329267] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 485.338240] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = dup(r0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8, &(0x7f0000000080)={0xffffffff00000001}, 0x8) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 16:44:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x64000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 485.347972] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.391300] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.418459] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.429004] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.438425] GDTR: limit=0x00000002, base=0x0000000000000000 [ 485.451721] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.477725] IDTR: limit=0x00000000, base=0x0000000060000011 [ 485.497609] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 485.509152] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 485.516261] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 485.534454] Interruptibility = 00000000 ActivityState = 00000000 [ 485.541269] *** Host State *** [ 485.545535] RIP = 0xffffffff8120262c RSP = 0xffff8801b93bf390 [ 485.560575] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 485.573187] *** Guest State *** [ 485.577510] FSBase=00007efc1a9bd700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 485.583738] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 485.586244] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 485.600851] CR0=0000000080050033 CR3=00000001cc559000 CR4=00000000001426e0 [ 485.603495] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 485.609387] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 485.625232] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 485.631982] *** Control State *** [ 485.638691] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 485.640231] CR3 = 0x0000000000000000 [ 485.648123] EntryControls=0000d1ff ExitControls=002fefff [ 485.651812] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 485.663755] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 485.665847] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 485.670426] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 485.677607] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 485.677653] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 485.677742] reason=80000021 qualification=0000000000000000 [ 485.677803] IDTVectoring: info=00000000 errcode=00000000 [ 485.677890] TSC Offset = 0xfffffefa5159c56b [ 485.677969] EPT pointer = 0x000000017eddc01e [ 485.693908] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.723265] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.737327] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:44:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:35 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000003f00}) 16:44:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x200800, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) connect$llc(r1, &(0x7f0000000140)={0x1a, 0xffff, 0x0, 0x80000000, 0x7fffffff, 0xf78, @dev={[], 0xe}}, 0x10) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) 16:44:35 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xa00}], 0x1, 0x400000000e3) dup2(r1, r0) [ 485.746709] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.757412] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.766223] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.775064] GDTR: limit=0x00000002, base=0x0000000000000000 [ 485.802435] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 485.839098] IDTR: limit=0x00000000, base=0x0000000060000011 [ 485.866717] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 485.910354] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 485.944373] EFER = 0x0000000000000000 PAT = 0x0007040600070406 16:44:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x42d168d2, 0x204000000000000) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'irlan0\x00', {0x2, 0x4e23, @local}}) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xff) [ 485.954728] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 485.974535] Interruptibility = 00000000 ActivityState = 00000000 [ 485.992762] *** Host State *** [ 486.001576] RIP = 0xffffffff8120262c RSP = 0xffff88017ff67390 16:44:35 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000500}) 16:44:35 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 486.019109] *** Guest State *** [ 486.030616] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 486.038606] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 486.041520] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 486.055959] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 486.057728] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 486.071466] CR0=0000000080050033 CR3=00000001b419f000 CR4=00000000001426e0 [ 486.074909] CR3 = 0x0000000000000000 [ 486.085922] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 486.087651] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 486.094071] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 486.112840] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 16:44:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x8}], 0x1, 0x400000000e3) dup2(r1, r0) [ 486.154517] *** Control State *** [ 486.158644] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 486.170740] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 486.185614] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.199153] EntryControls=0000d1ff ExitControls=002fefff [ 486.212481] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.229109] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 486.236604] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 486.253931] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.272063] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 486.287356] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.300878] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 486.312801] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.339181] reason=80000021 qualification=0000000000000000 [ 486.346010] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.354405] GDTR: limit=0x00000002, base=0x0000000000000000 [ 486.357810] IDTVectoring: info=00000000 errcode=00000000 [ 486.362911] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 486.376502] TSC Offset = 0xfffffefa0dd89003 [ 486.376513] EPT pointer = 0x00000001bc82e01e [ 486.387625] IDTR: limit=0x00000000, base=0x0000000060000011 [ 486.396143] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 486.404868] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 486.413139] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 486.421476] Interruptibility = 00000000 ActivityState = 00000000 [ 486.428675] *** Host State *** [ 486.432503] RIP = 0xffffffff8120262c RSP = 0xffff88014ab8f390 16:44:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000004}) [ 486.438922] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 486.470572] FSBase=00007efc1a9bd700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 486.491562] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 486.511666] CR0=0000000080050033 CR3=00000001b874d000 CR4=00000000001426f0 [ 486.517520] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 486.525030] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 486.547558] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 486.573575] *** Control State *** [ 486.582464] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 486.589611] EntryControls=0000d1ff ExitControls=002fefff [ 486.595837] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 486.608844] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 486.625853] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 486.633384] reason=80000021 qualification=0000000000000000 [ 486.640064] IDTVectoring: info=00000000 errcode=00000000 [ 486.646393] TSC Offset = 0xfffffef9d22f0f49 [ 486.651146] EPT pointer = 0x0000000185b7701e 16:44:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:36 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000007000000}) 16:44:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x101100) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/96, 0x60) r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x80000000, 0x17, 0x7fff, 0x40}, &(0x7f0000000200)=0x274) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0xffffffffffffffff}, 0x8) 16:44:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x1f4}], 0x1, 0x400000000e3) dup2(r1, r0) [ 486.804185] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x500}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) fcntl$notify(r0, 0x402, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 486.878573] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000100000}) 16:44:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:36 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:36 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000060000000}) [ 487.088865] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 487.263962] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xe00}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:37 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1d366d42, 0x301901) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x1450, 0x3ff, 0xfa7, 'queue1\x00', 0x8}) 16:44:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x1, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000200)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9, 0x2000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000180)={0x2126, 0xfff, 0x0, 0x2, 0x49}) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10000, 0xb9}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000100)={r5, 0x1}) 16:44:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 487.414959] Unknown ioctl -2145095672 [ 487.431159] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 487.436858] Unknown ioctl 1074816055 16:44:37 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 487.474494] Unknown ioctl -2145095672 16:44:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000140)={'team_slave_0\x00', 0x83b8}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:37 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xdd1, 0xfffffffffffffffd, 0x3}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 487.625703] *** Guest State *** [ 487.644451] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x8000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 487.682328] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 487.729573] CR3 = 0x0000000000000000 16:44:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xcc01}], 0x1, 0x400000000e3) dup2(r1, r0) [ 487.751180] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 487.777534] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 487.793571] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:44:37 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 487.820476] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 487.850623] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.865797] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.876198] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.905081] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.937240] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.974760] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 487.989334] GDTR: limit=0x00000002, base=0x0000000000000000 [ 488.007959] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 488.018878] IDTR: limit=0x00000000, base=0x0000000060000011 [ 488.028898] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 488.037781] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 488.046270] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 488.055006] Interruptibility = 00000000 ActivityState = 00000000 [ 488.068488] *** Host