9, 0x6, 0x810001, {0x6, 0x2e, 0x80000001, 0x1, 0x2, 0x1, 0x1, 0x1, 0x3, 0x2000, 0x5, 0x0, r7, 0x8, 0x1000}}}, &(0x7f0000006680)={0x48, 0x0, 0x9, [{0x0, 0x20, 0x1, 0x1ff, '&'}, {0x6, 0x13, 0x0, 0x80}]}, &(0x7f0000006740)={0x160, 0xffffffffffffffda, 0x6, [{{0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x9, {0x1, 0x6, 0x1, 0x4, 0xffffffff, 0x3d08, 0xffffffff, 0x20, 0xfffffff8, 0x1000, 0x8000, 0x0, r7, 0x7}}, {0x2, 0x7, 0x9, 0x100, '/dev/kvm\x00'}}, {{0x3, 0x2, 0x3, 0x5, 0x7ff, 0x2, {0x2, 0x8, 0x2, 0x9, 0x47ed, 0x4, 0x1, 0xeb, 0x9, 0x9000, 0x0, r2, r3, 0x5, 0x1}}, {0x0, 0x2, 0x9, 0x9a, '/dev/kvm\x00'}}]}, &(0x7f0000008900)={0xa0, 0x0, 0x20, {{0x6, 0x2, 0x1, 0xfa00000000000000, 0xfff, 0x8, {0x1, 0xfffffffffffffffe, 0x10000, 0x2, 0xba12, 0x5, 0x5, 0x20, 0x8000, 0x2000, 0x9, 0x0, r11, 0x7, 0x80}}}}, &(0x7f00000089c0)={0x20, 0xfffffffffffffffe, 0x0, {0x3, 0x4, 0xfffffe01, 0x401}}}) sched_setscheduler(r8, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000000}, r8, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 494.646814][T12857] device team_slave_1 entered promiscuous mode [ 494.674580][T12857] device bridge1 entered promiscuous mode [ 494.685171][T12857] device bridge2 entered promiscuous mode [ 494.691643][T12857] device bridge3 entered promiscuous mode 11:47:03 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 494.698993][T12857] bridge0: port 3(team0) entered blocking state [ 494.705464][T12857] bridge0: port 3(team0) entered forwarding state [ 494.714231][T12854] tipc: Started in network mode [ 494.729712][T12854] tipc: Node identity 7f, cluster identity 4711 [ 494.765120][T12854] tipc: Node number set to 127 11:47:03 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:03 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x6, 0x0, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0xa, 0x3, 0x3, &(0x7f00000004c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x100}, 0x14}}, 0x40048010) 11:47:03 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)={0x32}) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r3 = dup(r2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080)) [ 494.895029][ T5161] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 494.921371][T12873] 9pnet_fd: Insufficient options for proto=fd [ 495.144976][ T5161] usb 3-1: Using ep0 maxpacket: 8 [ 495.225211][ T20] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 495.234291][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.247199][ T20] usb 5-1: Product: syz [ 495.251376][ T20] usb 5-1: Manufacturer: syz [ 495.257673][ T20] usb 5-1: SerialNumber: syz [ 495.305085][ T5161] usb 3-1: unable to get BOS descriptor or descriptor too short [ 495.311149][ T20] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 495.385127][ T5161] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 495.393921][ T5161] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.404417][ T5161] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.765245][ T5161] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.774599][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.782929][ T5161] usb 3-1: Product: syz [ 495.787325][ T5161] usb 3-1: SerialNumber: syz [ 495.975163][ T20] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 496.115361][ T5161] usb 3-1: 0:2 : does not exist [ 496.141586][ T5161] usb 3-1: USB disconnect, device number 13 [ 496.183299][ T8615] usb 5-1: USB disconnect, device number 13 11:47:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) read$FUSE(r1, 0x0, 0xc) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000002080)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xed], 0x100000}) (async) r8 = getpid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r11, r9, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002180)="6227b3d0a6ba9a38659fbbe92062043132ac7b18c1633325014603f439955236f2f8cbd6278988f699ad4c27224c99ac261e971aa577317ea04d92e48cf84f4058db3effc666a0155381231bd91d858ad278216bd71f5b5877ffe82f8c975c7250aca831f6b1aaa595143cd2a9957fb6b96cb3336c354073d59e2d3ddfcaac0f829735ead193430a4b64348d6a6f9580f378bb717b4b80e5832bd6c69edae42be22c14bd9c00056d65c0ad3bd5c64f6969a82fb3f2529ec86549a275c0a945007ad4dd1715ac25202f8cba2687d29f3b617b9d2f979eb4f57db21d12348333cfc4cd70845073b54a3715ea6bd78a4c97eb396dc0eaf073f5d4c7d89715540d09c5fde3344013f4a7c313f371d2d844fac6cf15ec46fdc45dda6e2749b1f045ebad56908319b38b20853b99b826558e3f5175d14a7eab2bc2b85694f65b1249cd6537ea6e9dcc77118a93e65a7223d02186e1f5f474bba7bf7ca5ef769dfda09fe67d9da4a98f6a0d13ab0f19f9059b247a9b5ff795dbf9d3f63fc2d396fcd2b059187fc66b7354a692430c5f27640c97f38b639291b67da9b20147245658876eff0189d8843a61f520681a4c50bdefab0c68e27ea1d5e7e7bf43c848ea885523db503f1151a35a78ea10054749b965fda497f79449a88db2f2cd73d8b04bd46d249e6e740917c35262b0165bd38d9971b57f28916cda6981529cddb7b5acbf2673c083fffd779a1a9554073195e31a3437fddcc1649576aa41b9083ecb23552acad8623ebfa726f26d2f2fd9fc54b649a13279f1855ece5d0cf9a1e04ac49a9e428e71e23762241344902173d8a6ea30fc480eb9917dac0543759e664a115a32483ab29bae0ff40c5e378f0fd8a22ed24c62965e07dcb46c5317a049ae4c3c8e1c457286801ed192814267e51f30a8f9cef132243d9cf2f4f42427985777a46472328a29f932ccd02ad51d2041dbe359e7216c61f8e093d9f40998a7e4ac304058b499d92f4b7a7cfbfc1572de693e0f8f8f83ac4791172f16174ee411f5c8e895d981c8288cb3d917265ade4846cbc8e6e00feabf8afc467d3876b436b7b97b9dc93cc4927248ce41ffd7b37d051628cea27375519c40006338cac7dbdbe395091514f26e8ab6a637fcdf90116b5eb6a66807fadc739da3a48a42645d2f247a1612b6ca643ba90573f765786a965c85d8b04e5cd3aa57f8da1c2836c7e6afb02edf7c4ecd8624701937e6713f8e0b21025d26f899726cce7b868041001e8ddb29dce6af1293fd3aa8edcfc69e3d8b8d04ed90f031ace18ae81539c3f769fe0e30b95fd0f1b5ae7c88da7f99bc28982a466826ffe5a0f14876194bba1de27bcad784c516f063eda684042292ad7fd1aadcb7ab2fb4281e71bcbecfac6fb11a98270f55ee1f9b38aa72227676491d8dbc73f86b137fa53665da5f4ab137cfb5cbca6fb99425207f1daf9885c7712663c5e47f47dd99795908110a48c23bd328f1780eb4c419ab142a10697f138041d9872d00aa5d9bfb3da873abd590dbe6d8825514dc11119fc50053bae615f1f6a0d9f93ea423a5cebdfba251ae1b2529bdcf455caf4bd46dc5ed4de14ebe19e11be7ad0ba1e1e44431662a2175b29494b9d6f9649be5a0bf64dafeab5f7c95b6672e0ea3cd6c0ee0f0093349ce198b38dcce1b75d0c75255bf251a0a881169e29afa563e73f14d9dbbf1f22641c9aa175ae164f803d50ed9ad507f0629245c4bb5c72c6de3cdf3a5d041bd254dd1dee90deef04e3e2c4d85ba9fb423a3efdc18aae8895a34938b128f2cce9abbceeded82ffeefe2264454b76603af77f8c8c1b299cec36d1b174b8f97427473f6974a266bb7a7d58762914f65504277c262b7ae2b881fcbafb5630db2a415e4d900849296e60aec8d2ea4ed455cfce891dd6a7afbf6265ff9c9c0ee64239ca6f1dcdaa723ea236033695ed9dfffa79042c203b528c71b9d101e8146d292517a82999fd7724fcc1fd0f6b9aea686209b2871df24b5f3f015f78583e620964400fbcacba317d41c46e31a7b7e6640099c139b0e7beb47f6ad1a472aa4e9a42434050f71892c8d9d38d4178720ed428d9988058b6385d3e8bf19d477ba728d600472a42e927dea3131df561f0df782f8debec0e6a7711dc813e6fd92f0fa3b5ede79a59db26dba2e92b2549398f18074d3377f68617c86814fd07053793ec7a86b19d6f07e50121b24dc215625f7e7949d9ede9454c427326ac0d9f4885b213d4d3ebd746130ac8d6eada968fda4e4cb8d596ae96059c67ccc2477820b3aeb4197fc0ed8b73792e1bfa24bc1c2c95dabe92e143307056bdea149cafeff6af09423b40ff492dcb9a267debadfc3e7e92a52a296b7284a424a61e980aa9435d1338998e6ef675a1741c1370171e3eb6c44b5601b34c932abce5e813ff65b388b5afb4e7626db603102eb5a61238989b7b90015a3213ff3fd47bb47185a9d838f69e8b2c15118d32c2da71925cac55a5d4357cdde0aa183582717f2bd652fa13c1fda67724ea399387ac4891c598542aad3eff507cf3d57d1a16da79c3042a813e4917de8f51677cc16be90ce0b28713f2a4ab0ee924cf126f05804067e5a31da3c61ab8d6f6333d91b152fa925ae739d6b6c4b003822f9c64fc6a75ec26bca9e80786c2843196f49a89310892ee80eea534a60cdb172860b000cd6fdcb69053dd1a280683aaecead416613db0a545fbd6866967bae201aec75421d41c882780dde036337394e1e553ed7908e6defe122c9c566f361db5d80773b8af7ffd607781336924ac268a3661c01b7e019d64ad02b9dbd522b5f928bce2309eba8061beb224ba9a57a937fc01d18a200b6f113b41a826a91f6171cc332152cad0beb6bae6e3f22997112859faf0a327e3bdb6fbad8336575ee29eb8fd5951bb3c1433966dee8ef6690ebcaf50a75752ebd1d9535ad6c96f94c7afa608b309318787da5d133aceeef7100373258dfae130475dd2aa8fb229224e080fbfcf212b29a2fe9d27bd511e8b2a5ed1868f21b3ae7b3ec3f71c7f7d499cfafe099891363f26dbfb7457d21514c1194912fdc2e3d13c34099db707124bd0ec5f1081230085365859d0aa7141adcdecc985b12eb863f6d77338b277e4c9793048b21535f1299a8db32cac5d44fba996e4f4019875cbac933b361315ac551c7c4821765ccb6ef74c6ef03ef9da1e4f80944e3acddd9bf9fef463dd4e250ddc4e5ca31f6a95ca4fcd2574db36949f9503e5e946926ae80f757b053de5a6752b3ce43ee304a38c96456baa626a99c414e6afe7b3ff63f3d4b0ae276f49c109694e902a0519dcfcc409d0f2e603df8021fa7180794565dedd2dae939017ae98104685e4a4b9d1332a5b1fd05006d7135be18fbc0760e7c47eccacdc260dce1260a779e76008e4b8d9fd7d0d0efa0eceb018bb6af2a571e8c639ce9f2066bb3ae3d3884f923d29c87559d8d0b86fdd087f0d7e11637bb65a6d702e0f945a75c4dc6a51c6ef271bdf20a0c07bbf75fb155f6dcbd2e31ec8e0aa8933e7d3b8395b230946e4c270742b5cff70555f1998564107515f82b30d70b3f222f45aa5b4bd1ffe48e8700fe966c279dbd49910c1baeec2a1491c285173c861fac2ca4b6cb1556d0a59a1f612684886f6af6e6191cc00629ea45a610540f144482585378d4ebe3da3921751b9e3549263d3e20aa16a41654f62b526244c0eff4b78188f2240f1ee2d93d34315249597149286b9afc0c06a407687cb9c8eea2608a206a765bab213dee80dc39dfbf7153a9a6b1d77ddce10f8203fb3f4b6912d5754d67d8fd67e56216e73242cf9c3234d086d0e5dcc3d56f91549746e712648036783e1912c118ecc4d328fa558580b97eb61b2e59f22aef1e0e8a3d6961ee497dcfb3dbe98105e7664631a5deebba5fe8bb9e8ccfa756d1c43a6a542b160669d275c71646843a118d283823943c90cc3cc669b5382a9e983fa172873e03d36b28e4c7eda3beb3774b77f0e52eb017c8ea61f0e4616483a620bf116c2befb84bc0ac41bb6ae494983140125cffd8c5f35861f6055ddcf528cde60f4ecb2e149f6402208177db99e086fcc4af07419337426afad2fb743d7d774263d2b2499109d51772c2fdafca5a8247a2a5833d455d06b0da06c7aa062fb91e771b672aca63caae32c27e02b5f3bfd3a1bafb8c061203d58b5feb0d0f0d79ab4d802092772b7dd1f1ba66e13c33b9ecf1ba899cc4518546e5af5ed0da14bd4ae1a54232504e7bef92fc446479b9651e9cd5bb0939cf1a6d7090b6fb1cbc86909d503232889441ef17523b0cefdbcaf81d06db70a383656973a7ae376c1b27b4e3adda7b4f71c5726db5f30edfab0722132089381fdb1710348943aa8b60a58d547eefc743563615e586a691f8e1e247c65421fbe6cd91b235c72f8b69aa905c80f9683f0ae538f2cd31e75db173bfcee4a5bae2bbd1d9051e4c3063f5ae825981dbeb9d514f53e711c5e85254e30796b38a674ab90bf0cb309f9303c9a4a0385806a49781c7b56a29aee2bb744f412e3a1540b040f7a1fb4849768467bc1f0245f67beb80bda39cd7af6f09ffe83aaddc9fc98a13b043d96cedc66d8543ac3696ba992bfd5e81efcd315