State *** [ 488.076573] RIP = 0xffffffff8120262c RSP = 0xffff8801bb087390 [ 488.085511] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 488.092960] FSBase=00007efc1a9bd700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 488.101187] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 488.108898] CR0=0000000080050033 CR3=00000001d80ea000 CR4=00000000001426f0 [ 488.118065] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 488.125532] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 488.131973] *** Control State *** [ 488.136087] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 488.143521] EntryControls=0000d1ff ExitControls=002fefff [ 488.149428] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 488.158222] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 488.165635] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 488.173990] reason=80000021 qualification=0000000000000000 [ 488.183015] IDTVectoring: info=00000000 errcode=00000000 16:44:38 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0xae, &(0x7f0000000040)="f0565ec43b8ea9f35940b014a61d9bbf993917659f32b71df87d515fdf1a04ca6ba9487559a8a1abe8c01f0136a53f0591f24cd0726115aedcf3b1edefec5371c41af62a0f363aaa0ede7c049a106fd3bc3f9af840d0db19a724a884118c8745177434ea247fd8300a77b3d4708727f4dd1f9468e31783a46dab60218998f8cd878caff357c002d4084663e4be5108d93a58c19426e4375defea3ecd37025c5540e62e3e820a7e984faafa081b04"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:38 executing program 0: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(0x0, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000001600)='/dev/midi#\x00', 0xffffffff, 0x800) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000001640)={0x9, 0x9}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200380, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001340)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001440)=0xe8) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x40, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000180)="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", 0x1000, 0xffffffffffffff74}, {&(0x7f0000001180)="14", 0x1, 0xfff}, {&(0x7f00000011c0)="cc399a47a14b5ccec5cbf89de796de08e2f7269b882f13fb5af3e49840e812e0f92ccb141de0ee71e44e3bd6a049e63298afd545b4151ddc96c23f2d817746e7dd569f20a3047ca557f4e827e60aa9f9e7d2a98bcff9a1bf79029f811848b2b87603159eedc0c6518ae7119db3df40ce878104b51da53f77e3bce9d195af16c0554e42640773fdcc6f9d34e5503a7a6e630b7b77e8691c8d6f4080d4c9585ebd9e65fc83e7713e0f2de56c82a1acf57a77c5240a97146adc3f153e90a41130764a5d3b27", 0xc4}], 0x808080, &(0x7f0000001480)={[{@quiet='quiet'}, {@creator={'creator', 0x3d, "2d13a14b"}}, {@session={'session', 0x3d, 0x8}}, {@quiet='quiet'}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@file_umask={'file_umask'}}, {@part={'part', 0x3d, 0x8}}, {@file_umask={'file_umask', 0x3d, 0x9}}, {@file_umask={'file_umask', 0x3d, 0xfff}}, {@session={'session', 0x3d, 0x10001}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/loop#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/zero\x00'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, "296c6ff3"}}, {@audit='audit'}, {@uid_eq={'uid', 0x3d, r4}}, {@dont_hash='dont_hash'}, {@dont_appraise='dont_appraise'}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x2) 16:44:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:38 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xe00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 488.188656] TSC Offset = 0xfffffef8fd9bb387 [ 488.193495] EPT pointer = 0x00000001bc99e01e [ 488.322791] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x105000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) syncfs(0xffffffffffffffff) 16:44:38 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) seccomp(0x0, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x7f, 0x8, 0x9, 0x6}, {0xffffffffffffffff, 0x401, 0x7, 0x1f}, {0x3df4, 0x8, 0x591, 0x3}, {0xbd7c, 0xffff, 0xc3, 0xff}, {0xfdb, 0x120000000000000, 0x1f, 0x2}, {0x1f, 0x3, 0x100000001, 0x5}, {0x20, 0x7f, 0x3ff, 0x1}, {0x6, 0x5, 0xcc8, 0xfd6}]}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xc100, 0x0) getsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30d) 16:44:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:38 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xe000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:38 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @loopback}}, 0x5, 0xcd, 0x0, "c77752e951e112b997226fa6759323d9603258712a45d812c595d06038cd9ce0ceaa7be73df086b8a20fd88dab0d9e1d3efe862636d39fdf302621b09e5347c608dc792bdeb2786200cadf86a047f10b"}, 0xd8) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x9, 0x8000, 0x5}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={r2, 0x401}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x7fff, @broadcast}}, 0x8, 0x4, 0x6, 0x0, 0x6}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0x7d, "5cc430546f4a9e341d86844c9bc6b41a7017856224c105408d55cdf996ed7373063b2954a213c8d6654d00fb8ba48baa4c47e0e4ab2074a12ed1f7b24b2a8d2be34aa2513fdc280591db158633f6619eb1fb2ff217b09601617001f3ed094c7591ecdf9338b24467a6b7c4a810c283fa734078628f6251181bb56799c7"}, &(0x7f0000000380)=0x85) 16:44:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000b40)="ac", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1}}], 0x1, 0x6, 0x0) 16:44:38 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video0\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x5) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x100000000000, 0x10000) r2 = dup(r1) r3 = getpid() pwritev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="ec0cd28d99faa4c700606ed0deb9d387ed0337648e7386bedd1e3db55e4156ac9b8b73e32ffdee1b1d63d3cf66392ff55c2f56d5f7f8d305f8c67a786fb8c9ca06c69cb27df5b104958438c05f5013057f36f8a0372fd0c4e3062c038cfa0761505810d976de982ac0d70a24879da4a6061d8f8ee08c098802e0c3610c118dfd145db581db0f92574fb692b674907f8c6521db0b2885e7055bec33ebcfcc9de3b031109a25191070016007d68dd20e0e5be0a730cb4702222591ae4bbecbc1332aa47e3e084b19b278", 0xc9}, {&(0x7f00000003c0)="b642903000714ead8d84e52972def74e5a", 0x11}], 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xf0, 0x2f, 0x302, 0x70bd27, 0x25dfdbff, {0x18}, [@typed={0x8, 0x2b, @u32=0x5}, @typed={0x8, 0x68, @pid=r3}, @generic="1a7111e15467d8310eb9efb31306f0973b9f6b6647a2a3904aa2d4984490d043791e2ee2b859dbb966b0796586fa89183ff0a74d9efb2208f2617e8f874a1febc526ea46e0eaabd33906852c9292339c1a2742353b341fbbdd1dc52f90c47371e1f53ae0d8a3514765d0a3b38eb9aaa610523d70993b472416f8f428edab871aa917673bb06b42d566c4a3b20a8c542a70c3ac57f3c4c1740d46974603ef449d46efb575650647363a07db1c3c5c6aaf89385fce83cbfb7d397ee4da9d015166cc844c1a8f472a785e8bf7"]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) 16:44:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 488.881896] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:38 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1000001, 0x81fd) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x100) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:38 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0xe6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') r4 = dup2(r0, r1) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0, 0x0, 0x2, {{0x1, 0x0, 0x4, 0x9, 0x200, 0xffffffffffffffaf, {0x4, 0x3, 0xd1, 0x10001, 0x2, 0x10001, 0x1, 0x7, 0x80000001, 0x100000000, 0x2, 0x0, 0x0, 0x100000001, 0x198dc3c700000000}}}}, 0xa0) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, 0x0, 0x704, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) syz_genetlink_get_family_id$fou(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 16:44:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x3, 0x100000000104) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0xff, @multicast1, 0x4e22, 0x4, 'ovf\x00', 0x6, 0x0, 0x7e}, 0x2c) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x400000000000) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000100)=0x73, 0x8) r4 = memfd_create(&(0x7f0000000040)='vmnet1\x00', 0x4) ioctl$TIOCCONS(r4, 0x541d) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xf4}, 0x8) 16:44:38 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfcffffff}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:38 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x7, 0x0, 0x7400000000000000}) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000280)={{0x4, 0x6, 0x100000001, 0x80, 'syz0\x00', 0x61f37d0d}, 0x2, 0x30, 0xc78e, r2, 0x2, 0x1, 'syz0\x00', &(0x7f0000000040)=['\x00', '/dev/bus/usb/00#/00#\x00'], 0x16, [], [0xfffffffffffffffc, 0x1, 0x2, 0x99f5]}) [ 489.180772] device lo left promiscuous mode [ 489.186480] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 489.235028] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 16:44:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0496c7ec89e89a784300000000f60cf4d6065d03b88bd6fb0200005ee330f30e00775411b8d92e30cfffbd31687632be7767d79a633689d9f7866374d21bc8c92d902d1bc5e20d84954e2bdbb668f8e67a078664c918be54c67cd8a0b25e31664e7b22425f18447655823a0f2a7defd621038efc813e67eb067515ff9ca8419f37bd80734b2246cdb0d304ede9e16886493a9e9d59704e0daf652059317b09bbc32be0acb92d1201daf3747f1b7923252940f48f"], 0x1c}}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000340)={r4, 0x3}, &(0x7f0000000380)=0x8) write$FUSE_IOCTL(r3, &(0x7f00000001c0)={0x20, 0xfffffffffffffffe, 0x4, {0x1000, 0x4, 0x37, 0x2}}, 0x20) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/154) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x10000, 0xe31, 0x1}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) [ 489.291774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 489.323484] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:39 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000), 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 489.355429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 489.394004] device team0 left promiscuous mode 16:44:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfe800000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 489.412090] device team_slave_0 left promiscuous mode [ 489.432529] device team_slave_1 left promiscuous mode 16:44:39 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_CLR_FD(r0, 0x4c01) 16:44:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:40 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c125f85719070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) sendmsg$netlink(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)={0x10}, 0x10}], 0x1}, 0x0) 16:44:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x80300) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3f00}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:40 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 490.268302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:44:40 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x48ef) 16:44:40 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b7020000ff000000bfa30000000000000703000000feffff7a0af0fffcffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70300000000001f6a0a00fe000000008500000026000000b7000000708900009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="161e204adea02201c58aede536d5", 0x0, 0x8000000000004000}, 0x28) 16:44:40 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) fanotify_mark(r1, 0x9, 0xa, r0, &(0x7f0000000040)='./file0\x00') 16:44:40 executing program 2: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) write$P9_RSTATFS(r3, &(0x7f0000000280)={0x43}, 0x43) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) getresgid(0x0, &(0x7f00000001c0), 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 16:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xe}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:40 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x47b, 0x40) lsetxattr$security_selinux(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0) execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 16:44:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x24, &(0x7f0000000100), 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:40 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xcc, &(0x7f0000000080)="8cfac2f63d6983f8db0ab084d336d7abc2b2fcb6768c9601a15409e9c28041ce770dc5f85573ea39c1f8ad7070ede5c6deb2cde12c20fa2e58cd7369d93d", 0x3e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 16:44:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x4c54}) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 16:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x240}], 0x1, 0x400000000e3) dup2(r1, r0) [ 490.893242] device bridge_slave_1 left promiscuous mode [ 490.898841] bridge0: port 2(bridge_slave_1) entered disabled state 16:44:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4002000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 490.978205] device bridge_slave_0 left promiscuous mode 16:44:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000080)=[0x6, 0x7, 0x9, 0x73ef8, 0x7ff], 0x5, 0xd7, 0x6c, 0x5, 0xffffffffffff8000, 0x5, {0x0, 0x9, 0x0, 0x4, 0x80, 0x8, 0x0, 0x8, 0x7ff, 0x2, 0x6, 0x1, 0x101, 0x0, "49b789bb629f1f7bf7f0af67313fc1839c3193060741eeb832e967548ef7b4cf"}}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 491.025845] bridge0: port 1(bridge_slave_0) entered disabled state 16:44:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 491.197024] IPVS: ftp: loaded support on port[0] = 21 [ 491.213514] team0 (unregistering): Port device team_slave_1 removed [ 491.281149] team0 (unregistering): Port device team_slave_0 removed [ 491.320550] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.350148] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.391003] bond0 (unregistering): Released all slaves [ 492.328563] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.335149] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.343038] device bridge_slave_0 entered promiscuous mode [ 492.392045] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.398720] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.406653] device bridge_slave_1 entered promiscuous mode [ 492.454423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 492.503113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 492.646345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 492.696889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.923631] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 492.931080] team0: Port device team_slave_0 added [ 492.976792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 492.984347] team0: Port device team_slave_1 added [ 493.020356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.049392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.077589] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 493.084769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.094407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.123213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 493.130226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.138598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.401897] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.408311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.415014] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.421368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.429260] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 493.442367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.398721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.494054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 494.586818] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 494.593241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.601060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.694734] 8021q: adding VLAN 0 to HW filter on device team0 16:44:45 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{}, 0x1f, 0x2, 0x800}, {{r3, r4/1000+30000}, 0x15, 0xffffffff80000000, 0x7f}], 0x30) 16:44:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfe80000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:45 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) memfd_create(0x0, 0x0) [ 495.337894] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 495.349174] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:45 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x10001, 0x80) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x1d, 0x4) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000140)=""/79) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) [ 495.494368] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xa00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:45 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) 16:44:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 16:44:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0xfffffffffffffff9) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 495.691556] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000140)="74088c00b1bdc747e867f2c0fcd102d58577064c84863ca92227bb7de446367e9a682b1257ebb0c3cd39b3609bbdedec34fa51538050d12a303d62187425a87bd6fcc39652f4be94c25322ec9fd07e26f3cfa0a117dae2427b30851acab42a2c9e919daec564b3c9525ba27e37f1e05fbb9a843adb54334942777f05da6a84e4b2d27d6c437160b94d44f18b0666758bb328ce5abda0b633cfe587ba34ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 495.759557] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r0, 0x0, 0x17, &(0x7f0000000540)='cgroup(.wlan1:security\x00'}, 0x30) sendmsg$nl_generic(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x37c, 0x3e, 0x100, 0x7, 0x25dfdbff, {0xb}, [@typed={0x14, 0x65, @ipv6=@remote}, @generic="79d46fe56817faa026f723e4663e89ba09aa84229ff4d7a574ee26dceac9993aee97c85fae6734d605378ac0ddf1611a07d98dac4cadd646a7d734f1d2d3c9d685a7ef0eb7e138f45d491cafdc39736bd3896cdea2211b71aa6a572b2c0b149192e28af8aadec7a4e1840fa99e7c", @nested={0x218, 0x27, [@generic="152d0fff796d4b30a16e48e1037864746fd0de819ef2897abe3f34665ab49c8caabdf72d459655b5ac8609fe00d71cf5eb1dc31328a4f04475b90656434c3ccc4c439db02f28af41bf4692b3aa5af209cc45b8a920fab460304e429bbb16b8d7e5a273492a77953e95839166825537bcaafeea4c08e639ed7ca6050e406a05fe58817c77bd3ebaacd239176198cd15dbba9977f679f53a87f54d33c1faa051651fd2ecb9e381eac63921894783c54c88aa2b8a3a78c458ba4945073743eee682f5624145e05262f075d110e0ef39b47c101558d8744c3811ed24a9dcf98486ce973f9cb6af6b41e8e2aa9c181d429ad3", @generic="4229a73062df5e3dabc4ba5096ab58b838ba3921f000a50f56b212e77d28a9b15720180203f8af2bd89867b7f0bf062235d49e4d35d912a83c3b8c47bce5aa77b532fa9f9e6f96dcc283335fe7af60568d0eb16e571f5480475147f773bf0c691995d89988fe7bc1df1107", @typed={0x8, 0x45, @uid=r1}, @generic="60ce8f9eaf36de3e3801df7dcbf29a0dace0f391e34c0e5b633419632124833f4f4fd016e526f96d7e653aa784b271946b7063c65d96b5cf00b039dc4823e60afc58001eddb0e318d1081efd16c76df9a00fbf0ea438f3b0c56fbd60299c239281d7a33d5b3583d2ace332a028e8c4d0d41c69ed0c20f9a660348de1dcba501006431f849d56ee59daf206deca143442e24f7a2e870c72bf1148e66e9dd7ebb72de703b951", @typed={0xc, 0x32, @u64=0x7}]}, @typed={0x8, 0x17, @uid=r2}, @nested={0x3c, 0x14, [@typed={0x8, 0x2e, @ipv4=@local}, @typed={0x8, 0x52, @fd=r0}, @typed={0x8, 0x7a, @pid=r3}, @typed={0xc, 0x76, @u64=0x3ff}, @typed={0xc, 0x5f, @u64=0x100}, @typed={0x8, 0x3c, @ipv4=@multicast2}]}, @generic="f5c74d2daa24484969d0dfdf4795efce5fda8a695f3414ab1cc7fdecff0bf59aa31bd6ad63a60d189020b0b0ef7f1c909a41fdbc6097b35dd6d32bfdc7e76b28ee5caabf70258288bff9dadd274bfac7036502d4d652ccc9af2790671e32ad5023d14b7731c8d17090c9", @generic="74385b40adb8dbf0e16314cfa9c9f38237", @typed={0xc, 0x93, @u64=0x9}]}, 0x37c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) clone(0x800000f5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0xa0, 0x74ce, {"595a342dcf3a1d673bde3a464b75f2500f98d10a7c65180fe41cc65a7959423a6bae302977404117819470dd515d62cd41c1a03ed6c0f1ea97a0036ce9aff8358450e4c54b8862c885620aa891dc471e43840e9ec79021df6dc7a404273db1e76262434497b87b04087bfcab972f7c90875f2d97144ed8e7b45ee320d8cb8601ba3c9449239bec"}}, {0x0, "0e8e810e4e9a37948347219e94b8c70dbd90b6633f8c4b97525753ff5bab5e536807d431921f5900b9bd05b40948bae956b9853288cab97439cafb88c967dadfc741fb04ab37f3c0257be4a870d9bdbb7b4d5e5ccede25e09ac7cf331b6d2ef39924701fb351afb97e6c9f337675b71f8513fa4b3a66f38bdf54ebf8f843"}}, &(0x7f0000000140)=""/244, 0x120, 0xf4, 0x1}, 0x20) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16:44:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x800000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) r2 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000400)={'ipvs\x00'}, &(0x7f0000000440)=0x1e) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x5, 0x400000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000280)={{0x4, 0x4, 0x2, 0x1, 'syz0\x00', 0x89}, 0x0, 0x30000000, 0x2b64, r4, 0x5, 0x1, 'syz0\x00', &(0x7f0000000200)=['/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/loop#\x00', '/dev/bus/usb/00#/00#\x00'], 0x5f, [], [0x2, 0x5, 0x3, 0x401]}) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3ff, 0x40000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="05060a004a6b037a1f04eb4d16efea5420cfcb333677798dbdd487b5c1f80e0f4ec861271258e915a81872075e35e31026af655cd719924d2c6c4cb0a96236d3fea12ebd1a41b3137c8fb10f6917e5ff21c4234c45c8bed991450bc691df6b46b2217b0bab372ca565fe983cecb280f28659dc74f0ede6cf73965d734e2fe8d9b1fbd165a2d6289932ad44165d06f4726472f35fea3f660d6ec73ff01f9deaef54e479cf1feb54cc6d96b15369de755a627a242c06b80730d01cf7323a947fb9248c739288cefb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x18) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) recvfrom$llc(r5, &(0x7f0000000480)=""/172, 0xac, 0x40, &(0x7f0000000540)={0x1a, 0x309, 0x2, 0x1, 0x800000, 0x0, @broadcast}, 0x10) 16:44:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pwritev(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000003c0)=0x8) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b) sendto$inet(r4, &(0x7f00000003c0), 0x0, 0x404c0c0, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4) sendto$inet(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) [ 496.016580] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 496.114946] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfc000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x1000, {{0xa, 0x4e20, 0x4, @loopback, 0x8}}}, 0x88) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x79f, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="2b6dce019b1ed56f015c2c52afdce507512154213bd1ee36fe40b5828e49a169e8f11c43735c381ffa3f5c3b6bcd4235ebd4281c347333676b57a7afc8edd312217b913c88ef2f46a0c60dc26870a481d5fc6893a3291915a7896ba13c2d170a94cffb78a7414986563fb1941eb4c42408efbe7ea5a222f9478a1616dae574505829a220ce2d5f93bd4c5e6894aaa272fd7aa8deb643a217a2eb35ff959e9876d7c8331573fa1b013fe59738fa3e6ccc6e8c296faea79c1a9164e4f262a3514b457e0e44ad5fbe417b29cc38", 0xcc, 0x100000001}, {&(0x7f0000000300)="f6b2b4ddbd031836f759bd66b8bd7c0b0a93e4d8404b657c5bac17d618f08e7a585a377638c603699c705e81ab62c35f0d6a5c37063e87b0fdbee9a8ddb01c5e36363594221bbc8b74fbda82d9754f0e87d5f83b58d67f6fa1d4b449335c20bd9260246c112e47908c9c0d68224ba1aaf148bb1c2d4fb5bf16b6343934d37a523007a24dfefbf1d28f1f0adead16fbe1cf9665c651eba2753bcf46c8af11ae8b23d1fa95c05696934078e7714db77c5836e82dbfd96a815d8c07f073c3cf872c7a658b39224bf7", 0xc7, 0x1}], 0x82, &(0x7f0000000440)=')\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:46 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ustat(0x9b6, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) setpriority(0x2, r2, 0x2) 16:44:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) 16:44:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 496.327927] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 496.373769] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:46 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x20, 