a701eb8959984b154b38609f52db710c93573fbcd505dd83ecddebf0c72466e08ac6d23a3b8e36cec6477591b22c4f416007c7130623ef4294ff0d9fba3829668b72430fe50bf49236b24ce37e0a0c7b82dfdedb9815f8c9267819daacaec1e0a4981f1b6e723336aaa172c01d4a2b53dfd73bd2c5c9be16a2855b94368c88c4b699ce6d2c8801535f8fb37bba2a8056c75e5e115225612b99e5de4b690e2b1fae3eb3126734ea09bf3563ba154db832a6bf875921902df6a2f8689a84276ab84279c0ae4b28557df7a8ada29ab7f778be7e43225507cf543654fb4f9c28cc0250064feb8e3b14d381f12c328ae6fc323ac87673aae809ee96a83e8d7c6ac6a9d80b8178b4edc29f7de88f40f6be684db609fc7d71ca4fbdc1f2750a837f025138f3923cf6f0b596434efe29487d2317b17a9d6cee139140f639ff53b1ced2bd55244265e221cc880fda18610e152d16732cbe17bdff5f17b83a9a0addadcf52c21d7530c56571a85dc269bfb1b6ba3191706089244376575e33e691b1926ddc21dd93ea5496367621dabcb22b70076c3b784c4abc6665a90757ac0aa2958ab043c20ed133852df5ac96964f4fb2a266c865480ce8ae22e77df599c5196eb7225235deabd687d24cb40ed284bee09a626edd23c5765bbfd86da5fc3cce6ed56c53d6b93f119f627e80f4728ba180ebd342abef7483abf9cea995e76ba4a644815888f8efdee28e7e9a27684a408663f6e6735684fd35580b179963e6e391ad9305fafe0e60131e5ac2d16d95bf08166b97b4b583605558734e4f2937f6c37414b6b0fe484ab81029e1313e3cea80aa3995a95e05cf4ecb5e48e4c2365de22ad5185fb617b00915ab5018daede54eba63aa01da4a35a3e85e8648b331e3179744f763aa9b175a123d9fd4c598bd01d4cde3e9f09a0e44d8cb752f7a76ea54d792df7e873255b0f99b5c533b2a15ae110c8f219ea6e72b4e536dc57043fe119246fee780b67e1be4cc88f0b5b60f44c296f98e07a374949e74d210a3081147a550fc3d4b504e78ae1f682021b6674fc49dcbb2e70c6472cafb635e40dc99cda09911f5bd56a96eb4b9040c50fdb85cd9eb40e0e21a7f0cd8307702c2ec72ab3ea670a622a2ad52b24fb3c53cfd9dda096c11491d53162f6755afbe2009bd8b0a6672e69f43bf7529da657b81b31df3f6aedc2c23a83154a7a7d220bfbaa6b0298245162113f391ee4946d725b8f5c630e0df14dc28e1ffc7d79ec5235d6ce8a0f2563c3ed13bea392cac8472fbae062f49bf94cf99afa89a08769e28766690be29f1264ed3bcdacde7a58d90888c186b4abf9d964531b5c7b2d6f65d18d8e501d32a0551630c58d3ab16d68422fab94223b75e71a5f9f47243006f8267497c20e3738d795c39ab0abf4f8ec2cf7918b3e0c8498807b6b321b576142bc34cf2ff085fd9831b9192687792faae8f8e3c3368ff5a02a504cc5532ae9dd2696b6f7f2b201f8bb8a152598c3f498780cd0d0dad84936c99fd6c2b1ff5b0020b6c72475d42cb892ef378aee7492249c28aa95f4d12615b23efb843d2704de6265a61744e37d51c028abfd241ce3a6a00410aa60ff69b9b1f484c9c06e3a9be084aa35a35dadd233d3b00598aa80b5be266835437a70cc09f27945e887bd5bb68bf231be5f9bddd1a51c0d17c39b4da12f611c954d34f2c1e22873915cc67c4ee6ab6ee83aa75b4464f476018cab0e443679248abd4054f8706f4b65af3c908683a92fe398761fa88ff0b311118c5083f681e4903cc642887a0117680eec905ad2450aa935f507bdeb7b04f7d09b13f41725dfe8f2afd806b46dfe5d53c033eaca0208331507f1180c1e999de236453e1ad2e0678ba28c2004d40c62c9ce25298c8735d0aeacfe3ba11ab8b93401666695a3010120f2ad7eea1bd74114689fee38f2a437043cfb80491a47247dfc04a9f83334db52e19ef9b0f63f04a449027ddab7fb016b6183d4871fa9c50cb1fa75be3530f6c7ef831396da3550948c914196e71eac71e46507f14506ec403fd89d95cb5d1f7121d650e6ef967a39cf96f81c220940f6bf4621faf10d07fedf120bab59a96cd98879e9645161efeddee0e502c07859fe813d68b72402163de65c4b76f69dbbdce56fbaa309a14a8af403c6ed026473b2a1b38e4616df91c0e7f5291c68f9b6a30f596ad937f62257466ca1726733029957c608dc31a8afbacc1253965e2443a90c1250a75332d994da5cb9d5dce117a063384fcac580016ba5fb2cbb07b54265372d79a6e336002a86bdab25c5a396fec934568800934060cf4198c1fc29342cb4575bdd1e7d621e5b129b60f025f6dd4bad191ee68ef3094cb11f5eab82d34a922b23ab59d1a9100cd2b13ce2ab05137082624b21b8b9f2b918b9fc2cdbefc297a693f385822de11ea23e33ad00408cc2e1ff0ce413b36de07f9b08b69308aaa0613ab6c4c17b429abfa6b5e10d071abbcc4da979fa0c60a39d075d3813e2caba8b2fd1fd0c89c399ace84da8a4ed57bab714d6a02174d5c8a52337f997a1b8b56395b6c9b82c584d36ebd48b41345dfe53be5f5f4972dd658aa31aa6f1f052ee40367817a747ec4b52a5fcb631ccb9c8b4a2416a745455f55e533bba6d2dedf2eba240e23d8efe0c00cd61c5b0eb377cf508f4bbdb169b4e8ad4c0f5aea636d6dfe8c4866df710a4aa0b9ada3f4e3c2dcc636a66ac5fa853992d7e4157b199597bb1fd2b4948c13e664d96848c317038dddc4e541315ba866378544de3cc07c0ff6c7e2272dd12929751aca063e01cce17ffbe3aaa0019f5c89a71687863322bcca2e53bf8b80c705e5a4303b80e6a3e74f85a5089de2d3d106ddbe6d7c4f6adcf6317deda8e9901f523ee6be485d72fc28c64e8e95cb99c2732a39ac8260f2e0badf46d2a5b346cb0b155313a8e50fee75e96c3d1a6fb6a48d2458df81accd7e7c80fc13f3751be5a9d7382f0e0818057075a7a3dd53e4896c9ac8a721eb2297357abf2b4ff4869bc4b55a03e2fcf917121c91073fe76e3252d266b7c53fa80d7ce40fade326d07effd3c03f847fdfcdfac2a6d3618c332f83069cf2dd84a5e7e73b6ad403139f50d6efa5f68f814c1a936877d2cb4fecc5b21455bd6f168adb274bf74643d9c7821994e07d4e2953c17876d0172e39c542b694dd5d480946419e50e2bacc85b2c81398a976f55beef44db89743ef1f4cd8fad05d5d702a0855220422c0999db0fee5d5076fbfb4579001a84d098cd47b1bbe140ca4ba72d7dc3b601f706da6b6bda5aefb3eb54e8f12d18821810884bb407c977f839e53ec2399e13683f1441ab00fec3429512c68915813209ddafdafec5a7d58775cbab0ca038f466f3f16edb30d4624177d9c9693e4a07dd779ac7fd9ce444ed51e6d5233737fb714ccc3baddf09a8779fda525e4f271d8a6dbba7e7bb0aa42e044b364e3357c3c1b5126415d8f4f6ab9bd7910ef0cfee3af1a63698484919677d46fb0073ea18c4fc1ab10f99bce706470e6e5db6a7209a9b0f7c174cf28eecae1bb96514dc0dcb089388465fc6438d1410be60c7845baa8b451be449ff8ad258f8bf3aa131f6d2cd00206b0b26318207574b7e5190845531b4104e88429b4442f3bc44e58e4d07adab6fef036891b4aa6865357d71f0abf710c033f64bc368271d70b59412447ac02cf89a0e4acd3ff69413b3ba83fead366c416218ece5ab178bb095ec3d601c9866a1c012b403ba1d4cfb6d890511ddc3bd9d860de47f3a7786f7d50732a72238ac0788aee2258f7bb2e5bc81ddfbcd2838368480149790826ca23a165ef85cb1cf79f2752e9d951e85db8d458dc1f196e36b0adf758f78ba4df11466acc2933a4a0fe2e3adf957873ce86c323d0a9cb3630de62cc018535a419f362bf7920eccf8176c1478f687349c0899013f4933e3cbc67086c99561556e7f3cd48e21abebb54a2953345ee3da6dca587128af2387bbcc7b9c408208737ff4fdf31114e882de2c41d7c64a7026d82fd3cc429fcfeb49ff8b58514e76354ecc8f2a7b9d9d74424d416d70e332bde5fcb5912d96836cc4ea884704109432a72975d3fcbff837016c3fbf6963d1a66d04b0a0710df8e9d0186db1637e5f513acabf239afc18a82f1967e0ed985a8f507824ed994ac7ba74600f4216ea5f74ba751f5aa5362ad179e3478343672ca358e5c7cb5858c5fc9cce3faa5aa60360b9827bb649f4c5e2f5ce9bdf41c7074273b73f5e6e7a3a2df2379cd7288b4b3e6c602f942dbe4758ff10dcefc537b83dbc9fee6d49820fca74efc276b8a6fad26aea3be0c500fe5657d1af757d652148f67d600cb2b91342125d92727cabcc3ad57e3e3299fdab3e38cb56387356d916e1cdbb9523abbff80ef5693466b2f88bd04d44afda1d985363805f519bde6286f3af9403762628e280368740e8533c2b6d10adf787f053839d3fe5be789627eb7e158b165851f1bc575ff4825abda6c562a1ea4eed78bb9449cf1bc6431828b7c66048311446f33978531fb3b455cf6800160c4732041ae4b30e6e4a1f46d0f3986e3fa349426c8722dbfc2468ee7eb853eed2052b64f12cae5cd0f3ae04b3505c271b80c827b883808bcc705e7c3e8e4a48be620590b2e6258ad68efcb806fe1428f1fd9feae68f9f8390f18765ba14dff6b63d55a643df346764f1045db570ade82fc9a2b697e1b152a114f4e61f6f4a0ad41ccf55e35d520531306bc433092331a07b3d26b11e4c1ee82650d6a11ab617f9b3272278b80f7b19e23afde79494694e83f90e015429e40728e70d33c0f6207412351201de2cb989cbafcc3da9f5b591c696bb781f5018cc3640810997e07c189c3b40e4cfe8a937badccad48ef5367e3cdead540593d5177d04b95d6784559ac3deb1bb3576c9c09096e703a564b5a729ddb570efdf4b55726ab389882d0e322c5341897df3628b65884a84dbcd148f4313144ed1450c0e34620d65fe2b1b4aa68ce0cfe7acf87cba18a8fb9ef66f3647bcdd4b274624ccfd695c2cb17333739733babc5062d706d468a419030aa7b20e961ba2d09d7411bfa707ce7f0329ae69ce78a99da05d31e2ebfc389316796932970973e584eedc69cba7029f7942d5ce39848fa02f290ebd5e09046dba9485433526eced97d1e1d28925c0527ed04a1384e7645935c959848e18462a4e663d36cb5864243bcf2bf6676c07031833f82bb431e9b0dab6414f8d1997eb659c013c37eb38e3c551dd9e7dc556a4dc49e6485a7700b785f326b34b67404117186900e9f7943b6c0e0aa8f3d31270c602bd2f2a31390e1fb4f9de0892af079da8249a7e44fde0cde7e4d6133f1fe78db7537ccbceb8889060d2515c9ab53c5e635c6eed701a484abcac310fd810fba502b6685bc7c20e35b47eec444a5fc52fa2d6bce99041df3c5f0b7fc2e76c6ce1dcacdd739748413d6e67bfb46a681a962eaa668186fc3a297cdd806f1a8a72dbd4eb7ed349ff99606b7dd921c2a526b86b4065a910041f33b02a8613082de45460d1eae989062154fcd2f6204ea67e3a9e99fcda2cd915abd6ee5e7a9d7780251282fc8cbea5b6296cff87ba9a752a44b8bf3542754035cfc2dca2163e344e036f4f385ea093486edf34188c6559eb1e2acddf565bdb2aab9d1c1dc07f3836719b2a9e22fbd5c0e4e5c9ba75317d182657d943ea92409916ebeb3a5f122a8f73b6345fdb5314e689f5a2b1a0f7ce051dfbf4322a1fc45c6db7ddd70aaa023981f9272b10a8b591020b5d4328138d75b14c3c841dccb791498b36e99fddc27cc361df2a0e630e3531c7c483ca47c32981711fbff1b2688d5d4ba2d9cd1a588335e0d53747516e9922a626e6296ab970e2022c984c2e6135ce3d68e7254e84285a2bf27420657066e63a94833a2c1b288c066f68068c6993a566ac79fdeebdb997d908687583ba7972ddc9ca5aa3209e099e551a05f0a43aa505c6bb3ebd39ee7d2a86f8b9c2156f5ede702aab2a9beee288a2846f4b8e3b2a50a1cd4e5cb7d8bb683e52c6bab500f405219a2606a976acaec1f5e69710018010ec31167c44854c1e739d75d4532b4f682b6853f70d902b84e26c4b1446ea3867942086f79c9a4f04344ea93ad75a4f946b294e4afb1941eafa1112b4d4219f1cb441164a8453886e7b56b556dad74643594f7c4ed56014f7fc5d7efc43dc2d26ade7c2da3f40e0e4edeb8eaa4af8ee2f9cff647256b6f6824fc2a76199b955ced736ce3a566e83987a88601e2c96fa4d19bd218513b3cb20e8dc046244acc5f1ba676a96990cf538e3d30f4edd96f21d2660d4560953e8424f99ef61bde3e6406e38e4d5260c72e50d2853f59a04a622def88de3d3f259bd902018cde1492f79649332c90ee04fb4638c1d657ce327fd46d20be4caf2675555187f9fd060e7d253ac37ad96de992fab5eb49c4d496e7fa896db9ba6894e0b43c602c60a22ee1c0a41a6884510ff7abd411cee6cb5b97c701085e0d2bab51cd39aaa745582f75ba22ba886816ca47c892d0cf885c90768c739828352aabb61b255f905eff1b3318db851a6de49164957d7a093e2ddd1dfe84edf90ef5d4cd517180b52f6a8a0cc0697a966bbd8a01dad606b5cf29bc4a3120f4a5bb017aab01c884527bf76222126b98af3f1d715aa5ae74f12a776649a8584bf2dc01a7e14e8d59567dc2ae2a4e6e38b2ce94f34cd7996eb5e0ad08a1d368793ae56081eaf8d5946c53b68321f0a0447120c3e1e4c21b0858924d783c3fc9ebf5df19af6bf2c7a1876f92249d47744c0b9ae62db7fbdca9c3a09434ea1acbe4f684ba06cee49a14f58d6f24f353ad754158a13b3c4f40d98283558f15e46b56c326727a9a20f2c9cab1997066b39be7d3db99e12f36f9a455f85498828f5c83241fd2e1b76626fb42cfa05e9f399edb5c718aec93eff382a4", 0x2000, &(0x7f0000008a00)={&(0x7f0000004180)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x23, 0x200, 0x200400, 0xff25, 0xffff, 0x5, 0x7f}}, &(0x7f0000004200)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000004240)={0x18, 0x0, 0x400, {0x81}}, &(0x7f0000004280)={0x18, 0x0, 0x7, {0x6}}, &(0x7f00000042c0)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000004300)={0x28, 0x0, 0x5, {{0x422, 0x1, 0x0, r8}}}, &(0x7f0000004340)={0x60, 0x0, 0x4, {{0x7, 0x80000000, 0xc1, 0x9, 0x7fffffff, 0x6, 0x1, 