0x8, 0xfffffffffffff000}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r1}, &(0x7f0000000140)=0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xf5ffffff}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:46 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:46 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:44:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:46 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 496.673760] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = getuid() fstat(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x2, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x1000, 0x7}, {&(0x7f0000001200)="a6668d310f69364db9029cf45e731bae3db045311c64fb2db0d005cfe01353138d2c9b00dc67de89c6e56a863c7bf1d44350acadf1b5ac86b07884f2b1e55a297e006697e15c730d552307829d1527c5b952f4022ca1f15ccad542e0dac27e2030e5a23ab873b688dc7c81232c17eec9b1dba8c74e672e56bc3bb7a9dfd0534e8ce707333796966c7087f2f93a5954f01307665eb78253eff146769e8db339cf1fa9d235b8ce21ceaea1329574cbe58fb24878304181c4231fd1aa328b76f11184ae1a93fc76c5b2d1795417b4d23593d59f448a86fa1b21ee6354b0b5cc3b685897d128c9587d874bd1e71242f3", 0xee, 0x8}], 0x1020, &(0x7f0000001440)={[{@disable_sparse_no='disable_sparse=no'}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_remount='errors=remount-ro'}, {@errors_remount='errors=remount-ro'}, {@errors_remount='errors=remount-ro'}, {@case_sensitive_no='case_sensitive=no'}, {@nls={'nls', 0x3d, 'iso8859-5'}}, {@errors_recover='errors=recover'}], [{@uid_eq={'uid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@appraise='appraise'}, {@measure='measure'}, {@uid_lt={'uid<', r2}}, {@fowner_gt={'fowner>', r3}}]}) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x80000) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) openat$userio(0xffffffffffffff9c, &(0x7f0000001580)='/dev/userio\x00', 0x200000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x7, 0x1, 0x5, 0x0, 0x0, [{r0, 0x0, 0xe6d}, {r5, 0x0, 0x6a}, {r5, 0x0, 0x1}, {r5, 0x0, 0x7}, {r5, 0x0, 0x2}]}) 16:44:46 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001dfa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000040)={0x20124, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) poll(&(0x7f0000000080)=[{r0, 0x1000}, {r0, 0x202}, {r0, 0x1100}, {r0, 0x4000}, {r1, 0x2}], 0x5, 0x9) 16:44:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x4048000) sendto$inet(r0, &(0x7f0000000000)="cf", 0x1, 0x40000cb, 0x0, 0x0) 16:44:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xa}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/181) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) [ 496.863919] vhci_hcd: default hub control req: 2401 v0002 i0004 l0 16:44:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 496.925035] vhci_hcd: default hub control req: 2401 v0002 i0004 l0 16:44:46 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:46 executing program 0: bind(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 16:44:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:46 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x505001) pwritev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="095836d01d0eab55f6212144bdf8322bbbf6ccdcfd3f6e9d8e2b0af8853505c6bac04a160f666d7f8c033561d3a9b27ae8973d7987dc4c76bf05bcf510a58b22ba80efdf76b186c66e0bb4208d803729045354e26bfcf12be519713ebfdc40f0f2aa80282487596198331afd5caa0b054dfc61889b03d0823b1f203230c4d9d7ce4b89df9ebe3b2bb83da5", 0x8b}, {&(0x7f0000000180)="ef50c65f320ea92e1d6a8b39b9a56403b9ad7b38320fbfaa600bf85fb591a83ee6b35b2a6ce111c0e6db9cf21bc163d12399aa7858bccf28db4112bd25ccf2028baeb497906a49e04cd60bb019c212b05dde2e5d819d0febcd8fc671e052cfb7095bdd7b03343ff3c40ecccdd3de85c67be330371bb7e41b9434f64b727c986d50fc4d877967b6c04863", 0x8a}, {&(0x7f0000000240)="fec03f1c5f43a9bf7eb8a607bc05bc81c6333ddfe4970e0fd6fd169aa415226fa6e8c6a2edd43c885081ee3a04f812f4ae3c874418d5f4500e8948e73e948fda62c2bf15acf5e9e2072ae32d33adaa3d900f6a0ecc67e3bc04d63e1b56d85de5ec77b0c1c0d7828f3628e08e577c56400f9684748fa409b3e27770e6048335c5f0bd0d9c3244f3240281b13d99d689a84835d68be039fe49060331022270ae28d9900bcb3f616546a5d3", 0xaa}, {&(0x7f0000000300)="e9cc09cb1eb88338241dc1247fa76c3a275ca8a19daca2ba2aa0d11f981ab7092f21694288cb5e71480d9849c1a6ffb395adba6b48a41df3d9172636e90b2680ddd52d080dc0fed88dae56fd6108c9552c126d6f37660e94792aa4beb3b0641af4c4d9f0d563f2880d9c69fd9f57b7cc16a614b4dddd3500", 0x78}, {&(0x7f0000000380)="9b032b87f46a9e842e9f2ee1b242d1ceafe28843941aaad51f1e5e124d710cc56d1d359edd60b6d4985bf5ebd0a2c1c6e0469881bb5eb7a2c2c51531c98db2f9cb6b44bea7590dbeb995292baa", 0x4d}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="89f7e205e8d4cac9b4a67f3716ffe6e0667d054d794f6050e788d8f93a7c235fa272727b3ccbe4eb9a181286a12b8a68a000732ca68bcef0d7d7d333422e6147befdaca9b36af83b762334455ce89ccbf916c237facb5cd81995be0386345b379074d0c9bf565a3ebd04dbc8be415d3d5f302c8b4f5accec31fca4d123b2d8f4812189f74422a63b24cf6e756eb9de64ebcc03c249d08f7cc4b4485e", 0x9c}, {&(0x7f00000005c0)="120ae9cd92767138bbf37c0c147d3e63fd292e08560ab59134510fb8ffa48a2e7ed9fb1fe9207d2cf862418889da1329a1f96b98b5481829ee478acaf3f3a0bf405beabb93cde94d4dfc5ed39c02d58b7aa8282b917f8d2b64fb89f7c90062cbe35fdfd63f1a6c2d8c945bb435a5b91625388c2369f953724ef753d560e959d1b48f480649e294fa357006e6eb47ab89e9ccbfa810599d81b883f60dfd5744ed5149e799f4e8044371b39dec04fdcfe05b1229416b510d78b6f40b4d60efb4fd98e30d8b1984", 0xc6}, {&(0x7f00000006c0)="29ceb7653395c745612572061ecf8db0902ef9126944db33cd5ea30aaf02a2945456716b4fae6bff610f7d1b919aac53bfa76c7e8eaa7ccc46947052c8e0da8eb653acd8b0ec2cc473eda4a0b8ef3d808a1e08097e969a137777e48d994d9f5802975131d94e054cd6cd1dd1e134c86a5b0c6fe001f85923d9f13c7f78bc12c07f21ba249c43862a6781260670e03b2cad6d21e75f2edf21684728b2024a9cb2519cbc39eae6f105", 0xa8}], 0x9, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x200000000004, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x100) [ 497.116184] *** Guest State *** [ 497.131922] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 497.175647] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 497.189226] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:47 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000080)={0x5, 0x2, 0x901, 0x8, 0x91f8, 0x5ed0, 0x2}) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460013025e070000000000000003000700610a00004d000000000000004000000000000000bf020000000000000000000001803800010020000600030007000000000001000300000000000000000000000100000003000000000000000001000000000000070000000000000008000000000000003433be92d61c836c3a960d7362ddff265be28bf08d4b1b8f65cc0a3653e9a9dc286d84b7278d9a3b791e55affe5410707c0b2fd27553d03240828e7177803f6d65d7d3dfee3e2f929409689659346a95de5f6ea4f520a0d066f1f6927450"], 0xd6) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x1000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 497.225940] CR3 = 0x0000000000000000 [ 497.241339] RSP = 0x0000000000000000 RIP = 0x0000000000000000 16:44:47 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 'bridge_slave_0\x00'}) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 16:44:47 executing program 0: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 497.270045] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 497.284302] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 497.329087] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.369659] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.405212] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.420187] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.432355] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.440941] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.449946] GDTR: limit=0x00000002, base=0x0000000000000000 [ 497.475828] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 497.497358] IDTR: limit=0x00000000, base=0x0000000060000011 [ 497.511690] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 497.520934] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 497.530649] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 497.538337] Interruptibility = 00000000 ActivityState = 00000000 [ 497.545274] *** Host State *** [ 497.548718] RIP = 0xffffffff8120262c RSP = 0xffff8801b515f390 [ 497.555461] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 497.572951] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 497.581892] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 497.591078] CR0=0000000080050033 CR3=00000001bfc2f000 CR4=00000000001426e0 [ 497.599751] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 497.607281] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 497.613465] *** Control State *** [ 497.616959] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 497.626156] EntryControls=0000d1ff ExitControls=002fefff [ 497.631983] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 497.640701] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 497.647599] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 497.654438] reason=80000021 qualification=0000000000000000 [ 497.660872] IDTVectoring: info=00000000 errcode=00000000 [ 497.666576] TSC Offset = 0xfffffef3dfe98aa6 [ 497.671022] EPT pointer = 0x00000001856fe01e 16:44:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:47 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000080)={0x2c, ""/44}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:47 executing program 0: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 16:44:47 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0xffffffffffffffff, 0x100000000000, 0x0, 0x1, 0xa3}, 0x1000000000000b9, 0x7, 0xfffffffffffffff9}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0xfffffffffffffffe) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x200000000002018, 0x4, 0xc, 0x81, 0x87, 0x7400000000000000}) [ 497.755428] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:47 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfc00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 497.847682] *** Guest State *** 16:44:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340), 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pwritev(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000003c0)=0x8) r4 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b) sendto$inet(r4, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4) sendto$inet(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000480)={0x0, {{0x2, 0x0, @broadcast}}}, 0x90) 16:44:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0xad09) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x401) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x10200, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000140)={0xffffffffffffff01, {0x2, 0x1f, 0x4, 0x9, 0x0, 0x9}}) [ 497.874192] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:47 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', 0x1000}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) getgroups(0x6, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) write$FUSE_ENTRY(r0, &(0x7f00000002c0)={0x90, 0x0, 0x1, {0x0, 0x2, 0x2, 0xdb, 0x9, 0x9, {0x6, 0x3, 0xfffffffffffffdb1, 0x6, 0x1, 0xffff, 0x100, 0x3, 0xd5, 0x0, 0x401, r2, r3, 0x9, 0x4b8d}}}, 0x90) [ 497.919897] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 497.960570] CR3 = 0x0000000000000000 [ 497.975619] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 498.010172] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 498.033091] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 498.051792] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.113145] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.120337] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 498.133550] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 498.144141] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.152758] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.161153] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.170930] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.180001] GDTR: limit=0x00000002, base=0x0000000000000000 [ 498.188095] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.196538] IDTR: limit=0x00000000, base=0x0000000060000011 [ 498.205017] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 498.215402] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 498.222357] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 498.230113] Interruptibility = 00000000 ActivityState = 00000000 [ 498.242381] *** Host State *** [ 498.246003] RIP = 0xffffffff8120262c RSP = 0xffff8801c1967390 [ 498.252511] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 498.259273] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 498.267776] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 498.274417] CR0=0000000080050033 CR3=00000001bfc2f000 CR4=00000000001426e0 [ 498.281508] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 498.288264] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 498.294400] *** Control State *** [ 498.297977] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 498.304872] EntryControls=0000d1ff ExitControls=002fefff 16:44:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x84, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x9000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:48 executing program 0: r0 = syz_open_dev$midi(0x0, 0x99, 0x2201c0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0xfa}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x80000000, 0x0, 0x5, 0x1d, 0x0, "7a54169c995a00d77162631a4acce4ca08dc74836851536fab74c7713532987b2dc2d65c500f65dff32e0e34811e9ece4c99be0ac228a402907390adaee93d62", "8a2f279b5a221f8712daa0d8606f7bab5e464ee7afbbd9109735783ae8f7f2ac2b791b72a9f271297e7fd4350dfb18f1cbf37fb8e65472d7206a15745a6db0e8", "ae184b3e2cae57079e7daf7b054fb6f9881462cf0f0bab9ecf14c003956a10da"}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x80, 0x0, 0x10, &(0x7f0000ffd000/0x1000)=nil, 0x9}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0), 0x14) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x67, 0x2}, 0x14) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x2) fsetxattr$security_smack_entry(r1, &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='/dev/mixer\x00', 0xb, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000380)={0x2, 0x20, 0x7, 0x4, 0xffff, 0x4}) move_pages(0x0, 0x5, &(0x7f0000000080)=[&(0x7f0000df0000/0x3000)=nil, &(0x7f0000df1000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000df3000/0x3000)=nil, &(0x7f0000def000/0x2000)=nil], &(0x7f0000000180)=[0x0], 0x0, 0x4) 16:44:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:48 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 498.310506] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 498.317664] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 498.324497] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 498.331127] reason=80000021 qualification=0000000000000000 [ 498.337652] IDTVectoring: info=00000000 errcode=00000000 [ 498.343474] TSC Offset = 0xfffffef374dac1cb [ 498.347887] EPT pointer = 0x00000001d2cb801e 16:44:48 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x8dffffff}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) [ 498.431926] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/130) 16:44:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 498.617820] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) write$P9_RGETLOCK(r2, &(0x7f0000000180)={0x29, 0x37, 0x2, {0x1, 0x3f, 0x2, r3, 0xb, '/dev/loop#\x00'}}, 0x29) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000100)={{0x3, 0x2, 0x401, 0x3, 0x1}, 0x1, 0xfffffffffffffffe}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 498.687463] *** Guest State *** [ 498.691000] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4}], 0x1, 0x400000000e3) dup2(r1, r0) [ 498.747093] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 498.817016] CR3 = 0x0000000000000000 [ 498.827948] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 498.838102] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 498.851539] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:44:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:48 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) readahead(r0, 0x1dc6, 0x240) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x6, 0x0, 0x9, 0x34}, 0x6) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x979281250e9d6202) [ 498.872584] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.880940] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.937844] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.946728] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.956585] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.969611] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 498.980332] GDTR: limit=0x00000002, base=0x0000000000000000 [ 498.990717] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 499.020730] IDTR: limit=0x00000000, base=0x0000000060000011 [ 499.034534] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 499.034673] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 499.054400] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 499.061250] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 499.071809] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 499.080073] Interruptibility = 00000000 ActivityState = 00000000 [ 499.091904] *** Host State *** [ 499.096046] RIP = 0xffffffff8120262c RSP = 0xffff88017c467390 [ 499.104540] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 499.111476] FSBase=00007f8d18a0a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 499.121831] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 499.128765] CR0=0000000080050033 CR3=000000017ac22000 CR4=00000000001426e0 [ 499.136653] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 499.154897] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 499.166039] *** Control State *** [ 499.174683] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 499.186680] EntryControls=0000d1ff ExitControls=002fefff [ 499.193129] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 499.200554] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 499.208319] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 499.215744] reason=80000021 qualification=0000000000000000 [ 499.223506] IDTVectoring: info=00000000 errcode=00000000 [ 499.229204] TSC Offset = 0xfffffef30f5a7ca9 [ 499.237881] EPT pointer = 0x00000001cbe4e01e 16:44:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 16:44:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x48}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000005ffc)=0x2, 0x4) 16:44:49 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2080830, &(0x7f0000000400)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@fscache='fscache'}, {@privport='privport'}, {@privport='privport'}, {@version_L='version=9p2000.L'}], [{@euid_gt={'euid>', r1}}, {@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r2}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@seclabel='seclabel'}]}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x1, 0x400000000003) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 499.367857] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16:44:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x100000001, 0x4000) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:50 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x820121, 0x72, 0x3cc19e95, 0x80000000, 0x1000003, 0x7400000000000000}) 16:44:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000005ffc)=0x2, 0x4) 16:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfec00000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 16:44:50 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffffe, 0x3) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfc00}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:50 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)) 16:44:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc), 0x4) 16:44:50 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 501.052916] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 501.138437] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16:44:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x7}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 16:44:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc), 0x4) 16:44:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x440000, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x21, @broadcast, 0x4e22, 0x2, 'fo\x00', 0x10, 0x3, 0x75}, {@loopback, 0x4e24, 0x2004, 0x4, 0x9}}, 0x44) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'io'}, {0x2b, 'io'}, {0x2d, 'rdma'}]}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x8, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000005ffc), 0x4) 16:44:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000000000000050000000000000002e4ffffffffffffff000000"]) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 502.459469] vhci_hcd: default hub control req: 0800 v0000 i0004 l0 [ 502.488570] vhci_hcd: default hub control req: 0800 v0000 i0004 l0 [ 502.516725] *** Guest State *** [ 502.534856] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:44:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x700000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:52 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) [ 502.570147] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 502.634091] CR3 = 0x0000000000000000 [ 502.652423] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 502.673115] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:44:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x4, 0x200) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="a2c3baef1b4600738af17e6cdfb5ff", 0xf}, {&(0x7f0000000140)="1467593a2c3369a4bc50a15cdef48a09998e39ccde855816c699bdafd433993859593ffb5df0e55ffd8267b824142b9e3f7228b4b112c7d941de748b36680ffde58accbbe1be3f0959835a1cd8efad8d61de19b545b8a144e1e3324332290466b6b07bab681879acb34d1c01e0d3c452248170af3afe8d8faca6ca4da01f1dba638254ae3b338d600c341dcbdfbab0ad8c34780edc08ba1a488568e79eb9d74127ed881f26f250d39a5c80409b12f08f7653b4726b72a1847a1ac51afc915f1cf17958e9dffb9f6fb0a708a0060915a5770d3f85bdd20047702482aa226f5818a2dcdd4328bb80ff8d81c89eb8fa843455047deba2cd9181f9e9e74b048ce81ce69b50a3781485cf146cf98c850fd80435aedf7111c3718f3448f56f0026984a4fbefdfec5938a66bcd7ea1857c1acb7344241dfdf5895dbd55caae56a8fe2acd2149fe4e53b3673f5731b0eee51800315d49a692621806a693e7ea570942dcc6401eaf8e08bae05121657811b22ce1bbfe337ff267321ccea2c575b00219ff316795ded13fd5711fdcff88c706d02e0963c0d1c838cb9700c57095150a378d92b04858434ebaa1302f6389f729947fe0839a5ab6ed797e5be16b27de176428536bf633c8818167be4aa972b4592808a3e92a968b806c41d28857494562e3062563b0e73459376827c6f5c02b20ff0dd2cde508d0d8ef6181dda946aa10da6560b2d909246366af8c1c4de3fd4acb6e2512d17f5b2d38f193a3eca667482cd63a594a8866809c2f8de77d6e6db56bfd8c7cece54b4c3a6d9c020a593d7251e26171e734bfb5c070126aa798df50d529d9bed5b9f58702db4dfd5281ac97310946b6f0ec79c8fc63cba0a9a5c9afb9ec75a9ecec87e39a1759ecfc62cb5b55a2874ffdf94ef0bd31f4e51e57c6f2cc0df663e2e0effdad699f0725a2ef5806be86b63f8eedac29613f36674e240fd30d9b845baca3dd62f8cf634396bc87700feae83e40dc4e7844a33db179250a5c86706a66e9d3b16a7c322aff7374b634de30c9241e59b4667d1514551534f06dcbd97ce49ea7c00adbe07e457fbbb895017cbb4fd777f5e6291749e1b2f7c929c1da9bf9ffb05e8bbe41387dfdad133c9a75caa17f6f052433fc142ded0708a274471e41965586951321c6021f855336e62b4a412f70f35c3335a88bf5d8d5b59742a940915198ddd01eb0df67e1add293838ec90d3b3dd3f4220d862ae29a27745434ae01f8a0e1ffa84b07a9a823246ee85589c935c099f5d4c89e81eee626c8e6ab6debeed85e7a87bf937500b52d992f30623134a354dcc0c0b804880758381bc05cc1e105b2cff51710ce4776ec994dba23e9a56ebdb42a34eb5558d9792bfe2e5830b81e5b36e778b3618b4ef99dfe16394819a9328a5921b3b68a54d43e32019afc47255b673285b97a2f6c8e007c21c537ed