0x4}}}, &(0x7f00000043c0)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000004400)={0x12, 0x0, 0x0, {':\x00'}}, &(0x7f0000004440)={0x20, 0x0, 0xdeb, {0x0, 0x14}}, &(0x7f00000064c0)={0x78, 0xfffffffffffffffe, 0x4e1, {0x2, 0x2, 0x0, {0x1, 0x3, 0x8001, 0x9, 0x1, 0x5, 0x0, 0x7, 0x8eb, 0xc000, 0xc5c5, r6, 0x0, 0xbe9c1ec, 0x800}}}, &(0x7f00000065c0)={0x90, 0x0, 0x3f, {0x1, 0x3, 0x7f, 0x9, 0x6, 0x810001, {0x6, 0x2e, 0x80000001, 0x1, 0x2, 0x1, 0x1, 0x1, 0x3, 0x2000, 0x5, 0x0, r7, 0x8, 0x1000}}}, &(0x7f0000006680)={0x48, 0x0, 0x9, [{0x0, 0x20, 0x1, 0x1ff, '&'}, {0x6, 0x13, 0x0, 0x80}]}, &(0x7f0000006740)={0x160, 0xffffffffffffffda, 0x6, [{{0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x9, {0x1, 0x6, 0x1, 0x4, 0xffffffff, 0x3d08, 0xffffffff, 0x20, 0xfffffff8, 0x1000, 0x8000, 0x0, r7, 0x7}}, {0x2, 0x7, 0x9, 0x100, '/dev/kvm\x00'}}, {{0x3, 0x2, 0x3, 0x5, 0x7ff, 0x2, {0x2, 0x8, 0x2, 0x9, 0x47ed, 0x4, 0x1, 0xeb, 0x9, 0x9000, 0x0, r2, r3, 0x5, 0x1}}, {0x0, 0x2, 0x9, 0x9a, '/dev/kvm\x00'}}]}, &(0x7f0000008900)={0xa0, 0x0, 0x20, {{0x6, 0x2, 0x1, 0xfa00000000000000, 0xfff, 0x8, {0x1, 0xfffffffffffffffe, 0x10000, 0x2, 0xba12, 0x5, 0x5, 0x20, 0x8000, 0x2000, 0x9, 0x0, r11, 0x7, 0x80}}}}, &(0x7f00000089c0)={0x20, 0xfffffffffffffffe, 0x0, {0x3, 0x4, 0xfffffe01, 0x401}}}) sched_setscheduler(r8, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000000}, r8, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:47:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) read(0xffffffffffffffff, &(0x7f0000000040)=""/86, 0x56) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x2, 0x40}]}]}]}, 0x2c}}, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), 0x0) 11:47:05 executing program 0: unshare(0xe060600) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x40, 0x40, 0x0, 0x1}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) 11:47:05 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:05 executing program 2: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="00040000000001000100440000000000ffffff7f800000005a4d", 0x1a, 0x400}, {&(0x7f0000000a00)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300000000e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000009ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed4103", 0x783, 0x880}, {0x0, 0x0, 0x11000}], 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000380)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x141842, 0x0) [ 496.751816][T12886] loop2: detected capacity change from 0 to 272 [ 496.768897][T12885] 9pnet_fd: Insufficient options for proto=fd 11:47:05 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 496.875833][T12889] validate_nla: 4 callbacks suppressed [ 496.875859][T12889] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 11:47:05 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000140)) [ 496.968463][T12889] device team0 left promiscuous mode [ 496.998911][T12889] device team_slave_0 left promiscuous mode [ 497.025725][ T20] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 497.040529][T12895] 9pnet_fd: Insufficient options for proto=fd [ 497.046011][ T20] ath9k_htc: Failed to initialize the device [ 497.051685][T12889] device team_slave_1 left promiscuous mode [ 497.067897][T12889] device bridge1 left promiscuous mode 11:47:05 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 11:47:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, 0x0, 0xc) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000002080)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xed], 0x100000}) r8 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r11, r9, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002180)="6227b3d0a6ba9a38659fbbe92062043132ac7b18c1633325014603f439955236f2f8cbd6278988f699ad4c27224c99ac261e971aa577317ea04d92e48cf84f4058db3effc666a0155381231bd91d858ad278216bd71f5b5877ffe82f8c975c7250aca831f6b1aaa595143cd2a9957fb6b96cb3336c354073d59e2d3ddfcaac0f829735ead193430a4b64348d6a6f9580f378bb717b4b80e5832bd6c69edae42be22c14bd9c00056d65c0ad3bd5c64f6969a82fb3f2529ec86549a275c0a945007ad4dd1715ac25202f8cba2687d29f3b617b9d2f979eb4f57db21d12348333cfc4cd70845073b54a3715ea6bd78a4c97eb396dc0eaf073f5d4c7d89715540d09c5fde3344013f4a7c313f371d2d844fac6cf15ec46fdc45dda6e2749b1f045ebad56908319b38b20853b99b826558e3f5175d14a7eab2bc2b85694f65b1249cd6537ea6e9dcc77118a93e65a7223d02186e1f5f474bba7bf7ca5ef769dfda09fe67d9da4a98f6a0d13ab0f19f9059b247a9b5ff795dbf9d3f63fc2d396fcd2b059187fc66b7354a692430c5f27640c97f38b639291b67da9b20147245658876eff0189d8843a61f520681a4c50bdefab0c68e27ea1d5e7e7bf43c848ea885523db503f1151a35a78ea10054749b965fda497f79449a88db2f2cd73d8b04bd46d249e6e740917c35262b0165bd38d9971b57f28916cda6981529cddb7b5acbf2673c083fffd779a1a9554073195e31a3437fddcc1649576aa41b9083ecb23552acad8623ebfa726f26d2f2fd9fc54b649a13279f1855ece5d0cf9a1e04ac49a9e428e71e23762241344902173d8a6ea30fc480eb9917dac0543759e664a115a32483ab29bae0ff40c5e378f0fd8a22ed24c62965e07dcb46c5317a049ae4c3c8e1c457286801ed192814267e51f30a8f9cef132243d9cf2f4f42427985777a46472328a29f932ccd02ad51d2041dbe359e7216c61f8e093d9f40998a7e4ac304058b499d92f4b7a7cfbfc1572de693e0f8f8f83ac4791172f16174ee411f5c8e895d981c8288cb3d917265ade4846cbc8e6e00feabf8afc467d3876b436b7b97b9dc93cc4927248ce41ffd7b37d051628cea27375519c40006338cac7dbdbe395091514f26e8ab6a637fcdf90116b5eb6a66807fadc739da3a48a42645d2f247a1612b6ca643ba90573f765786a965c85d8b04e5cd3aa57f8da1c2836c7e6afb02edf7c4ecd8624701937e6713f8e0b21025d26f899726cce7b868041001e8ddb29dce6af1293fd3aa8edcfc69e3d8b8d04ed90f031ace18ae81539c3f769fe0e30b95fd0f1b5ae7c88da7f99bc28982a466826ffe5a0f14876194bba1de27bcad784c516f063eda684042292ad7fd1aadcb7ab2fb4281e71bcbecfac6fb11a98270f55ee1f9b38aa72227676491d8dbc73f86b137fa53665da5f4ab137cfb5cbca6fb99425207f1daf9885c7712663c5e47f47dd99795908110a48c23bd328f1780eb4c419ab142a10697f138041d9872d00aa5d9bfb3da873abd590dbe6d8825514dc11119fc50053bae615f1f6a0d9f93ea423a5cebdfba251ae1b2529bdcf455caf4bd46dc5ed4de14ebe19e11be7ad0ba1e1e44431662a2175b29494b9d6f9649be5a0bf64dafeab5f7c95b6672e0ea3cd6c0ee0f0093349ce198b38dcce1b75d0c75255bf251a0a881169e29afa563e73f14d9dbbf1f22641c9aa175ae164f803d50ed9ad507f0629245c4bb5c72c6de3cdf3a5d041bd254dd1dee90deef04e3e2c4d85ba9fb423a3efdc18aae8895a34938b128f2cce9abbceeded82ffeefe2264454b76603af77f8c8c1b299cec36d1b174b8f97427473f6974a266bb7a7d58762914f65504277c262b7ae2b881fcbafb5630db2a415e4d900849296e60aec8d2ea4ed455cfce891dd6a7afbf6265ff9c9c0ee64239ca6f1dcdaa723ea236033695ed9dfffa79042c203b528c71b9d101e8146d292517a82999fd7724fcc1fd0f6b9aea686209b2871df24b5f3f015f78583e620964400fbcacba317d41c46e31a7b7e6640099c139b0e7beb47f6ad1a472aa4e9a42434050f71892c8d9d38d4178720ed428d9988058b6385d3e8bf19d477ba728d600472a42e927dea3131df561f0df782f8debec0e6a7711dc813e6fd92f0fa3b5ede79a59db26dba2e92b2549398f18074d3377f68617c86814fd07053793ec7a86b19d6f07e50121b24dc215625f7e7949d9ede9454c427326ac0d9f4885b213d4d3ebd746130ac8d6eada968fda4e4cb8d596ae96059c67ccc2477820b3aeb4197fc0ed8b73792e1bfa24bc1c2c95dabe92e143307056bdea149cafeff6af09423b40ff492dcb9a267debadfc3e7e92a52a296b7284a424a61e980aa9435d1338998e6ef675a1741c1370171e3eb6c44b5601b34c932abce5e813ff65b388b5afb4e7626db603102eb5a61238989b7b90015a3213ff3fd47bb47185a9d838f69e8b2c15118d32c2da71925cac55a5d4357cdde0aa183582717f2bd652fa13c1fda67724ea399387ac4891c598542aad3eff507cf3d57d1a16da79c3042a813e4917de8f51677cc16be90ce0b28713f2a4ab0ee924cf126f05804067e5a31da3c61ab8d6f6333d91b152fa925ae739d6b6c4b003822f9c64fc6a75ec26bca9e80786c2843196f49a89310892ee80eea534a60cdb172860b000cd6fdcb69053dd1a280683aaecead416613db0a545fbd6866967bae201aec75421d41c882780dde036337394e1e553ed7908e6defe122c9c566f361db5d80773b8af7ffd607781336924ac268a3661c01b7e019d64ad02b9dbd522b5f928bce2309eba8061beb224ba9a57a937fc01d18a200b6f113b41a826a91f6171cc332152cad0beb6bae6e3f22997112859faf0a327e3bdb6fbad8336575ee29eb8fd5951bb3c1433966dee8ef6690ebcaf50a75752ebd1d9535ad6c96f94c7afa608b309318787da5d133aceeef7100373258dfae130475dd2aa8fb229224e080fbfcf212b29a2fe9d27bd511e8b2a5ed1868f21b3ae7b3ec3f71c7f7d499cfafe099891363f26dbfb7457d21514c1194912fdc2e3d13c34099db707124bd0ec5f1081230085365859d0aa7141adcdecc985b12eb863f6d77338b277e4c9793048b21535f1299a8db32cac5d44fba996e4f4019875cbac933b361315ac551c7c4821765ccb6ef74c6ef03ef9da1e4f80944e3acddd9bf9fef463dd4e250ddc4e5ca31f6a95ca4fcd2574db36949f9503e5e946926ae80f757b053de5a6752b3ce43ee304a38c96456baa626a99c414e6afe7b3ff63f3d4b0ae276f49c109694e902a0519dcfcc409d0f2e603df8021fa7180794565dedd2dae939017ae98104685e4a4b9d1332a5b1fd05006d7135be18fbc0760e7c47eccacdc260dce1260a779e76008e4b8d9fd7d0d0efa0eceb018bb6af2a571e8c639ce9f2066bb3ae3d3884f923d29c87559d8d0b86fdd087f0d7e11637bb65a6d702e0f945a75c4dc6a51c6ef271bdf20a0c07bbf75fb155f6dcbd2e31ec8e0aa8933e7d3b8395b230946e4c270742b5cff70555f1998564107515f82b30d70b3f222f45aa5b4bd1ffe48e8700fe966c279dbd49910c1baeec2a1491c285173c861fac2ca4b6cb1556d0a59a1f612684886f6af6e6191cc00629ea45a610540f144482585378d4ebe3da3921751b9e3549263d3e20aa16a41654f62b526244c0eff4b78188f2240f1ee2d93d34315249597149286b9afc0c06a407687cb9c8eea2608a206a765bab213dee80dc39dfbf7153a9a6b1d77ddce10f8203fb3f4b6912d5754d67d8fd67e56216e73242cf9c3234d086d0e5dcc3d56f91549746e712648036783e1912c118ecc4d328fa558580b97eb61b2e59f22aef1e0e8a3d6961ee497dcfb3dbe98105e7664631a5deebba5fe8bb9e8ccfa756d1c43a6a542b160669d275c71646843a118d283823943c90cc3cc669b5382a9e983fa172873e03d36b28e4c7eda3beb3774b77f0e52eb017c8ea61f0e4616483a620bf116c2befb84bc0ac41bb6ae494983140125cffd8c5f35861f6055ddcf528cde60f4ecb2e149f6402208177db99e086fcc4af07419337426afad2fb743d7d774263d2b2499109d51772c2fdafca5a8247a2a5833d455d06b0da06c7aa062fb91e771b672aca63caae32c27e02b5f3bfd3a1bafb8c061203d58b5feb0d0f0d79ab4d802092772b7dd1f1ba66e13c33b9ecf1ba899cc4518546e5af5ed0da14bd4ae1a54232504e7bef92fc446479b9651e9cd5bb0939cf1a6d7090b6fb1cbc86909d503232889441ef17523b0cefdbcaf81d06db70a383656973a7ae376c1b27b4e3adda7b4f71c5726db5f30edfab0722132089381fdb1710348943aa8b60a58d547eefc743563615e586a691f8e1e247c65421fbe6cd91b235c72f8b69aa905c80f9683f0ae538f2cd31e75db173bfcee4a5bae2bbd1d9051e4c3063f5ae825981dbeb9d514f53e711c5e85254e30796b38a674ab90bf0cb309f9303c9a4a0385806a49781c7b56a29aee2bb744f412e3a1540b040f7a1fb4849768467bc1f0245f67beb80bda39cd7af6f09ffe83aaddc9fc98a13b043d96cedc66d8543ac3696ba992bfd5e81efcd315a701eb8959984b154b38609f52db710c93573fbcd505dd83ecddebf0c72466e08ac6d23a3b8e36cec6477591b22c4f416007c7130623ef4294ff0d9fba3829668b72430fe50bf49236b24ce37e0a0c7b82dfdedb9815f8c9267819daacaec1e0a4981f1b6e723336aaa172c01d4a2b53dfd73bd2c5c9be16a2855b94368c88c4b699ce6d2c8801535f8fb37bba2a8056c75e5e115225612b99e5de4b690e2b1fae3eb3126734ea09bf3563ba154db832a6bf875921902df6a2f8689a84276ab84279c0ae4b28557df7a8ada29ab7f778be7e43225507cf543654fb4f9c28cc0250064feb8e3b14d381f12c328ae6fc323ac87673aae809ee96a83e8d7c6ac6a9d80b8178b4edc29f7de88f40f6be684db609fc7d71ca4fbdc1f2750a837f025138f3923cf6f0b596434efe29487d2317b17a9d6cee139140f639ff53b1ced2bd55244265e221cc880fda18610e152d16732cbe17bdff5f17b83a9a0addadcf52c21d7530c56571a85dc269bfb1b6ba3191706089244376575e33e691b1926ddc21dd93ea5496367621dabcb22b70076c3b784c4abc6665a90757ac0aa2958ab043c20ed133852df5ac96964f4fb2a266c865480ce8ae22e77df599c5196eb7225235deabd687d24cb40ed284bee09a626edd23c5765bbfd86da5fc3cce6ed56c53d6b93f119f627e80f4728ba180ebd342abef7483abf9cea995e76ba4a644815888f8efdee28e7e9a27684a408663f6e6735684fd35580b179963e6e391ad9305fafe0e60131e5ac2d16d95bf08166b97b4b583605558734e4f2937f6c37414b6b0fe484ab81029e1313e3cea80aa3995a95e05cf4ecb5e48e4c2365de22ad5185fb617b00915ab5018daede54eba63aa01da4a35a3e85e8648b331e3179744f763aa9b175a123d9fd4c598bd01d4cde3e9f09a0e44d8cb752f7a76ea54d792df7e873255b0f99b5c533b2a15ae110c8f219ea6e72b4e536dc57043fe119246fee780b67e1be4cc88f0b5b60f44c296f98e07a374949e74d210a3081147a550fc3d4b504e78ae1f682021b6674fc49dcbb2e70c6472cafb635e40dc99cda09911f5bd56a96eb4b9040c50fdb85cd9eb40e0e21a7f0cd8307702c2ec72ab3ea670a622a2ad52b24fb3c53cfd9dda096c11491d53162f6755afbe2009bd8b0a6672e69f43bf7529da657b81b31df3f6aedc2c23a83154a7a7d220bfbaa6b0298245162113f391ee4946d725b8f5c630e0df14dc28e1ffc7d79ec5235d6ce8a0f2563c3ed13bea392cac8472fbae062f49bf94cf99afa89a08769e28766690be29f1264ed3bcdacde7a58d90888c186b4abf9d964531b5c7b2d6f65d18d8e501d32a0551630c58d3ab16d68422fab94223b75e71a5f9f47243006f8267497c20e3738d795c39ab0abf4f8ec2cf7918b3e0c8498807b6b321b576142bc34cf2ff085fd9831b9192687792faae8f8e3c3368ff5a02a504cc5532ae9dd2696b6f7f2b201f8bb8a152598c3f498780cd0d0dad84936c99fd6c2b1ff5b0020b6c72475d42cb892ef378aee7492249c28aa95f4d12615b23efb843d2704de6265a61744e37d51c028abfd241ce3a6a00410aa60ff69b9b1f484c9c06e3a9be084aa35a35dadd233d3b00598aa80b5be266835437a70cc09f27945e887bd5bb68bf231be5f9bddd1a51c0d17c39b4da12f611c954d34f2c1e22873915cc67c4ee6ab6ee83aa75b4464f476018cab0e443679248abd4054f8706f4b65af3c908683a92fe398761fa88ff0b311118c5083f681e4903cc642887a0117680eec905ad2450aa935f507bdeb7b04f7d09b13f41725dfe8f2afd806b46dfe5d53c033eaca0208331507f1180c1e999de236453e1ad2e0678ba28c2004d40c62c9ce25298c8735d0aeacfe3ba11ab8b93401666695a3010120f2ad7eea1bd74114689fee38f2a437043cfb80491a47247dfc04a9f83334db52e19ef9b0f63f04a449027ddab7fb016b6183d4871fa9c50cb1fa75be3530f6c7ef831396da3550948c914196e71eac71e46507f14506ec403fd89d95cb5d1f7121d650e6ef967a39cf96f81c220940f6bf4621faf10d07fedf120bab59a96cd98879e9645161efeddee0e502c07859fe813d68b72402163de65c4b76f69dbbdce56fbaa309a14a8af403c6ed026473b2a1b38e4616df91c0e7f5291c68f9b6a30f596ad937f62257466ca1726733029957c608dc31a8afbacc1253965e2443a90c1250a75332d994da5cb9d5dce117a063384fcac580016ba5fb2cbb07b54265372d79a6e336002a86bdab25c5a396fec934568800934060cf4198c1fc29342cb4575bdd1e7d621e5b129b60f025f6dd4bad191ee68ef3094cb11f5eab82d34a922b23ab59d1a9100cd2b13ce2ab05137082624b21b8b9f2b918b9fc2cdbefc297a693f385822de11ea23e33ad00408cc2e1ff0ce413b36de07f9b08b69308aaa0613ab6c4c17b429abfa6b5e10d071abbcc4da979fa0c60a39d075d3813e2caba8b2fd1fd0c89c399ace84da8a4ed57bab714d6a02174d5c8a52337f997a1b8b56395b6c9b82c584d36ebd48b41345dfe53be5f5f4972dd658aa31aa6f1f052ee40367817a747ec4b52a5fcb631ccb9c8b4a2416a745455f55e533bba6d2dedf2eba240e23d8efe0c00cd61c5b0eb377cf508f4bbdb169b4e8ad4c0f5aea636d6dfe8c4866df710a4aa0b9ada3f4e3c2dcc636a66ac5fa853992d7e4157b199597bb1fd2b4948c13e664d96848c317038dddc4e541315ba866378544de3cc07c0ff6c7e2272dd12929751aca063e01cce17ffbe3aaa0019f5c89a71687863322bcca2e53bf8b80c705e5a4303b80e6a3e74f85a5089de2d3d106ddbe6d7c4f6adcf6317deda8e9901f523ee6be485d72fc28c64e8e95cb99c2732a39ac8260f2e0badf46d2a5b346cb0b155313a8e50fee75e96c3d1a6fb6a48d2458df81accd7e7c80fc13f3751be5a9d7382f0e0818057075a7a3dd53e4896c9ac8a721eb2297357abf2b4ff4869bc4b55a03e2fcf917121c91073fe76e3252d266b7c53fa80d7ce40fade326d07effd3c03f847fdfcdfac2a6d3618c332f83069cf2dd84a5e7e73b6ad403139f50d6efa5f68f814c1a936877d2cb4fecc5b21455bd6f168adb274bf74643d9c7821994e07d4e2953c17876d0172e39c542b694dd5d480946419e50e2bacc85b2c81398a976f55beef44db89743ef1f4cd8fad05d5d702a0855220422c0999db0fee5d5076fbfb4579001a84d098cd47b1bbe140ca4ba72d7dc3b601f706da6b6bda5aefb3eb54e8f12d18821810884bb407c977f839e53ec2399e13683f1441ab00fec3429512c68915813209ddafdafec5a7d58775cbab0ca038f466f3f16edb30d4624177d9c9693e4a07dd779ac7fd9ce444ed51e6d5233737fb714ccc3baddf09a8779fda525e4f271d8a6dbba7e7bb0aa42e044b364e3357c3c1b5126415d8f4f6ab9bd7910ef0cfee3af1a63698484919677d46fb0073ea18c4fc1ab10f99bce706470e6e5db6a7209a9b0f7c174cf28eecae1bb96514dc0dcb089388465fc6438d1410be60c7845baa8b451be449ff8ad258f8bf3aa131f6d2cd00206b0b26318207574b7e5190845531b4104e88429b4442f3bc44e58e4d07adab6fef036891b4aa6865357d71f0abf710c033f64bc368271d70b59412447ac02cf89a0e4acd3ff69413b3ba83fead366c416218ece5ab178bb095ec3d601c9866a1c012b403ba1d4cfb6d890511ddc3bd9d860de47f3a7786f7d50732a72238ac0788aee2258f7bb2e5bc81ddfbcd2838368480149790826ca23a165ef85cb1cf79f2752e9d951e85db8d458dc1f196e36b0adf758f78ba4df11466acc2933a4a0fe2e3adf957873ce86c323d0a9cb3630de62cc018535a419f362bf7920eccf8176c1478f687349c0899013f4933e3cbc67086c99561556e7f3cd48e21abebb54a2953345ee3da6dca587128af2387bbcc7b9c408208737ff4fdf31114e882de2c41d7c64a7026d82fd3cc429fcfeb49ff8b58514e76354ecc8f2a7b9d9d74424d416d70e332bde5fcb5912d96836cc4ea884704109432a72975d3fcbff837016c3fbf6963d1a66d04b0a0710df8e9d0186db1637e5f513acabf239afc18a82f1967e0ed985a8f507824ed994ac7ba74600f4216ea5f74ba751f5aa5362ad179e3478343672ca358e5c7cb5858c5fc9cce3faa5aa60360b9827bb649f4c5e2f5ce9bdf41c7074273b73f5e6e7a3a2df2379cd7288b4b3e6c602f942dbe4758ff10dcefc537b83dbc9fee6d49820fca74efc276b8a6fad26aea3be0c500fe5657d1af757d652148f67d600cb2b91342125d92727cabcc3ad57e3e3299fdab3e38cb56387356d916e1cdbb9523abbff80ef5693466b2f88bd04d44afda1d985363805f519bde6286f3af9403762628e280368740e8533c2b6d10adf787f053839d3fe5be789627eb7e158b165851f1bc575ff4825abda6c562a1ea4eed78bb9449cf1bc6431828b7c66048311446f33978531fb3b455cf6800160c4732041ae4b30e6e4a1f46d0f3986e3fa349426c8722dbfc2468ee7eb853eed2052b64f12cae5cd0f3ae04b3505c271b80c827b883808bcc705e7c3e8e4a48be620590b2e6258ad68efcb806fe1428f1fd9feae68f9f8390f18765ba14dff6b63d55a643df346764f1045db570ade82fc9a2b697e1b152a114f4e61f6f4a0ad41ccf55e35d520531306bc433092331a07b3d26b11e4c1ee82650d6a11ab617f9b3272278b80f7b19e23afde79494694e83f90e015429e40728e70d33c0f6207412351201de2cb989cbafcc3da9f5b591c696bb781f5018cc3640810997e07c189c3b40e4cfe8a937badccad48ef5367e3cdead540593d5177d04b95d6784559ac3deb1bb3576c9c09096e703a564b5a729ddb570efdf4b55726ab389882d0e322c5341897df3628b65884a84dbcd148f4313144ed1450c0e34620d65fe2b1b4aa68ce0cfe7acf87cba18a8fb9ef66f3647bcdd4b274624ccfd695c2cb17333739733babc5062d706d468a419030aa7b20e961ba2d09d7411bfa707ce7f0329ae69ce78a99da05d31e2ebfc389316796932970973e584eedc69cba7029f7942d5ce39848fa02f290ebd5e09046dba9485433526eced97d1e1d28925c0527ed04a1384e7645935c959848e18462a4e663d36cb5864243bcf2bf6676c07031833f82bb431e9b0dab6414f8d1997eb659c013c37eb38e3c551dd9e7dc556a4dc49e6485a7700b785f326b34b67404117186900e9f7943b6c0e0aa8f3d31270c602bd2f2a31390e1fb4f9de0892af079da8249a7e44fde0cde7e4d6133f1fe78db7537ccbceb8889060d2515c9ab53c5e635c6eed701a484abcac310fd810fba502b6685bc7c20e35b47eec444a5fc52fa2d6bce99041df3c5f0b7fc2e76c6ce1dcacdd739748413d6e67bfb46a681a962eaa668186fc3a297cdd806f1a8a72dbd4eb7ed349ff99606b7dd921c2a526b86b4065a910041f33b02a8613082de45460d1eae989062154fcd2f6204ea67e3a9e99fcda2cd915abd6ee5e7a9d7780251282fc8cbea5b6296cff87ba9a752a44b8bf3542754035cfc2dca2163e344e036f4f385ea093486edf34188c6559eb1e2acddf565bdb2aab9d1c1dc07f3836719b2a9e22fbd5c0e4e5c9ba75317d182657d943ea92409916ebeb3a5f122a8f73b6345fdb5314e689f5a2b1a0f7ce051dfbf4322a1fc45c6db7ddd70aaa023981f9272b10a8b591020b5d4328138d75b14c3c841dccb791498b36e99fddc27cc361df2a0e630e3531c7c483ca47c32981711fbff1b2688d5d4ba2d9cd1a588335e0d53747516e9922a626e6296ab970e2022c984c2e6135ce3d68e7254e84285a2bf27420657066e63a94833a2c1b288c066f68068c6993a566ac79fdeebdb997d908687583ba7972ddc9ca5aa3209e099e551a05f0a43aa505c6bb3ebd39ee7d2a86f8b9c2156f5ede702aab2a9beee288a2846f4b8e3b2a50a1cd4e5cb7d8bb683e52c6bab500f405219a2606a976acaec1f5e69710018010ec31167c44854c1e739d75d4532b4f682b6853f70d902b84e26c4b1446ea3867942086f79c9a4f04344ea93ad75a4f946b294e4afb1941eafa1112b4d4219f1cb441164a8453886e7b56b556dad74643594f7c4ed56014f7fc5d7efc43dc2d26ade7c2da3f40e0e4edeb8eaa4af8ee2f9cff647256b6f6824fc2a76199b955ced736ce3a566e83987a88601e2c96fa4d19bd218513b3cb20e8dc046244acc5f1ba676a96990cf538e3d30f4edd96f21d2660d4560953e8424f99ef61bde3e6406e38e4d5260c72e50d2853f59a04a622def88de3d3f259bd902018cde1492f79649332c90ee04fb4638c1d657ce327fd46d20be4caf2675555187f9fd060e7d253ac37ad96de992fab5eb49c4d496e7fa896db9ba6894e0b43c602c60a22ee1c0a41a6884510ff7abd411cee6cb5b97c701085e0d2bab51cd39aaa745582f75ba22ba886816ca47c892d0cf885c90768c739828352aabb61b255f905eff1b3318db851a6de49164957d7a093e2ddd1dfe84edf90ef5d4cd517180b52f6a8a0cc0697a966bbd8a01dad606b5cf29bc4a3120f4a5bb017aab01c884527bf76222126b98af3f1d715aa5ae74f12a776649a8584bf2dc01a7e14e8d59567dc2ae2a4e6e38b2ce94f34cd7996eb5e0ad08a1d368793ae56081eaf8d5946c53b68321f0a0447120c3e1e4c21b0858924d783c3fc9ebf5df19af6bf2c7a1876f92249d47744c0b9ae62db7fbdca9c3a09434ea1acbe4f684ba06cee49a14f58d6f24f353ad754158a13b3c4f40d98283558f15e46b56c326727a9a20f2c9cab1997066b39be7d3db99e12f36f9a455f85498828f5c83241fd2e1b76626fb42cfa05e9f399edb5c718aec93eff382a4", 0x2000, &(0x7f0000008a00)={&(0x7f0000004180)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x23, 0x200, 0x200400, 0xff25, 0xffff, 0x5, 0x7f}}, &(0x7f0000004200)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000004240)={0x18, 0x0, 0x400, {0x81}}, &(0x7f0000004280)={0x18, 0x0, 0x7, {0x6}}, &(0x7f00000042c0)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000004300)={0x28, 0x0, 0x5, {{0x422, 0x1, 0x0, r8}}}, &(0x7f0000004340)={0x60, 0x0, 0x4, {{0x7, 0x80000000, 0xc1, 0x9, 0x7fffffff, 0x6, 0x1, 0x4}}}, &(0x7f00000043c0)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000004400)={0x12, 0x0, 0x0, {':\x00'}}, &(0x7f0000004440)={0x20, 0x0, 