62613afb54083ca950388595171606b4f174420a7271bfca6be17d3dc0cfc28141b649f8eaab3246d51be073a0612d0fdb56f6cc535d734ffa0ec7e7f7f575ff9cfebcda17963d30745119a4005312085054de10eeff2616a34b164a1ba27504c83869fc6c94dca2ad1c07b6550e143a743f77980ea3fd630f6051dd9ecd149294c06fd715a9655f1420b0dbc54ac515602e2607ef21cbf430d8884acde01da1bf5860d53f5872c5d5df0747f4fa67b8478e92da1352649bc900aeff0cacc69aed697e709eccea6e015362432a96abcd4f7617a11697b6a0be8bf07bec17a7217540502c05d07a64474ce001e0f72935c702c1817ec4931e91135ae4618088a870868aada9c3ed89f27a2984d7ce7905406b20ae4eeab4c41950236dd367f2453d36278fcbfba6ca16f251d794aaa373ebbde874e86e2fe87ba35ca997bebae166586c1b11789263bdb5d844dc96ad45fa78ef2b2f9741f5d585ddd4f3d7db17ee797c27f291f6ff307515b2441b62c3807689a27a5a41efef3781d257d46d295eb83b8bc5ebbaf60583b7701f2522ab37a7e235e9353eb8960a4c0b2cf4bbb8619363de93d4faa1a9d81b318b6f41a68f9f6721b4a74a20a8795296010235a59c3ba0a0604e34feb34d64e3ad1ea5677ced11c97848651d82604bb7dcf3cc6c57355ae04fa886acc78762abd9d8068f7fefd81fbf7ad12f81d06c2064123bdc9a93c39239735caa76d92f1b4133718e5b307b91be681b54669bb7d3b8b173d7c30485659994438e3d455e41c6041010a0741d90333d76e5c3b4e07810dcc44ca676070a28aef884ccb9e55e448405d03ccd9ae1d49b980ee1ce31fa1a04741fb7357433236c30922e5b2af4eafa9ccc8c2083ee99b26c52d0ada2d682169cb479ca7f644daca1270bdfbb323374d4488055748ed9393ba504dd7bbf659524bf99e48209cc1675a319bfbe5c5e4efd0c1d3fa442ddc9fbadecc02236e3f06409eee98bc3c69159e73ca02fb794253cb9d513d3af446da1446f151af3b0b1b13a37ecc43772dd97893e434c10f292093c8a8d3d3a020b9cb7755fc2308bf779b5d7e0c517682240b70e9928612acbda735b3d7de6e49e1f15ab25c83bc817ce6ee7c9b11a5ea8c61cb7c8dee26a547eb35ddab5abfd5045020a2db13a697d35956100902370bd91ce32b3b6c16f4a128b5f77f785cebbcd89a817ae56eecd2c7666c76b34b5b2158a790b5309c88309c47ae7e3b32de82059f251c8fe5ced4fd9f2a3a05fda307c835532854781258a8862523f57d27d952cca587942f0ee563aa0ec6086077bacf96aed12484612db1f28891fb1911e0c5b38f784a2343956eb858957a6e4c4b92c12f272764256c3e480688c062e0871492ebe72878bf15e9b62009fa99b0f53b6d826852a28d35ce8e21a12ad6ca1963d838a4e6905be5a6adffe5bc11f0cad469f90915d9fdd9df9554f1289cea242e920612f3963606176bf0bddee25199cd2530009655a6d8f4b4bf9932962c3b6588cf380bbd626c0c5e8a8caf54483fd1c997cd99b126ffcb58549104f9e41ed239e9ee42ae3ab26ad2f130a31092b663452c732ef8a605b87b6d259299cc1067c2630ef0bbb3c6accc9004d8d4771765d9f40a38f026cfdf04e1043e38d5126403845ba9624556230fe796c5806cb0251e6bfa6cdd6f6ce93083bde45219f7a9eb7acd72c4cca2282549cbc431dc1a03ab653ec7facd0f5e31c1977e159412799c9c5d9048cef0b3dbf0fdcd9a2df2f7d18e9f0a5fc6049eee0d69f78d2d6b4588443e5fabf4d92e6dd7413dec3e254bfed31e6acb802ca679a7431398b0aaa8a16c1d7855df3d78ce2e102d91b18997f995018b36ea01a468a92ab224bd65e0bf77e03ca170ba7b73800210606fa5cf49bc904834ddf635b5325e2cd00e13b726c5bad65829c25c4a65a508861ef08ebbcc7001ee6ce2e71eaad09fecf2841015a2b02faf758cf334167fcb7c262edbe450513495039ffb8a78ebc3add9c73808b508b0cfc48025ef0ee33b4911f1f5903ff1719e046d0b1b8f5ff3b13c454aa698506958b037d255a636083f73729e3aa0ab6afbf568ead6a385fea2b4e1ba29c7f52395cfcaaf896bc695221d5c47cdc4f0d5a2a17777d9ffe67af57380bf9c5922cf194529aeacb516c96e48fc01f45a68c3c1d9a6cbb6fed25b4ecd04d8da761e41ad61efe4ff0f22b25fe3426cd8c893819ec11e867e57ee730e19c51c83e0bd7a4b4cd4b8c472a3c46219f8d36228c983c9d63e489c14abd9da7ad37d07eea321a31a84a3349bef701d9be27db130db94d3320958b03b8d41f3ab4c8294cebf0637f5834ed7db88b2f086bfa941163805d5876a41b3cd4915f8b88cb6ab1d5b0e970210fe861628400bedaa91cfd64eb9d7cf8fd8798012dd2067e32bde7e819fac506e40fd4c326f8567a08b7619c6490f5d68b2407b39d0d450db35014890671ec2a1357bda7c5975b919bbae3300e54a64aecf918ea9fe6a348260cb286e521af8c5865e6fc466e7a5999e2b97c5003e852f5931699a68e366f1e87cc1cd2d8f6302cc1582c3043869d0af3e193d190fbdbf20a6978d3747715ddf083558db508e75fa767c2588a1011096aa22eb1d4050eac2c52e6931f1cd5f8117a0887578a205ac20de529718ffc5d15126586ea1cfc1fd4b78ae8720c84483e9cea8307411aad786c1691ef37c4245179659f6f13899ecf7028eac7056667f212253da758f03dec2b6ddaa859d87d6733b6690ec8d37c530e443f84e1fa5d1578aaca7e39a2cd93d1f8899fb10f59ff74e7f6f0c8f388deacdeb1f610978b52d274976bf9c519dc9bf47b6f7032cbf85537c266abdbe2cae669e29333df12271b7e4d0a9ca8a9edd74c9f3105c29129fbc9a0d568804e015be6376a32cef3f367c001eb0765885006872d9db56042b88272cc922f84ed8709a8065b81924f976333cd3e8da6d498b6c2cb055a4b92aa4f90bfb7cc7064ef95cf71afc21c1adefcdf105636afe9678dcf8d879eecf53dc8063494f1e6ebcaaf33aa1651cd8a047706806cf90b4c00d6d2a0d6b63341c4c7c5046f29398292f74357737b899c526d411a542c5f05e5f9bc6f0c6682ac9a8eba61cb1b4d8a0f26e90b825581b8fc4165c09aa70306b601f546093319d5601321f80d9ecf2dd15ca617b4447938a6db755b66590dd10687380dca521b3bacc662c1efe2add056b12d53f6e83b9d7dde06114287bbc4442d6a7aa17ddcec1f9c071bb9f39a3041ef052e95af3870890205c465dc5c9022c472ee8dd43b76659fcc60f7c192898003a39462ab68b0674198e4a8bc42dc9b3ecf4f61fd2d5d32d7719873897a9fed7356b97e4d7048552134c25f4424e64bebec3dec095bfec45b5ce308b92c430001244db3e6ad64c15aaadf3ad51eb843e6df7720b35cb16b9858977c48fb05a579aa5717fc9433d51a558a0d5678d0ea554fdd678484f44e812f251f52c88b68cc9cdb8be26ea416a30611ebfb660f97f4505a9b8ea2a6db51d84fed96b6e7be30ea77529d7b58625aa63939184c4799e7ee954f8878daa20c7ad47efff7cd512f720f0330ca1d4dd1f40a2ae0108a0bc49bd5bddf6592c1243714ea16040ec2986cef6cabcae254ca5675456cc13e023a78a4dfa50937f570f9068d69553b3cf18668ff256f9e58da27385acceb6f15848f0304a56761159f140f90849f0db305216273411f5468a1147c251c3358773a0287bf30de9a442ec20a3aef82263222134660bafd5f66845d37ea6e317c49972ec203243965f734273cfebfc2a5b1ebfd3b08c2f2f424af659725131d83cc7844bfa1539f3e8365da1d568dbb6866b9c6efaf739f63f11da1755bcf3c3019285a146a68e7ac6c1ce7ab03d2e730becb9e76ac5908b71dd1d23538f8e2c7be80e1c13d95df4020376f1552629adf3edd4f6210d924cb37f326cef0ce05ddc71d9e7e7595dd549bf833cf25687a1fb0e4d01e2b4f9851e426f4d1bbed2cba10c7ee762276813b0586b26414048a928ab8523cf958dda0136adc6f5f8b3a5bb274ff40cb1a510c54bbac171af89d321042e885fb3032d53f2bb056874c48e33b2d7fd2d0503d3ee06fbcde7fbf5c75478c68a826f7a157ac59f337d6977fa4fab500a12a9c3162ff32f554f98cf7c18ffd2b916d7bd490a78028dff9419c5de4813b6f38361035dba637d9109fb30af72321b2fd21abe45fb82829517b64075452e7a2f90b7263bf4df0ba2e78024c413d761e0b17dda90716fc2280128b2b279e42bf2a091a745f76795e8e23fe984168e7f9cdc1c9b46a85c17c7", 0x731}, {&(0x7f0000000040)="5247ebaa6e6a5cd635c67184611c9596eaa53e91a60d439f407a21a1fca8b780214014f6b9cdde663b3cc76d26872d4dafb0b4f31039ddef", 0x38}, {&(0x7f0000001380)="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", 0x155}, {&(0x7f0000001200)="3b50dae619bb7cb108618995d5cf04d1a349317fa2733ba4eeb6e6a2a8619be70fddc74055e096296f47853835880a600ff4d1de2a1bc36dda277fbc4a58504459601afcb5b3a836becdc7cd6e2de0f2af4c1125e273f7af1c9db7e6aea3d7b72d34d301965251fa919a2e9985ee9c3a71227eb3f715b338dd6ba43d5edb2c73afe47ec8799457bd35a1e2f530fd64818abaaf8f6b5c3781701fd2a912ad03301a504b00bdb97852195c1f92a27968f45e94d7648bf16fc502e84eb6079aa1c15d01217059d7b9a7cd2e8b40eed867ae893be921c41c92fc6adb1d1d89533583a066998ea98889c6b4a18b3e49f595a0bed7", 0xf2}], 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 502.705469] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 502.739661] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.748526] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 502.797590] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.813054] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.834277] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 502.853486] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.877598] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.912900] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 502.939203] GDTR: limit=0x00000002, base=0x0000000000000000 [ 502.994972] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 503.030970] IDTR: limit=0x00000000, base=0x0000000060000011 [ 503.057693] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 503.085145] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 503.107255] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 503.129080] Interruptibility = 00000000 ActivityState = 00000000 [ 503.144831] *** Host State *** [ 503.151728] RIP = 0xffffffff8120262c RSP = 0xffff88018308f390 [ 503.166251] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 503.181084] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 [ 503.199615] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 503.213572] CR0=0000000080050033 CR3=00000001c17f4000 CR4=00000000001426f0 [ 503.228729] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 503.268657] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 503.284510] *** Control State *** [ 503.290402] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 503.301762] EntryControls=0000d1ff ExitControls=002fefff [ 503.312016] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 503.323740] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 503.335117] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 503.346399] reason=80000021 qualification=0000000000000000 [ 503.363710] IDTVectoring: info=00000000 errcode=00000000 [ 503.378721] TSC Offset = 0xfffffef0f878ca5d [ 503.390388] EPT pointer = 0x000000018217d01e 16:44:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 16:44:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x300000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:53 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000280)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xd6, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x7fffffff}}, 0x10) 16:44:53 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffffffff, 0x0) socketpair(0x1b, 0x5, 0x63, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xdf, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/223}, &(0x7f0000000080)=0x78) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x20, 0x0, 0x6, 0x3c}, &(0x7f0000000340)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000380)={r2, 0x3}, 0x8) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 16:44:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 504.180889] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 504.235830] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x100000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:54 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) clone(0x40004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) setsockopt$inet_dccp_int(r0, 0x21, 0x15, &(0x7f00000000c0)=0x7, 0x4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x10}) 16:44:54 executing program 3: syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x1f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0x8001, @mcast2, 0x2}}}, &(0x7f0000000380)=0x84) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1000, 0x101000) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)={0x0}) fstatfs(r3, &(0x7f00000001c0)=""/39) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000100)={r4, 0x3}) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x8) 16:44:54 executing program 2: getgroups(0x3a2, &(0x7f0000000080)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200102, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000600)={0x1f, {{0x2, 0x4e23, @remote}}}, 0x84) r1 = dup2(r0, 0xffffffffffffffff) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES16=r0]], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000002c0)={0x2, &(0x7f0000000200)=[{}, {}]}) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)="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", 0x0) getpid() prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, &(0x7f0000000240), 0x20000102000007) 16:44:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x2000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 504.607214] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 504.680192] IPVS: ftp: loaded support on port[0] = 21 [ 505.273617] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 505.288294] IPVS: ftp: loaded support on port[0] = 21 