0xdeb, {0x0, 0x14}}, &(0x7f00000064c0)={0x78, 0xfffffffffffffffe, 0x4e1, {0x2, 0x2, 0x0, {0x1, 0x3, 0x8001, 0x9, 0x1, 0x5, 0x0, 0x7, 0x8eb, 0xc000, 0xc5c5, r6, 0x0, 0xbe9c1ec, 0x800}}}, &(0x7f00000065c0)={0x90, 0x0, 0x3f, {0x1, 0x3, 0x7f, 0x9, 0x6, 0x810001, {0x6, 0x2e, 0x80000001, 0x1, 0x2, 0x1, 0x1, 0x1, 0x3, 0x2000, 0x5, 0x0, r7, 0x8, 0x1000}}}, &(0x7f0000006680)={0x48, 0x0, 0x9, [{0x0, 0x20, 0x1, 0x1ff, '&'}, {0x6, 0x13, 0x0, 0x80}]}, &(0x7f0000006740)={0x160, 0xffffffffffffffda, 0x6, [{{0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x9, {0x1, 0x6, 0x1, 0x4, 0xffffffff, 0x3d08, 0xffffffff, 0x20, 0xfffffff8, 0x1000, 0x8000, 0x0, r7, 0x7}}, {0x2, 0x7, 0x9, 0x100, '/dev/kvm\x00'}}, {{0x3, 0x2, 0x3, 0x5, 0x7ff, 0x2, {0x2, 0x8, 0x2, 0x9, 0x47ed, 0x4, 0x1, 0xeb, 0x9, 0x9000, 0x0, r2, r3, 0x5, 0x1}}, {0x0, 0x2, 0x9, 0x9a, '/dev/kvm\x00'}}]}, &(0x7f0000008900)={0xa0, 0x0, 0x20, {{0x6, 0x2, 0x1, 0xfa00000000000000, 0xfff, 0x8, {0x1, 0xfffffffffffffffe, 0x10000, 0x2, 0xba12, 0x5, 0x5, 0x20, 0x8000, 0x2000, 0x9, 0x0, r11, 0x7, 0x80}}}}, &(0x7f00000089c0)={0x20, 0xfffffffffffffffe, 0x0, {0x3, 0x4, 0xfffffe01, 0x401}}}) sched_setscheduler(r8, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000000}, r8, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r1, 0x0, 0xc) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000002080)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xed], 0x100000}) (async) getpid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresgid(r11, r9, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002180)="6227b3d0a6ba9a38659fbbe92062043132ac7b18c1633325014603f439955236f2f8cbd6278988f699ad4c27224c99ac261e971aa577317ea04d92e48cf84f4058db3effc666a0155381231bd91d858ad278216bd71f5b5877ffe82f8c975c7250aca831f6b1aaa595143cd2a9957fb6b96cb3336c354073d59e2d3ddfcaac0f829735ead193430a4b64348d6a6f9580f378bb717b4b80e5832bd6c69edae42be22c14bd9c00056d65c0ad3bd5c64f6969a82fb3f2529ec86549a275c0a945007ad4dd1715ac25202f8cba2687d29f3b617b9d2f979eb4f57db21d12348333cfc4cd70845073b54a3715ea6bd78a4c97eb396dc0eaf073f5d4c7d89715540d09c5fde3344013f4a7c313f371d2d844fac6cf15ec46fdc45dda6e2749b1f045ebad56908319b38b20853b99b826558e3f5175d14a7eab2bc2b85694f65b1249cd6537ea6e9dcc77118a93e65a7223d02186e1f5f474bba7bf7ca5ef769dfda09fe67d9da4a98f6a0d13ab0f19f9059b247a9b5ff795dbf9d3f63fc2d396fcd2b059187fc66b7354a692430c5f27640c97f38b639291b67da9b20147245658876eff0189d8843a61f520681a4c50bdefab0c68e27ea1d5e7e7bf43c848ea885523db503f1151a35a78ea10054749b965fda497f79449a88db2f2cd73d8b04bd46d249e6e740917c35262b0165bd38d9971b57f28916cda6981529cddb7b5acbf2673c083fffd779a1a9554073195e31a3437fddcc1649576aa41b9083ecb23552acad8623ebfa726f26d2f2fd9fc54b649a13279f1855ece5d0cf9a1e04ac49a9e428e71e23762241344902173d8a6ea30fc480eb9917dac0543759e664a115a32483ab29bae0ff40c5e378f0fd8a22ed24c62965e07dcb46c5317a049ae4c3c8e1c457286801ed192814267e51f30a8f9cef132243d9cf2f4f42427985777a46472328a29f932ccd02ad51d2041dbe359e7216c61f8e093d9f40998a7e4ac304058b499d92f4b7a7cfbfc1572de693e0f8f8f83ac4791172f16174ee411f5c8e895d981c8288cb3d917265ade4846cbc8e6e00feabf8afc467d3876b436b7b97b9dc93cc4927248ce41ffd7b37d051628cea27375519c40006338cac7dbdbe395091514f26e8ab6a637fcdf90116b5eb6a66807fadc739da3a48a42645d2f247a1612b6ca643ba90573f765786a965c85d8b04e5cd3aa57f8da1c2836c7e6afb02edf7c4ecd8624701937e6713f8e0b21025d26f899726cce7b868041001e8ddb29dce6af1293fd3aa8edcfc69e3d8b8d04ed90f031ace18ae81539c3f769fe0e30b95fd0f1b5ae7c88da7f99bc28982a466826ffe5a0f14876194bba1de27bcad784c516f063eda684042292ad7fd1aadcb7ab2fb4281e71bcbecfac6fb11a98270f55ee1f9b38aa72227676491d8dbc73f86b137fa53665da5f4ab137cfb5cbca6fb99425207f1daf9885c7712663c5e47f47dd99795908110a48c23bd328f1780eb4c419ab142a10697f138041d9872d00aa5d9bfb3da873abd590dbe6d8825514dc11119fc50053bae615f1f6a0d9f93ea423a5cebdfba251ae1b2529bdcf455caf4bd46dc5ed4de14ebe19e11be7ad0ba1e1e44431662a2175b29494b9d6f9649be5a0bf64dafeab5f7c95b6672e0ea3cd6c0ee0f0093349ce198b38dcce1b75d0c75255bf251a0a881169e29afa563e73f14d9dbbf1f22641c9aa175ae164f803d50ed9ad507f0629245c4bb5c72c6de3cdf3a5d041bd254dd1dee90deef04e3e2c4d85ba9fb423a3efdc18aae8895a34938b128f2cce9abbceeded82ffeefe2264454b76603af77f8c8c1b299cec36d1b174b8f97427473f6974a266bb7a7d58762914f65504277c262b7ae2b881fcbafb5630db2a415e4d900849296e60aec8d2ea4ed455cfce891dd6a7afbf6265ff9c9c0ee64239ca6f1dcdaa723ea236033695ed9dfffa79042c203b528c71b9d101e8146d292517a82999fd7724fcc1fd0f6b9aea686209b2871df24b5f3f015f78583e620964400fbcacba317d41c46e31a7b7e6640099c139b0e7beb47f6ad1a472aa4e9a42434050f71892c8d9d38d4178720ed428d9988058b6385d3e8bf19d477ba728d600472a42e927dea3131df561f0df782f8debec0e6a7711dc813e6fd92f0fa3b5ede79a59db26dba2e92b2549398f18074d3377f68617c86814fd07053793ec7a86b19d6f07e50121b24dc215625f7e7949d9ede9454c427326ac0d9f4885b213d4d3ebd746130ac8d6eada968fda4e4cb8d596ae96059c67ccc2477820b3aeb4197fc0ed8b73792e1bfa24bc1c2c95dabe92e143307056bdea149cafeff6af09423b40ff492dcb9a267debadfc3e7e92a52a296b7284a424a61e980aa9435d1338998e6ef675a1741c1370171e3eb6c44b5601b34c932abce5e813ff65b388b5afb4e7626db603102eb5a61238989b7b90015a3213ff3fd47bb47185a9d838f69e8b2c15118d32c2da71925cac55a5d4357cdde0aa183582717f2bd652fa13c1fda67724ea399387ac4891c598542aad3eff507cf3d57d1a16da79c3042a813e4917de8f51677cc16be90ce0b28713f2a4ab0ee924cf126f05804067e5a31da3c61ab8d6f6333d91b152fa925ae739d6b6c4b003822f9c64fc6a75ec26bca9e80786c2843196f49a89310892ee80eea534a60cdb172860b000cd6fdcb69053dd1a280683aaecead416613db0a545fbd6866967bae201aec75421d41c882780dde036337394e1e553ed7908e6defe122c9c566f361db5d80773b8af7ffd607781336924ac268a3661c01b7e019d64ad02b9dbd522b5f928bce2309eba8061beb224ba9a57a937fc01d18a200b6f113b41a826a91f6171cc332152cad0beb6bae6e3f22997112859faf0a327e3bdb6fbad8336575ee29eb8fd5951bb3c1433966dee8ef6690ebcaf50a75752ebd1d9535ad6c96f94c7afa608b309318787da5d133aceeef7100373258dfae130475dd2aa8fb229224e080fbfcf212b29a2fe9d27bd511e8b2a5ed1868f21b3ae7b3ec3f71c7f7d499cfafe099891363f26dbfb7457d21514c1194912fdc2e3d13c34099db707124bd0ec5f1081230085365859d0aa7141adcdecc985b12eb863f6d77338b277e4c9793048b21535f1299a8db32cac5d44fba996e4f4019875cbac933b361315ac551c7c4821765ccb6ef74c6ef03ef9da1e4f80944e3acddd9bf9fef463dd4e250ddc4e5ca31f6a95ca4fcd2574db36949f9503e5e946926ae80f757b053de5a6752b3ce43ee304a38c96456baa626a99c414e6afe7b3ff63f3d4b0ae276f49c109694e902a0519dcfcc409d0f2e603df8021fa7180794565dedd2dae939017ae98104685e4a4b9d1332a5b1fd05006d7135be18fbc0760e7c47eccacdc260dce1260a779e76008e4b8d9fd7d0d0efa0eceb018bb6af2a571e8c639ce9f2066bb3ae3d3884f923d29c87559d8d0b86fdd087f0d7e11637bb65a6d702e0f945a75c4dc6a51c6ef271bdf20a0c07bbf75fb155f6dcbd2e31ec8e0aa8933e7d3b8395b230946e4c270742b5cff70555f1998564107515f82b30d70b3f222f45aa5b4bd1ffe48e8700fe966c279dbd49910c1baeec2a1491c285173c861fac2ca4b6cb1556d0a59a1f612684886f6af6e6191cc00629ea45a610540f144482585378d4ebe3da3921751b9e3549263d3e20aa16a41654f62b526244c0eff4b78188f2240f1ee2d93d34315249597149286b9afc0c06a407687cb9c8eea2608a206a765bab213dee80dc39dfbf7153a9a6b1d77ddce10f8203fb3f4b6912d5754d67d8fd67e56216e73242cf9c3234d086d0e5dcc3d56f91549746e712648036783e1912c118ecc4d328fa558580b97eb61b2e59f22aef1e0e8a3d6961ee497dcfb3dbe98105e7664631a5deebba5fe8bb9e8ccfa756d1c43a6a542b160669d275c71646843a118d283823943c90cc3cc669b5382a9e983fa172873e03d36b28e4c7eda3beb3774b77f0e52eb017c8ea61f0e4616483a620bf116c2befb84bc0ac41bb6ae494983140125cffd8c5f35861f6055ddcf528cde60f4ecb2e149f6402208177db99e086fcc4af07419337426afad2fb743d7d774263d2b2499109d51772c2fdafca5a8247a2a5833d455d06b0da06c7aa062fb91e771b672aca63caae32c27e02b5f3bfd3a1bafb8c061203d58b5feb0d0f0d79ab4d802092772b7dd1f1ba66e13c33b9ecf1ba899cc4518546e5af5ed0da14bd4ae1a54232504e7bef92fc446479b9651e9cd5bb0939cf1a6d7090b6fb1cbc86909d503232889441ef17523b0cefdbcaf81d06db70a383656973a7ae376c1b27b4e3adda7b4f71c5726db5f30edfab0722132089381fdb1710348943aa8b60a58d547eefc743563615e586a691f8e1e247c65421fbe6cd91b235c72f8b69aa905c80f9683f0ae538f2cd31e75db173bfcee4a5bae2bbd1d9051e4c3063f5ae825981dbeb9d514f53e711c5e85254e30796b38a674ab90bf0cb309f9303c9a4a0385806a49781c7b56a29aee2bb744f412e3a1540b040f7a1fb4849768467bc1f0245f67beb80bda39cd7af6f09ffe83aaddc9fc98a13b043d96cedc66d8543ac3696ba992bfd5e81efcd315a701eb8959984b154b38609f52db710c93573fbcd505dd83ecddebf0c72466e08ac6d23a3b8e36cec6477591b22c4f416007c7130623ef4294ff0d9fba3829668b72430fe50bf49236b24ce37e0a0c7b82dfdedb9815f8c9267819daacaec1e0a4981f1b6e723336aaa172c01d4a2b53dfd73bd2c5c9be16a2855b94368c88c4b699ce6d2c8801535f8fb37bba2a8056c75e5e115225612b99e5de4b690e2b1fae3eb3126734ea09bf3563ba154db832a6bf875921902df6a2f8689a84276ab84279c0ae4b28557df7a8ada29ab7f778be7e43225507cf543654fb4f9c28cc0250064feb8e3b14d381f12c328ae6fc323ac87673aae809ee96a83e8d7c6ac6a9d80b8178b4edc29f7de88f40f6be684db609fc7d71ca4fbdc1f2750a837f025138f3923cf6f0b596434efe29487d2317b17a9d6cee139140f639ff53b1ced2bd55244265e221cc880fda18610e152d16732cbe17bdff5f17b83a9a0addadcf52c21d7530c56571a85dc269bfb1b6ba3191706089244376575e33e691b1926ddc21dd93ea5496367621dabcb22b70076c3b784c4abc6665a90757ac0aa2958ab043c20ed133852df5ac96964f4fb2a266c865480ce8ae22e77df599c5196eb7225235deabd687d24cb40ed284bee09a626edd23c5765bbfd86da5fc3cce6ed56c53d6b93f119f627e80f4728ba180ebd342abef7483abf9cea995e76ba4a644815888f8efdee28e7e9a27684a408663f6e6735684fd35580b179963e6e391ad9305fafe0e60131e5ac2d16d95bf08166b97b4b583605558734e4f2937f6c37414b6b0fe484ab81029e1313e3cea80aa3995a95e05cf4ecb5e48e4c2365de22ad5185fb617b00915ab5018daede54eba63aa01da4a35a3e85e8648b331e3179744f763aa9b175a123d9fd4c598bd01d4cde3e9f09a0e44d8cb752f7a76ea54d792df7e873255b0f99b5c533b2a15ae110c8f219ea6e72b4e536dc57043fe119246fee780b67e1be4cc88f0b5b60f44c296f98e07a374949e74d210a3081147a550fc3d4b504e78ae1f682021b6674fc49dcbb2e70c6472cafb635e40dc99cda09911f5bd56a96eb4b9040c50fdb85cd9eb40e0e21a7f0cd8307702c2ec72ab3ea670a622a2ad52b24fb3c53cfd9dda096c11491d53162f6755afbe2009bd8b0a6672e69f43bf7529da657b81b31df3f6aedc2c23a83154a7a7d220bfbaa6b0298245162113f391ee4946d725b8f5c630e0df14dc28e1ffc7d79ec5235d6ce8a0f2563c3ed13bea392cac8472fbae062f49bf94cf99afa89a08769e28766690be29f1264ed3bcdacde7a58d90888c186b4abf9d964531b5c7b2d6f65d18d8e501d32a0551630c58d3ab16d68422fab94223b75e71a5f9f47243006f8267497c20e3738d795c39ab0abf4f8ec2cf7918b3e0c8498807b6b321b576142bc34cf2ff085fd9831b9192687792faae8f8e3c3368ff5a02a504cc5532ae9dd2696b6f7f2b201f8bb8a152598c3f498780cd0d0dad84936c99fd6c2b1ff5b0020b6c72475d42cb892ef378aee7492249c28aa95f4d12615b23efb843d2704de6265a61744e37d51c028abfd241ce3a6a00410aa60ff69b9b1f484c9c06e3a9be084aa35a35dadd233d3b00598aa80b5be266835437a70cc09f27945e887bd5bb68bf231be5f9bddd1a51c0d17c39b4da12f611c954d34f2c1e22873915cc67c4ee6ab6ee83aa75b4464f476018cab0e443679248abd4054f8706f4b65af3c908683a92fe398761fa88ff0b311118c5083f681e4903cc642887a0117680eec905ad2450aa935f507bdeb7b04f7d09b13f41725dfe8f2afd806b46dfe5d53c033eaca0208331507f1180c1e999de236453e1ad2e0678ba28c2004d40c62c9ce25298c8735d0aeacfe3ba11ab8b93401666695a3010120f2ad7eea1bd74114689fee38f2a437043cfb80491a47247dfc04a9f83334db52e19ef9b0f63f04a449027ddab7fb016b6183d4871fa9c50cb1fa75be3530f6c7ef831396da3550948c914196e71eac71e46507f14506ec403fd89d95cb5d1f7121d650e6ef967a39cf96f81c220940f6bf4621faf10d07fedf120bab59a96cd98879e9645161efeddee0e502c07859fe813d68b72402163de65c4b76f69dbbdce56fbaa309a14a8af403c6ed026473b2a1b38e4616df91c0e7f5291c68f9b6a30f596ad937f62257466ca1726733029957c608dc31a8afbacc1253965e2443a90c1250a75332d994da5cb9d5dce117a063384fcac580016ba5fb2cbb07b54265372d79a6e336002a86bdab25c5a396fec934568800934060cf4198c1fc29342cb4575bdd1e7d621e5b129b60f025f6dd4bad191ee68ef3094cb11f5eab82d34a922b23ab59d1a9100cd2b13ce2ab05137082624b21b8b9f2b918b9fc2cdbefc297a693f385822de11ea23e33ad00408cc2e1ff0ce413b36de07f9b08b69308aaa0613ab6c4c17b429abfa6b5e10d071abbcc4da979fa0c60a39d075d3813e2caba8b2fd1fd0c89c399ace84da8a4ed57bab714d6a02174d5c8a52337f997a1b8b56395b6c9b82c584d36ebd48b41345dfe53be5f5f4972dd658aa31aa6f1f052ee40367817a747ec4b52a5fcb631ccb9c8b4a2416a745455f55e533bba6d2dedf2eba240e23d8efe0c00cd61c5b0eb377cf508f4bbdb169b4e8ad4c0f5aea636d6dfe8c4866df710a4aa0b9ada3f4e3c2dcc636a66ac5fa853992d7e4157b199597bb1fd2b4948c13e664d96848c317038dddc4e541315ba866378544de3cc07c0ff6c7e2272dd12929751aca063e01cce17ffbe3aaa0019f5c89a71687863322bcca2e53bf8b80c705e5a4303b80e6a3e74f85a5089de2d3d106ddbe6d7c4f6adcf6317deda8e9901f523ee6be485d72fc28c64e8e95cb99c2732a39ac8260f2e0badf46d2a5b346cb0b155313a8e50fee75e96c3d1a6fb6a48d2458df81accd7e7c80fc13f3751be5a9d7382f0e0818057075a7a3dd53e4896c9ac8a721eb2297357abf2b4ff4869bc4b55a03e2fcf917121c91073fe76e3252d266b7c53fa80d7ce40fade326d07effd3c03f847fdfcdfac2a6d3618c332f83069cf2dd84a5e7e73b6ad403139f50d6efa5f68f814c1a936877d2cb4fecc5b21455bd6f168adb274bf74643d9c7821994e07d4e2953c17876d0172e39c542b694dd5d480946419e50e2bacc85b2c81398a976f55beef44db89743ef1f4cd8fad05d5d702a0855220422c0999db0fee5d5076fbfb4579001a84d098cd47b1bbe140ca4ba72d7dc3b601f706da6b6bda5aefb3eb54e8f12d18821810884bb407c977f839e53ec2399e13683f1441ab00fec3429512c68915813209ddafdafec5a7d58775cbab0ca038f466f3f16edb30d4624177d9c9693e4a07dd779ac7fd9ce444ed51e6d5233737fb714ccc3baddf09a8779fda525e4f271d8a6dbba7e7bb0aa42e044b364e3357c3c1b5126415d8f4f6ab9bd7910ef0cfee3af1a63698484919677d46fb0073ea18c4fc1ab10f99bce706470e6e5db6a7209a9b0f7c174cf28eecae1bb96514dc0dcb089388465fc6438d1410be60c7845baa8b451be449ff8ad258f8bf3aa131f6d2cd00206b0b26318207574b7e5190845531b4104e88429b4442f3bc44e58e4d07adab6fef036891b4aa6865357d71f0abf710c033f64bc368271d70b59412447ac02cf89a0e4acd3ff69413b3ba83fead366c416218ece5ab178bb095ec3d601c9866a1c012b403ba1d4cfb6d890511ddc3bd9d860de47f3a7786f7d50732a72238ac0788aee2258f7bb2e5bc81ddfbcd2838368480149790826ca23a165ef85cb1cf79f2752e9d951e85db8d458dc1f196e36b0adf758f78ba4df11466acc2933a4a0fe2e3adf957873ce86c323d0a9cb3630de62cc018535a419f362bf7920eccf8176c1478f687349c0899013f4933e3cbc67086c99561556e7f3cd48e21abebb54a2953345ee3da6dca587128af2387bbcc7b9c408208737ff4fdf31114e882de2c41d7c64a7026d82fd3cc429fcfeb49ff8b58514e76354ecc8f2a7b9d9d74424d416d70e332bde5fcb5912d96836cc4ea884704109432a72975d3fcbff837016c3fbf6963d1a66d04b0a0710df8e9d0186db1637e5f513acabf239afc18a82f1967e0ed985a8f507824ed994ac7ba74600f4216ea5f74ba751f5aa5362ad179e3478343672ca358e5c7cb5858c5fc9cce3faa5aa60360b9827bb649f4c5e2f5ce9bdf41c7074273b73f5e6e7a3a2df2379cd7288b4b3e6c602f942dbe4758ff10dcefc537b83dbc9fee6d49820fca74efc276b8a6fad26aea3be0c500fe5657d1af757d652148f67d600cb2b91342125d92727cabcc3ad57e3e3299fdab3e38cb56387356d916e1cdbb9523abbff80ef5693466b2f88bd04d44afda1d985363805f519bde6286f3af9403762628e280368740e8533c2b6d10adf787f053839d3fe5be789627eb7e158b165851f1bc575ff4825abda6c562a1ea4eed78bb9449cf1bc6431828b7c66048311446f33978531fb3b455cf6800160c4732041ae4b30e6e4a1f46d0f3986e3fa349426c8722dbfc2468ee7eb853eed2052b64f12cae5cd0f3ae04b3505c271b80c827b883808bcc705e7c3e8e4a48be620590b2e6258ad68efcb806fe1428f1fd9feae68f9f8390f18765ba14dff6b63d55a643df346764f1045db570ade82fc9a2b697e1b152a114f4e61f6f4a0ad41ccf55e35d520531306bc433092331a07b3d26b11e4c1ee82650d6a11ab617f9b3272278b80f7b19e23afde79494694e83f90e015429e40728e70d33c0f6207412351201de2cb989cbafcc3da9f5b591c696bb781f5018cc3640810997e07c189c3b40e4cfe8a937badccad48ef5367e3cdead540593d5177d04b95d6784559ac3deb1bb3576c9c09096e703a564b5a729ddb570efdf4b55726ab389882d0e322c5341897df3628b65884a84dbcd148f4313144ed1450c0e34620d65fe2b1b4aa68ce0cfe7acf87cba18a8fb9ef66f3647bcdd4b274624ccfd695c2cb17333739733babc5062d706d468a419030aa7b20e961ba2d09d7411bfa707ce7f0329ae69ce78a99da05d31e2ebfc389316796932970973e584eedc69cba7029f7942d5ce39848fa02f290ebd5e09046dba9485433526eced97d1e1d28925c0527ed04a1384e7645935c959848e18462a4e663d36cb5864243bcf2bf6676c07031833f82bb431e9b0dab6414f8d1997eb659c013c37eb38e3c551dd9e7dc556a4dc49e6485a7700b785f326b34b67404117186900e9f7943b6c0e0aa8f3d31270c602bd2f2a31390e1fb4f9de0892af079da8249a7e44fde0cde7e4d6133f1fe78db7537ccbceb8889060d2515c9ab53c5e635c6eed701a484abcac310fd810fba502b6685bc7c20e35b47eec444a5fc52fa2d6bce99041df3c5f0b7fc2e76c6ce1dcacdd739748413d6e67bfb46a681a962eaa668186fc3a297cdd806f1a8a72dbd4eb7ed349ff99606b7dd921c2a526b86b4065a910041f33b02a8613082de45460d1eae989062154fcd2f6204ea67e3a9e99fcda2cd915abd6ee5e7a9d7780251282fc8cbea5b6296cff87ba9a752a44b8bf3542754035cfc2dca2163e344e036f4f385ea093486edf34188c6559eb1e2acddf565bdb2aab9d1c1dc07f3836719b2a9e22fbd5c0e4e5c9ba75317d182657d943ea92409916ebeb3a5f122a8f73b6345fdb5314e689f5a2b1a0f7ce051dfbf4322a1fc45c6db7ddd70aaa023981f9272b10a8b591020b5d4328138d75b14c3c841dccb791498b36e99fddc27cc361df2a0e630e3531c7c483ca47c32981711fbff1b2688d5d4ba2d9cd1a588335e0d53747516e9922a626e6296ab970e2022c984c2e6135ce3d68e7254e84285a2bf27420657066e63a94833a2c1b288c066f68068c6993a566ac79fdeebdb997d908687583ba7972ddc9ca5aa3209e099e551a05f0a43aa505c6bb3ebd39ee7d2a86f8b9c2156f5ede702aab2a9beee288a2846f4b8e3b2a50a1cd4e5cb7d8bb683e52c6bab500f405219a2606a976acaec1f5e69710018010ec31167c44854c1e739d75d4532b4f682b6853f70d902b84e26c4b1446ea3867942086f79c9a4f04344ea93ad75a4f946b294e4afb1941eafa1112b4d4219f1cb441164a8453886e7b56b556dad74643594f7c4ed56014f7fc5d7efc43dc2d26ade7c2da3f40e0e4edeb8eaa4af8ee2f9cff647256b6f6824fc2a76199b955ced736ce3a566e83987a88601e2c96fa4d19bd218513b3cb20e8dc046244acc5f1ba676a96990cf538e3d30f4edd96f21d2660d4560953e8424f99ef61bde3e6406e38e4d5260c72e50d2853f59a04a622def88de3d3f259bd902018cde1492f79649332c90ee04fb4638c1d657ce327fd46d20be4caf2675555187f9fd060e7d253ac37ad96de992fab5eb49c4d496e7fa896db9ba6894e0b43c602c60a22ee1c0a41a6884510ff7abd411cee6cb5b97c701085e0d2bab51cd39aaa745582f75ba22ba886816ca47c892d0cf885c90768c739828352aabb61b255f905eff1b3318db851a6de49164957d7a093e2ddd1dfe84edf90ef5d4cd517180b52f6a8a0cc0697a966bbd8a01dad606b5cf29bc4a3120f4a5bb017aab01c884527bf76222126b98af3f1d715aa5ae74f12a776649a8584bf2dc01a7e14e8d59567dc2ae2a4e6e38b2ce94f34cd7996eb5e0ad08a1d368793ae56081eaf8d5946c53b68321f0a0447120c3e1e4c21b0858924d783c3fc9ebf5df19af6bf2c7a1876f92249d47744c0b9ae62db7fbdca9c3a09434ea1acbe4f684ba06cee49a14f58d6f24f353ad754158a13b3c4f40d98283558f15e46b56c326727a9a20f2c9cab1997066b39be7d3db99e12f36f9a455f85498828f5c83241fd2e1b76626fb42cfa05e9f399edb5c718aec93eff382a4", 0x2000, &(0x7f0000008a00)={&(0x7f0000004180)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x23, 0x200, 0x200400, 0xff25, 0xffff, 0x5, 0x7f}}, &(0x7f0000004200)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000004240)={0x18, 0x0, 0x400, {0x81}}, &(0x7f0000004280)={0x18, 0x0, 0x7, {0x6}}, &(0x7f00000042c0)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000004300)={0x28, 0x0, 0x5, {{0x422, 0x1, 0x0, r8}}}, &(0x7f0000004340)={0x60, 0x0, 0x4, {{0x7, 0x80000000, 0xc1, 0x9, 0x7fffffff, 0x6, 0x1, 0x4}}}, &(0x7f00000043c0)={0x18, 0x0, 0x9, {0x1}}, &(0x7f0000004400)={0x12, 0x0, 0x0, {':\x00'}}, &(0x7f0000004440)={0x20, 0x0, 0xdeb, {0x0, 0x14}}, &(0x7f00000064c0)={0x78, 0xfffffffffffffffe, 0x4e1, {0x2, 0x2, 0x0, {0x1, 0x3, 0x8001, 0x9, 0x1, 0x5, 0x0, 0x7, 0x8eb, 0xc000, 0xc5c5, r6, 0x0, 0xbe9c1ec, 0x800}}}, &(0x7f00000065c0)={0x90, 0x0, 0x3f, {0x1, 0x3, 0x7f, 0x9, 0x6, 0x810001, {0x6, 0x2e, 0x80000001, 0x1, 0x2, 0x1, 0x1, 0x1, 0x3, 0x2000, 0x5, 0x0, r7, 0x8, 0x1000}}}, &(0x7f0000006680)={0x48, 0x0, 0x9, [{0x0, 0x20, 0x1, 0x1ff, '&'}, {0x6, 0x13, 0x0, 0x80}]}, &(0x7f0000006740)={0x160, 0xffffffffffffffda, 0x6, [{{0x5, 0x2, 0xffffffff, 0x7, 0x0, 0x9, {0x1, 0x6, 0x1, 0x4, 0xffffffff, 0x3d08, 0xffffffff, 0x20, 0xfffffff8, 0x1000, 0x8000, 0x0, r7, 0x7}}, {0x2, 0x7, 0x9, 0x100, '/dev/kvm\x00'}}, {{0x3, 0x2, 0x3, 0x5, 0x7ff, 0x2, {0x2, 0x8, 0x2, 0x9, 0x47ed, 0x4, 0x1, 0xeb, 0x9, 0x9000, 0x0, r2, r3, 0x5, 0x1}}, {0x0, 0x2, 0x9, 0x9a, '/dev/kvm\x00'}}]}, &(0x7f0000008900)={0xa0, 0x0, 0x20, {{0x6, 0x2, 0x1, 0xfa00000000000000, 0xfff, 0x8, {0x1, 0xfffffffffffffffe, 0x10000, 0x2, 0xba12, 0x5, 0x5, 0x20, 0x8000, 0x2000, 0x9, 0x0, r11, 0x7, 0x80}}}}, &(0x7f00000089c0)={0x20, 0xfffffffffffffffe, 0x0, {0x3, 0x4, 0xfffffe01, 0x401}}}) (async) sched_setscheduler(r8, 0x5, &(0x7f0000000380)) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0xbea, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000000000000}, r8, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 11:47:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) [ 497.079082][ T8615] usb 5-1: ath9k_htc: USB layer deinitialized [ 497.111882][T12889] bridge0: port 3(team0) entered disabled state 11:47:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 497.198184][T12902] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000d6000000003c000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 497.291029][T12902] device team0 left promiscuous mode [ 497.300236][T12905] 9pnet_fd: Insufficient options for proto=fd 11:47:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xf, 0x0, 0x0, 0xffff}, 0x48) 11:47:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 497.351521][T12902] device team_slave_0 left promiscuous mode [ 497.422140][T12902] device team_slave_1 