16:44:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:44:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0xc00) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7f, 0x2) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)=""/177, &(0x7f0000000040)=0xb1) 16:44:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) 16:44:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4002}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x20123, 0x7, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:55 executing program 2: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) recvfrom(r1, &(0x7f0000000080)=""/253, 0xfd, 0x0, &(0x7f00000001c0)=@ipx={0x4, 0x4, 0x8, "7d0cd0797815", 0x96c2}, 0x80) ftruncate(r1, 0x1400001) sendfile(r0, r1, &(0x7f0000000240)=0xf10001, 0xfffffdef) creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$RTC_PIE_OFF(r1, 0x7006) [ 505.955660] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:55 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000140)="5cd8310e1ae236c14011d947fd980efe9f041b5c79f32b947ebfe4b70878e7139e5faa4c14d739e0caafd9171d30962356f220b58b2f5374a2eaf74b6d69f173d8ee40d94d0eaaa8d02e4e6605476964fd95741cf5d948cf46b78cb01fdc68160d022db537d00cd1837d299d43fe19c7e4f63bceff1baa6d12830c7e393d025c80f842fba40339aafd614ec387978ccefad4db161202daec4e67e50c6c9c31c9e6525c2671e347", 0xa7, 0x2b) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x702c2467, 0x1, 0x80000001}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000040)={0x9, 0x1000}) 16:44:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xfc}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:44:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:56 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000000, 0x8205) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 506.667544] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={r7, 0x3, 0x1, 0x100000001, &(0x7f0000000280)=[0x0], 0x1}, 0x20) 16:44:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3c00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x200000000004, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1}, 0xfffffffffffffd00) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x80}, 0x10) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) statfs(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x101, 0x1}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) sendmsg$kcm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="e4cbc3638e680084d651f41dd473dc0046434c3c34730c10ae327e11147c53ce04d410e2f3d55e9c3061c0fbf23e7252d98bbb1c7a82a9d2227dfd37837ec9b8b294a3deded86a0659a7df06c3dc67527c06233cc2e862c4e7c75a76e4e6701859902523b97f2888d661c500f2d1c499c11eefb1f8b4f9e5b4dcb488bada568fb3ad086721fd8ac40908d6b92f5ca7ffde8315a9051b9b6123579a97d9899fb0b297aa58", 0xa4}, {&(0x7f00000004c0)="3704d3f132016c36f1f5bc1df0844bc915", 0x11}], 0x2, &(0x7f0000000540)=[{0x28, 0x113, 0x7f, "97b79e02a4ba61a7b8377126ba92744d68b7b238167e2e89"}, {0x108, 0x88, 0xfffffffffffffffc, "76d97454a10ee49b81c0af951257e2daca13a0485a4871fd3337771d071204641c411c976a468b94170745d5920bdc6ababe1caad7fbb180d6c7a6eb202fb8e29730bb984eddbd3311c1ab6f6e8830c2809cf4b5c292c10d8eb5bc2ee71fa97bfa632c9504a71c07a3cbdfd7ff7c7090bd16f2a13ed006326534901a475422aa089855c4102d55bb3d454040f0d6534fea4ef0663f68dbeda6858a9f7fc9a42e03bb8d8b08ac286599978efa712088433b425616cf3d5ac52b3d522b045fe65f4560bd3dd049ca87a2d49979fab07f3795d92bf72b7ee0bea53556a2bfa203bd7a1a16c45cba687b01d7b65b4e74a7251c4e2ab2ee"}, {0x18, 0x116, 0x8, "d2f40014636d98"}, {0x58, 0x117, 0x8, "95831caf77a022016a5a54d169898b2775af231f8d02dcdaade55083bfdc86036e336782905a7881d99c525e1f36cfad42edb5f335f47a3209bb0feaa82fb07c8ab4"}, {0x90, 0x11f, 0x8, "a4cf89675eb509e784702acddc14a039e972df6b3233df5cd5cd64ad9189cfa28513536f99a79c2af686a1bb1c14a8931502659e311a9edc2038144adc8d63b819f3960a21073372a146a16687395644bb40cc447770f900cac8684aff1ebe684c447d02ee25b4f0ec2640d529472e552ad9f0ab5b54c202d011443888abf091"}, {0x1010, 0x116, 0x44c, "6d540f6870e322d44020577c7ddf4caad1b2cdddb4671285ddff105f6c8cda9d021e4adb27ece5cbe45859347612d0dba9348b4039a0fcebec17660d9db7218971f788fcfaabf436a8f2449cef856497e7aa266ad9a84becedce4154059636b5fd36494048af875f7f7488b186c41c83528a6e5031888a3af24f1d28fcd25cd69712f1a203c0df7bbc1cebe98d6cea747fe7c57d8ae7b108c5eb38408823ca3c61ca5405ea1b1585c7cce3d81dd177b46385514813274aa189270de2b8b03e924ff57926824cc74fef531b1c4104931c3efe60c3e397234f6f76715b867e3da05d8f6f7ea9b192086c0813972ed82aee575cabe61736eb9c4498551ffb9329eeeb586cda4354f93d68192da28172d3c0fd197d750108711d4661a99bb7c036627a0e0c9208f2b93e8a3ce670a4cd49186e4ce9d17dfc855ec595d790c94f3dc807271449e66ef79faa8e1a2388b8cee6e52b6004fdd16250851c9a6ab83daf1685424ae47744eae9d9f5a1365519faa44d41b3dca81282a8b3e0f96880f5365f19d5a61ec8d2ab8ca54ca4ef92865d834c4635102f069db928a16c6fa969f2ede3b24f470ee56032e1623d9660bef2787e4e80473ade95488e83dbcd814c82f33f17361923b90741dcd759cc9e47ec0812f3c5028ee002d03774c346ea1e1933562771402e16ca03ab4543d50818080c43e2a2c2ed43582f32628fb4524bedd2816d5e108449508a7864d1696ad8208ca6044c03e5655c2db00a5fcf0809ac2a04b85949b979786b1d102911e6b7def5cbc6528995f7176d2f76632745ce14786e9926da7dd950476195a61cc951fb2d59f4c4e3b9845847281e0cd16abdad3b3bf593d0e720a6a271dd99184905e881c9521fff4c8acac8e9e9540dc230b7fdc2971ddbc88ddd67010c146f7b51d1df94a416e0bec4bd98a30c5a41a6b30fcf7bd5432fbc233c45ac6d3e5cf50d01da98091d28f059d14d0022b7422d9674f0afc78fc9f7c13d15bc173562919dd0d47ead6868a2aef4f991faff559efb1d841b0495c8c36d5cbeec235e50b3d492981b1ba5fc28df1e90eee385ccf8d35469d697e78dde03c820fb153bac86ca005058d3b57238ceeadab186478919a96a7081202bce4facb54c80cc26a1d49b25eb28647b3de0ddc9e7e18e6baf8f23573b843a45fc3b28ff8376420e920070bc6cd4197f3e10697594e0b6b5a2aff240e685c5cf0838b2c2c16055c08e433d7daa54b86a95d9593dec041a7951d88067628fd6e528f105c95504cf59f9db0c482549ac699bd84eeca2fcd99ddebfb819d807a8eefc4fb6636826bd30e3fa759af4fadbd941011e74c26246d7f799a524861ce3ee946ddb42aa43a1590d5c283bc13262a437db7a6af1f5b680b657c8fdeaaa25cb303a4e3b994635e992dbfc7e6aca5115c5ce60278560599208b9a6c2764a6a63b3e18811fff32c7ae58bea4cd3b857df216c734b57a3d7e3bcf908bd3f688eedd92b3f10c7b10a53e5d006b27d644623b9af517dedc1431210bfedcf7b129aa5a953abe0742d256474c898309b1d27fd333f935732e506f760dded423ed9332a038761f3eef9b1201f7ad07fe7ebd2c8b46d95e072cbc025c897f0678262ae01240f51c45bfd2d2b6008b7753329e2607b1f0873f8cc68f69fc7ef84b6be7086e77428964d38a3f56730bbe672cdcb8ca781a8fd8c87338f9aa0a7b1d5e98eacc161a8c1e59ffb5f21fc8126eed93be33b1f37a32b9497af1b3d1326fd594f3e6dc5b8e16cfe0a26fb0729a8918fc0068af4f8e6dfa5a1779045ebcbf93f0e80d1e90ba5d3f29fb58815ba805b806893540cb2d61222aa6ea87cffdbfb9a4720d6e3aa88086fd9397559cadc3bedd0f78f881f39a1c2b160f2e0ee8acd81fa0fe6270c1069101f94c6e55286ea97b796cd89723cce57b2f15c481c01073204b5db3608b4534820b27d2bde3e9b118fa562d1723ba474403b39c8e541000716a0186123e2603ef261f964bddb90e7deebe201d839a6ea69ddbb8360f2fa6d6ede9ba31e8cea3bdafaf60f835c59d03eae9650e9bd7604ed45a55970a26c389cd4c55943695ee148c2d3d81e51058d5424851a9f95c5ff184d37a164e4b6c4bf64d440e88ca8fbee918a2785386faac3eb17bcb15bde459be8e6b42102af3a7dbd554058610d9dd6847206e0dfc6d4184f82f05dcd081ac9964e2d3a419d3e6efc002f4e5d19b47bb7cbd0b7c10d5e3f7ffb514e9b7ebfef8f913d57b48760b90131dec3b87fd7ab433cee5f58551e96bfde464e9171c3a3274e6ca7c8d154fb6b77559b722ffad2987c4794efb95e1226214f8260572b2bddac85e81ea62afe69d0a2e139edafc8260c407a63a5472bd0506adf10a3a4510320e63339ee2b8c873f8ee14c66cb4edea554b4fb10216ba11e2ffa5071f0323bd8e452c2368dfa4135f743d8b728240cc076d8578d3e0151415b3ab6341e06115ac340a1b4b38f7834d6dffa93f32b7855ee17970d98243a83ddb4e05910f28d587aac3bf7e030aa5f3f52ff93813a0218a19a93cf7bc7243efd3de4e8412c702519b7b5c95480d9b02bb2436c0479ea92d054281bd921aa1c38d27af1b16397f4def6b51a5c9cac44b432ba9989e5ea96bae6e843476643f529c5a25e204f3c8927b95897639f68a8e9ec228410782b3d09ed024839e74f772a2bad94d9697a157b228f8a017fe909cbd88bcf3064a1367662230b77218ef1efdb83fb9e0fba07fbcb48e5a05711f85c7a4820c23917e8726c1dd1a6c15911b1cab0a419bdab27c256bb2e15d647d826e34d9992a3af66b622edd3c6325d13a833e84cf7645ed4a6b7d95fa4df19b3653d9af52780ff75189fd088929f72790c0f85e5fcd0e7fcb5e111057b76c0dda1699e1b330ae99ddcd7060b358ec7fa49fdc80380c6e05c894407cc6c4f8c7e82679bc63003ff48446bbd431d7905f450c077438551b08cf6b50aedda3df6ea04c47a76e042eebf7a17665fde48b369f61010ff3571cb9eb7bc9523c104bc834e8ad23f34a4c1436907802db0b3225906b7f43c4da6c759774b8a41b736e77ec68745611091344bcd3d2fedc9807a3a5766574abec0f6df8e2be984c478536cb5a85b5ba7e24ba8665321677b5f355847eeec0cc4ea87848f3b3d72cc1139afac24f9ab77b239f3bbb10f1a403bf8975a863a78c46f4f354ed4c918d22f03fff5e12098141d709e4f095d218a7430839275e13f472aa0e6a8518dfc141ade005b59765133db763cb1b1f233701d95efd8f2db8e4e6ee3cdef9e0d930677c4be3e21b4f1278d875635e1d245cdbd91e8b8389cbacd415ec388e51f70d296addcd44b536a6ffea79fa38ec2a21215c0d49ee51d8b686e9a696cb50f469088a7f3bbf5a4923a388a6d394b8b11eae543bac13373136ca4cadafa1ed0d5ae8a644d0b4924f9b5383998ada066636261521f514179f6c5a786134183588c8a76c42f6c1200e030a956b0c5776f31eb076e7c3157067baae46b7362bfeb8406e4081f456972fc84ef279171928376591b8863db5ab9d315f1c7b5154b3c11992945c36fe6566bdd66a6c69772e0413a6021f2db78dcbfa7cf246b6a97eefd789c6d8cfedb96a3785f121353c62233bd6e2b90ca0bfe8f0edf0238926ddf070ab8f5bbd2268b6e32fdd499f0dd72d3c6648a6cf2276eac5586622d0e0f407625e771f626532ec33acdb67662596db110440fbaec5930503b57fb5c81b4933e19d2f2623e3d015196520b774072c144d55783f1f184f924581a9514b24018f7607764c5215df9a3176bed0e45b762ee4eb47fb40e838ca94a66c4304db78d40a1594c56e4ccb75938b467002aa8e336d43edfbb407d123651fc470e6d5b9a3035a78bbd0704973b206b27d47ae2ed9c37293d0ed73aa6bfa34c499fdcfbd33bac419a4feb20bbc9654a3c95f24539059114639d2ac630142bd44534f280f6a4ba8dcdd69b36d484a1f3778bbf8bfe6a5caef4b47aeae75a8e00e3a24e9138ef45f71dd8b5c4b6754247d2beeaa2872043024f50420d9f50de8233226ebaf54403c9637f4d12bf83cac524b1366b30cbeb556b036c079375eddab35fc8ef5582cbef456a1362aa642cb293ac0e73e8045baec2cb5519cc4fbf7920fa164e06c8bc9916c212a67521b1e071caf58485e5b5f25f1dfebe17c6e5762e75f364283584fb9153ff61eefba7f10668be0f5a9f56612deb3b025720c7d31dd3b539ef73bf7c329ab1e40f4c6fdc69805af96c841579624df07b1803dfea4621f34bb89b279c764957fb335bf8dce4f63f425f369cff61ec9064168071eb5d7e184ad2c47c5644d0af2ba760bd82850aac61b1e2ac290aff2da1b27e680c66da4aab10054f64ce3a1dede76c4ab6915434d208910ace5af8326e98cc660afde80a26b3214a89c5bf3698797db68548ca954efc2fa524bc3ff82ad16752ee318f492568a96758e269de03ab0bd4ffee0725ea2313f1f780107611f2b8432eea2519ee7bf2bd516a94f1e188fe4d931311d78822cc2c460608e98052caa7130d7fd936faabcd26e886702c8151949cec90ce6116387994b67dac2fb22a52a24e871d524e737248c46b283d53ed72d24b5e46777ec4cb436d241eaa08686704f01cc072f1ccfc7a3e84aaea1e306fcdf98bd955390650a65084cce4a47dc2bd0c32adcd830090e85545b847be4f34d8eb8827fb81a7035c11844ec161f95c0591f2654691e78938e61203c5dcd2ea90e1e0bd3748482e8c73a574c3ad8ab993566d50080db5d3a51d4519ed38fd16a39ff02d432c4436ae26f08667ada451fcba3b4b8bf3b7bd72fa5775ccaf735bca7af11a488fc5585c0c5d54c65e390cb8a23d985ed9680a0fcf35d42d87340015edd5c7a10ebff50ca2aca29032668080b681cccdcc259590c6541ba9041d90ccc544eb0a02e600382a558d03a26e2c48fbb48024e4e128bfffc9df5793dfdce64f5cfa0556aa2234141985f48c136793cd61ac4c403a5ee10580ca94cbba49d8cfe6a04658a6be5c973c42c1b004a69d42ecf0018abe02e1f94fe6bbe04c6fc825cb41086cd962bed391481068862252aca1c1166f402435f7c2685e0ed0d5c685ebebd1cba760ec85d78d1bc8bcbd30b2d42b75d36fe4a5d6cba0a71fa5679d8a96afaf3faab43491adaa2f6ea9e87322b73b0008a99b7a7fd51b2dc86a27d606669cfd6ea0e0c77128f9284b187fc1a4c49c2a4dde2a26962a4a3b33a9f09d0cd710a1f0e436650801a36df9ee3efefdf7fc7bc35848bbccd9451b0de8ebc94b4cd0c8fd724952cfbf7fed10560bc15b0e6953b36a3ee3a20958390f776e1b4f219fa437d5d8a8cf75dbd110d70dc70b684a76f814fc8dc805fb0ef3daa77aa4a4e9cf186c8164eaef001d5e73ce5658a81c9bf225cda7e20869c41344a0922e114e063a0452b85ea67f99e533efbe4f421d907bdf222629fcce9cfeda596db0f21840db3a839159156d71c775d5c6e2465ddd9ec7219f702fc1ac4c3889b7bc8b2a657b2315342aa3af4525e16274cf386333b0cf93097949f4687ea382d3fb4ab3bca80b05acfecd977c26246fb8c96cac2ee4f7d8c7d974edd5fb35a860a261fce4727c6b9ecc0bedf7c6ec3d460a5ddf1d56c38953aa21efdb6a0f92ddee2b3b28c0f9066eab5240f2c05fe5a50496d8c47fbae443a9458c2e606b2085b27557f9190bc74b40f6cfb6731b2f1158e880790d42e4a7dea4a2620611edfb9cd30a5935ed209e3a6a962d74735b5efb7072b6f4ae"}, {0x50, 