left promiscuous mode [ 497.460697][T12902] device bridge1 left promiscuous mode [ 497.480354][T12902] device bridge2 left promiscuous mode [ 497.491386][T12902] device bridge3 left promiscuous mode 11:47:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 497.534791][T12902] bridge0: port 3(team0) entered disabled state [ 497.547964][T12917] 9pnet_fd: Insufficient options for proto=fd 11:47:06 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) 11:47:06 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) [ 497.681525][T12907] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 497.691658][T12922] 9pnet_fd: Insufficient options for proto=fd 11:47:06 executing program 5: r0 = syz_open_dev$cec(0x0, 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x4d87a, 0x0, 0x1f4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) [ 497.733191][T12907] bridge0: port 3(team0) entered blocking state 11:47:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) fcntl$lock(r2, 0x5, &(0x7f0000002080)={0x1, 0x1, 0x8, 0x20, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000020c0)={0x28, 0x2, 0x0, {0x4, 0x9, 0x1}}, 0x28) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 497.815123][T12907] bridge0: port 3(team0) entered disabled state [ 497.839316][T12907] device team0 entered promiscuous mode [ 497.851790][T12927] 9pnet_fd: Insufficient options for proto=fd [ 497.859431][T12924] block nbd4: shutting down sockets [ 497.890961][T12907] device team_slave_0 entered promiscuous mode [ 497.915125][T12907] device team_slave_1 entered promiscuous mode [ 497.921633][T12907] device bridge1 entered promiscuous mode [ 497.930406][T12907] device bridge2 entered promiscuous mode [ 497.944114][T12907] device bridge3 entered promiscuous mode [ 497.967071][T12907] bridge0: port 3(team0) entered blocking state [ 497.973439][T12907] bridge0: port 3(team0) entered forwarding state 11:47:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11:47:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\'') 11:47:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:47:06 executing program 5: r0 = syz_open_dev$cec(0x0, 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) fcntl$lock(r2, 0x5, &(0x7f0000002080)={0x1, 0x1, 0x8, 0x20, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000020c0)={0x28, 0x2, 0x0, {0x4, 0x9, 0x1}}, 0x28) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r2, 0x0, 0xc) (async) fcntl$lock(r2, 0x5, &(0x7f0000002080)={0x1, 0x1, 0x8, 0x20, 0xffffffffffffffff}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) (async) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000020c0)={0x28, 0x2, 0x0, {0x4, 0x9, 0x1}}, 0x28) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 11:47:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) [ 498.088251][T12936] 9pnet_fd: Insufficient options for proto=fd 11:47:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 11:47:06 executing program 5: r0 = syz_open_dev$cec(0x0, 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x3ff, 0x100, 0x20}, 0x48) [ 498.173368][T12943] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 498.248836][T12943] device team0 left promiscuous mode [ 498.277005][T12943] device team_slave_0 left promiscuous mode 11:47:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:47:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0xfffffffffffffd22) [ 498.305193][T12943] device team_slave_1 left promiscuous mode [ 498.311118][T12957] 9pnet_fd: Insufficient options for proto=fd [ 498.320211][T12943] device bridge1 left promiscuous mode [ 498.336147][T12943] device bridge2 left promiscuous mode [ 498.356519][T12943] device bridge3 left promiscuous mode [ 498.372067][T12943] bridge0: port 3(team0) entered disabled state [ 498.404393][T12951] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 498.442691][T12951] bridge0: port 3(team0) entered blocking state [ 498.509235][T12951] bridge0: port 3(team0) entered disabled state [ 498.528145][T12951] device team0 entered promiscuous mode [ 498.533724][T12951] device team_slave_0 entered promiscuous mode [ 498.542171][T12951] device team_slave_1 entered promiscuous mode [ 498.549167][T12951] device bridge1 entered promiscuous mode [ 498.555243][T12951] device bridge2 entered promiscuous mode [ 498.561178][T12951] device bridge3 entered promiscuous mode [ 498.567735][T12951] bridge0: port 3(team0) entered blocking state [ 498.574083][T12951] bridge0: port 3(team0) entered forwarding state [ 498.589386][T12950] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 498.603114][T12950] device team0 left promiscuous mode 11:47:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:07 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)) 11:47:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11:47:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6d69, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 498.608888][T12950] device team_slave_0 left promiscuous mode [ 498.619860][T12950] device team_slave_1 left promiscuous mode 11:47:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r2, 0x0, 0xc) (async) fcntl$lock(r2, 0x5, &(0x7f0000002080)={0x1, 0x1, 0x8, 0x20, 0xffffffffffffffff}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000020c0)={0x28, 0x2, 0x0, {0x4, 0x9, 0x1}}, 0x28) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:07 executing program 4: socketpair(0xa, 0x0, 0xfffffffc, &(0x7f0000000000)) [ 498.686922][T12950] bridge0: port 3(team0) entered disabled state [ 498.697551][T12975] 9pnet_fd: Insufficient options for proto=fd [ 498.847353][T12964] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 498.893360][T12964] bridge0: port 3(team0) entered blocking state [ 498.900342][T12964] bridge0: port 3(team0) entered disabled state [ 498.909285][T12964] device team0 entered promiscuous mode [ 498.926510][T12964] device team_slave_0 entered promiscuous mode [ 498.945679][T12964] device team_slave_1 entered promiscuous mode [ 498.960082][T12964] bridge0: port 3(team0) entered blocking state [ 498.966521][T12964] bridge0: port 3(team0) entered forwarding state [ 498.975719][T12978] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:07 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11:47:07 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='_') 11:47:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000080)=""/224, 0x2e, 0xe0, 0x1}, 0x20) 11:47:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002080), 0x8300, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000002140)=[@text16={0x10, &(0x7f00000020c0)="ea550027019abe002700660f383a2e950a440f20c066350e000000440f22c0f40f799d0d00bad004b0d9ee3e36660f38dc2266b9800000c00f326635002000000f306766c7442400088000006766c7442402000000006766c744240600000000670f011c24", 0x65}], 0x1, 0x1, &(0x7f0000002180)=[@cr0={0x0, 0x5}, @cr4={0x1, 0x200000}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x1000000000000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x28602, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 498.994159][T12978] device team0 left promiscuous mode [ 499.002593][T12978] device team_slave_0 left promiscuous mode [ 499.009877][T12978] device team_slave_1 left promiscuous mode 11:47:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000180)=@name, 0x10, 0x0, 0x700}, 0x0) [ 499.043375][T12996] 9pnet_fd: Insufficient options for proto=fd [ 499.049889][T12978] device bridge1 left promiscuous mode [ 499.059403][T12978] device bridge2 left promiscuous mode [ 499.066703][T12978] device bridge3 left promiscuous mode [ 499.083199][T12978] bridge0: port 3(team0) entered disabled state 11:47:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x75}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 499.155798][T12987] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 499.177078][T12987] bridge0: port 3(team0) entered blocking state [ 499.226237][T12987] bridge0: port 3(team0) entered disabled state [ 499.243301][T13008] 9pnet_fd: Insufficient options for proto=fd [ 499.287318][T12987] device team0 entered promiscuous mode [ 499.310309][T12987] device team_slave_0 entered promiscuous mode [ 499.326153][T12987] device team_slave_1 entered promiscuous mode [ 499.332609][T12987] device bridge1 entered promiscuous mode [ 499.361609][T12987] device bridge2 entered promiscuous mode [ 499.369116][T12987] device bridge3 entered promiscuous mode [ 499.375595][T12987] bridge0: port 3(team0) entered blocking state [ 499.382256][T12987] bridge0: port 3(team0) entered forwarding state [ 499.389601][T13001] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 499.398866][T13001] device team0 left promiscuous mode 11:47:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11:47:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000d60000000600000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:08 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x27}, 0x14) 11:47:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002080), 0x8300, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000002140)=[@text16={0x10, &(0x7f00000020c0)="ea550027019abe002700660f383a2e950a440f20c066350e000000440f22c0f40f799d0d00bad004b0d9ee3e36660f38dc2266b9800000c00f326635002000000f306766c7442400088000006766c7442402000000006766c744240600000000670f011c24", 0x65}], 0x1, 0x1, &(0x7f0000002180)=[@cr0={0x0, 0x5}, @cr4={0x1, 0x200000}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x1000000000000], 0x100000}) (rerun: 32) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x28602, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 499.404846][T13001] device team_slave_0 left promiscuous mode [ 499.478998][T13001] device team_slave_1 left promiscuous mode [ 499.501594][T13001] bridge0: port 3(team0) entered disabled state [ 499.564661][T13019] dump_vmcs: 116 callbacks suppressed [ 499.564678][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.581074][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.589433][T13020] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.609984][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.618160][T13004] bridge0: port 3(team0) entered blocking state [ 499.630043][T13004] bridge0: port 3(team0) entered disabled state [ 499.637942][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.650230][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.656711][T13004] device