0x10e, 0x9, "949a43b21e81f35df8fd700c0b323f8d9c47af3632e862c451823efe1378c1193e1a4a47743a9e133640aff15baf656d26ce5d3e587b391c891124aa382b10"}, {0xf0, 0x0, 0x10000, "b2f172b0f2d5cca3ac8db5247e050f84115e909195a987401140d00c138d679bc25a5cefa1f62e74bd6023fdcc40fc6f672ba54dfcebf5a4b53e77d545e45e9e6690b692b8655a35ced7cf53562242696cb20d9c2e8ac7dcba0d1ec80af71b0155505d855283b4952a2c43d15b748544c67f085de736ec0ca19446646082556ba26dd746e02dc44a4f9fa5d744315d758a31035f63b93ce86889705e44a7eca981119c50440febf2994ecdb27da8ec777f86a316603ca6aacc386f283d01cc0737f3a95b46b19aa304976688c0d6ff0155a91b82a15adcbee7536d"}], 0x1380, 0x4000081}, 0x8000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r3, 0x6}, 0x8) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) r4 = dup2(r0, r1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r3, 0x1}, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000340), 0x1, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) 16:44:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000080), 0x8, 0x80000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x30) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x1, {0x1}}, 0x18) 16:44:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x7b}, 0x26) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) [ 507.745489] Unknown ioctl -2145893024 [ 507.759140] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) [ 507.831325] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x31e}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x1000, "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"}, &(0x7f0000001180)=0x1008) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) 16:44:57 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) vmsplice(r0, &(0x7f00000014c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000140)="4a194996448b39ebab44e225041abc1442a944756619efbb21dc43c3ea10074c28060e5f724b84501d9d86ca92b269a7881ddd4fbccbe1e64d383732c358c85576b695d415e4d58d1eae06efe7df08a611b9dcb00a187c89bb0ddfc36870d59038eb9ade66864c8ed9ffc55144527cdc122678ef78cfe9c475fd54b29671b0c29bb42cf84bd5c3be1c809202ccb434e3ff4ff496a4f07783afe0bdfd190cb113b3d9435580e9eb7046311609504a483c7077a25a481ec797d7b97519f43f1ba2cc1ab31a7b91e31f8f623f73", 0xcc}, {&(0x7f0000000040)="498d8e8e48052a18f73d4cc9266cc4a69cc99b003b5d031766bc372e0a0620a852538e9fccf5cd61c18299ec08741fc5eee2c5c70056d610311491989a7da4d3b2825a449a12e9", 0x47}, {&(0x7f00000000c0)}, {&(0x7f0000001280)="52b3cea8c3adeab5dd140e70df96abc7f3651c633c3cdf95ed8fcb766545dcdae8b5b7250918ab252d39f6fad0d9239d1e7d964e3243fc1edf3e033d3faa60f5316e53604d0b8d170ce4380dee0854a32a4ddf918c5cfb1f159d6a8fd5f47d1a5302d79fc8bf41afa5b8dd6b0dcf3b634b4e739408e2e05ee5c7453b44527b819a", 0x81}, {&(0x7f0000001340)="45f74888d67a3191863447c57c233fb94041e1c3a776135b1d1ee3b508263b08c41ce1c66e390f77489bfc957bcbad9a06683c1cf240fb622c58f48edbf2756087ba57f656fe3166375874920bc52ab7214a97bfa6636eb3d561ce186cd2b19d9821992ec84a23692076b2f5e53bc458e00ea427022b73f83fe4a03ba92ec8c77dbf5d31a3cfab0ff5", 0x89}, {&(0x7f0000001400)="e3e3c740f1d00822093cc9b89cbcab7525e1f8d6c3be8c110e7aefaa8460990b12823d3c41a4260b4c0e12af9a210c43a2b549e0687cda41a9182aaf8221cf6410ee83960a9281f431fb9f59e931cc3fb4329a07989abb6e6b9aed882c5bbe10ccbdaa5fbda60ffe7a869e2ba34401ffbc13a3ea4b9eb7f543bb5463e94b426360a347ea4321a852a15203ed9e65f8af3652b4", 0x93}], 0x7, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x8dffffff00000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 508.149522] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f0000000600)='./file0\x00', &(0x7f0000000580)='./file1/file0\x00') utimes(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 508.233621] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 16:44:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) 16:44:59 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) gettid() r3 = dup2(r0, r1) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaf, {0x4, 0x3, 0x0, 0x10001, 0x0, 0x10001, 0x0, 0x7, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x100000001, 0x198dc3c700000000}}}}, 0xa0) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$fou(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$rtc(0xffffffffffffff9c, 0x0, 0x400000, 0x0) getgroups(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8800) 16:44:59 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:44:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x3f00000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 16:44:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x800001000fffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8000) dup(r0) sched_yield() ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x0, @mcast2, 0x2}, {0xa, 0x4e24, 0x80000000, @ipv4={[], [], @multicast2}, 0x56a}, 0x80000000, [0x7, 0x3, 0x8001, 0x1, 0x1, 0x1, 0x6, 0x3]}, 0x5c) [ 509.809676] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 509.846124] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:44:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x200000000000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:44:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r4}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000880)={r6, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r6, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:44:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x40000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 510.095000] *** Guest State *** [ 510.098775] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 [ 510.110822] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 16:44:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) [ 510.136552] CR3 = 0x0000000000000000 [ 510.145459] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 510.190031] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 510.208501] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 510.220366] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:45:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x8000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 510.238327] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.260448] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.270720] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 510.289856] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.305198] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 510.317514] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.335607] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.363502] GDTR: limit=0x00000002, base=0x0000000000000000 [ 510.392072] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 510.443804] IDTR: limit=0x00000000, base=0x0000000060000011 [ 510.485425] TR: sel=0x0000, attr=0x10000, limit=0x00000400, base=0x0000000000000000 [ 510.511100] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 510.539116] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 510.573540] Interruptibility = 00000000 ActivityState = 00000000 16:45:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) [ 510.595779] *** Host State *** [ 510.599399] RIP = 0xffffffff8120262c RSP = 0xffff8801b515f390 [ 510.622489] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 510.658608] FSBase=00007f8d18a0a700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 510.695019] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 510.707558] CR0=0000000080050033 CR3=00000001898db000 CR4=00000000001426f0 [ 510.716259] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 510.723833] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 510.730448] *** Control State *** [ 510.736159] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 510.751937] EntryControls=0000d1ff ExitControls=002fefff [ 510.771795] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 510.785560] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 510.801684] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 510.815147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.821829] reason=80000021 qualification=0000000000000000 [ 510.831107] IDTVectoring: info=00000000 errcode=00000000 [ 510.837414] TSC Offset = 0xfffffeece93c71dc [ 510.844762] EPT pointer = 0x000000017fef001e 16:45:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r0, &(0x7f0000000240)=""/4096, 0x1000) 16:45:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 16:45:00 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x20123, 0x4, 0x0, 0x0, 0x0, 0x7400000000000000}) 16:45:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x48000000}], 0x1, 0x400000000e3) dup2(r1, r0) 16:45:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000580)='/dev/adsp#\x00', 0x8, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @multicast1}, 0x0) connect$can_bcm(r4, &(0x7f0000000540)={0x1d, r5}, 0x10) request_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='cgroup.stat\x00', 0xfffffffffffffffd) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)=ANY=[]) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={r7, 0x80000000, 0x1, 0x8, 0x47b, 0x0, 0x0, 0x7, {r7, @in6={{0xa, 0x4e21, 0x9, @remote}}, 0xaa19, 0xd}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 511.012484] IPVS: ftp: loaded support on port[0] = 21 16:45:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x400000000e3) dup2(r1, r0) 16:45:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}, 'lo\x00'}) [ 511.165977] *** Guest State *** [ 511.169577] CR0: actual=0x0000000000000030, shadow=0x0000000000000010, gh_mask=fffffffffffffff7 16:45:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x10000, 0xea5f, 0x100000000, 0x80}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0xf5ffffff00000000}], 0x1, 0x400000000e3) dup2(r1, r0) [ 511.230256] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 511.230397] CR3 = 0x0000000000000000 [ 511.230458] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 511.269738] RFLAGS=0x00000002 DR7 = 0x0000000000000400 16:45:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0x0) [ 511.313946] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 511.338243] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 511.356607] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 16:45:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="f6ff"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x0, 0x10000}, 0xc) r3 = dup(r2) r4 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000e470c855e4ab5039d705559072ac3ef3102f2cf51dc0670245ef204912684434a6fcbec3d89bd5b678c38b9808ac82edddb2922e0b81e36d4ead0596bc62d862bec6b9d55d733aa4ffe27aba6148b017cecd0aa8b27e4a8f138dd48a1184069a0a1c850b4811310cbbe3ad361a7dafaf889ed5a9"], 0x0) r6 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000200)="69666210e8a1fffe00", 0x8001}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r7, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x2}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() fgetxattr(r4, &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/23, 0x17) r8 = socket(0xb, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000400)=0x54) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000480)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r6, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$ASHMEM_GET_SIZE(r3, 0x800448d5, 0x70e000) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000000)=0xa6ef) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 511.388382] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 511.405412] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 511.425276] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 511.449000] ------------[ cut here ]------------ [ 511.450198] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 511.453892] DEBUG_LOCKS_WARN_ON(depth <= 0)