team0 entered promiscuous mode [ 499.658303][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.665370][T13004] device team_slave_0 entered promiscuous mode [ 499.672286][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.686913][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.689526][T13004] device team_slave_1 entered promiscuous mode [ 499.694978][T13019] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.708371][T13004] bridge0: port 3(team0) entered blocking state 11:47:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 11:47:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000002280)=""/102388, 0x2f, 0x18ff4, 0x1}, 0x20) 11:47:08 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 499.715048][T13004] bridge0: port 3(team0) entered forwarding state [ 499.728493][T13018] device team0 left promiscuous mode [ 499.733811][T13018] device team_slave_0 left promiscuous mode 11:47:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000080)=""/134, 0x28, 0x86, 0x1}, 0x20) 11:47:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 499.793592][T13018] device team_slave_1 left promiscuous mode [ 499.821034][T13018] device bridge1 left promiscuous mode [ 499.852849][T13018] device bridge2 left promiscuous mode [ 499.882473][T13018] device bridge3 left promiscuous mode 11:47:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) [ 499.900855][T13018] bridge0: port 3(team0) entered disabled state [ 499.949980][T13021] bridge0: port 3(team0) entered blocking state [ 499.969130][T13021] bridge0: port 3(team0) entered disabled state [ 500.010492][T13021] device team0 entered promiscuous mode [ 500.017044][T13021] device team_slave_0 entered promiscuous mode [ 500.023666][T13021] device team_slave_1 entered promiscuous mode [ 500.033641][T13021] device bridge1 entered promiscuous mode [ 500.065104][T13021] device bridge2 entered promiscuous mode [ 500.075317][T13021] device bridge3 entered promiscuous mode [ 500.082617][T13021] bridge0: port 3(team0) entered blocking state [ 500.089032][T13021] bridge0: port 3(team0) entered forwarding state [ 500.109662][T13031] device team0 left promiscuous mode [ 500.124133][T13031] device team_slave_0 left promiscuous mode [ 500.149802][T13031] device team_slave_1 left promiscuous mode [ 500.162816][T13031] bridge0: port 3(team0) entered disabled state 11:47:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6d69, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 11:47:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002080), 0x8300, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000002140)=[@text16={0x10, &(0x7f00000020c0)="ea550027019abe002700660f383a2e950a440f20c066350e000000440f22c0f40f799d0d00bad004b0d9ee3e36660f38dc2266b9800000c00f326635002000000f306766c7442400088000006766c7442402000000006766c744240600000000670f011c24", 0x65}], 0x1, 0x1, &(0x7f0000002180)=[@cr0={0x0, 0x5}, @cr4={0x1, 0x200000}], 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x1000000000000], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x28602, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 500.175896][T13030] bridge0: port 3(team0) entered blocking state [ 500.182349][T13030] bridge0: port 3(team0) entered disabled state [ 500.190567][T13030] device team0 entered promiscuous mode [ 500.204837][T13030] device team_slave_0 entered promiscuous mode [ 500.258747][T13030] device team_slave_1 entered promiscuous mode [ 500.269251][T13030] bridge0: port 3(team0) entered blocking state [ 500.275746][T13030] bridge0: port 3(team0) entered forwarding state [ 500.320351][T13052] device team0 left promiscuous mode 11:47:09 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='(}{!*$\xa7\x00') 11:47:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 11:47:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6d69, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 11:47:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f00000041c0)=[@text32={0x20, &(0x7f0000004180)="0f015b000fc7bfda5adca966baf80cb81731a08bef66bafc0cb000ee0f090f0666ba2100ec0f015c2d3a6395004800008170fe508900000fc76805", 0x3b}], 0x1, 0x8, &(0x7f0000004200)=[@efer={0x2, 0xd802}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000004140)={0x10001, 0x2, 0x100000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002080), 0x101000, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 500.361754][T13052] device team_slave_0 left promiscuous mode [ 500.385006][T13052] device team_slave_1 left promiscuous mode 11:47:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 500.418611][T13052] device bridge1 left promiscuous mode [ 500.443887][T13052] device bridge2 left promiscuous mode 11:47:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x5, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x4, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) [ 500.476442][T13052] device bridge3 left promiscuous mode [ 500.534648][T13052] bridge0: port 3(team0) entered disabled state [ 500.662508][T13055] bridge0: port 3(team0) entered blocking state [ 500.689721][T13055] bridge0: port 3(team0) entered disabled state [ 500.708176][T13055] device team0 entered promiscuous mode [ 500.713773][T13055] device team_slave_0 entered promiscuous mode [ 500.725875][T13055] device team_slave_1 entered promiscuous mode [ 500.747183][T13055] device bridge1 entered promiscuous mode 11:47:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:09 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000002b80)) 11:47:09 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 11:47:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:09 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a1, &(0x7f0000000000)) 11:47:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) pipe2(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f00000041c0)=[@text32={0x20, &(0x7f0000004180)="0f015b000fc7bfda5adca966baf80cb81731a08bef66bafc0cb000ee0f090f0666ba2100ec0f015c2d3a6395004800008170fe508900000fc76805", 0x3b}], 0x1, 0x8, &(0x7f0000004200)=[@efer={0x2, 0xd802}], 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000004140)={0x10001, 0x2, 0x100000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002080), 0x101000, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 500.759174][T13055] device bridge2 entered promiscuous mode [ 500.765378][T13055] device bridge3 entered promiscuous mode [ 500.772458][T13055] bridge0: port 3(team0) entered blocking state [ 500.778864][T13055] bridge0: port 3(team0) entered forwarding state 11:47:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3}, 0x48) 11:47:09 executing program 2: socketpair(0x22, 0x2, 0x2, &(0x7f0000000340)) [ 500.949562][T13092] device team0 left promiscuous mode [ 500.981670][T13082] can: request_module (can-proto-0) failed. 11:47:09 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0xff, 0x1}, 0x48) [ 500.996670][T13092] device team_slave_0 left promiscuous mode 11:47:09 executing program 0: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 501.048202][T13092] device team_slave_1 left promiscuous mode [ 501.072845][T13092] device bridge1 left promiscuous mode 11:47:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xb}]}}, &(0x7f00000002c0)=""/159, 0x26, 0x9f, 0x1}, 0x20) [ 501.102965][T13092] device bridge2 left promiscuous mode [ 501.141342][T13092] device bridge3 left promiscuous mode [ 501.155425][T13092] bridge0: port 3(team0) entered disabled state [ 501.196405][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.376468][T13097] bridge0: port 3(team0) entered blocking state [ 501.411816][T13097] bridge0: port 3(team0) entered disabled state [ 501.421342][T13097] device team0 entered promiscuous mode [ 501.438197][T13097] device team_slave_0 entered promiscuous mode [ 501.444587][T13097] device team_slave_1 entered promiscuous mode [ 501.460071][T13097] device bridge1 entered promiscuous mode [ 501.470512][T13097] device bridge2 entered promiscuous mode [ 501.483685][T13097] device bridge3 entered promiscuous mode [ 501.493049][T13097] bridge0: port 3(team0) entered blocking state [ 501.499449][T13097] bridge0: port 3(team0) entered forwarding state 11:47:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1}]}}, &(0x7f0000000340)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 11:47:10 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x60) 11:47:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (rerun: 64) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180000) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f00000041c0)=[@text32={0x20, &(0x7f0000004180)="0f015b000fc7bfda5adca966baf80cb81731a08bef66bafc0cb000ee0f090f0666ba2100ec0f015c2d3a6395004800008170fe508900000fc76805", 0x3b}], 0x1, 0x8, &(0x7f0000004200)=[@efer={0x2, 0xd802}], 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000004140)={0x10001, 0x2, 0x100000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002080), 0x101000, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:10 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:10 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 11:47:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001780)={&(0x7f0000000280)=@id, 0x10, 0x0}, 0x0) 11:47:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x3, 0xdb, &(0x7f0000000140)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 501.637755][T13120] device team0 left promiscuous mode [ 501.655217][T13120] device team_slave_0 left promiscuous mode [ 501.719838][T13120] device team_slave_1 left promiscuous mode 11:47:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 11:47:10 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 11:47:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) [ 501.785869][T13120] device bridge1 left promiscuous mode [ 501.859592][T13120] device bridge2 left promiscuous mode [ 501.908370][T13120] device bridge3 left promiscuous mode [ 501.950642][T13120] bridge0: port 3(team0) entered disabled state [ 502.082931][T13125] validate_nla: 10 callbacks suppressed [ 502.082948][T13125] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 502.130815][T13125] bridge0: port 3(team0) entered blocking state [ 502.145108][T13125] bridge0: port 3(team0) entered disabled state [ 502.166469][T13125] device team0 entered promiscuous mode [ 502.184969][T13125] device team_slave_0 entered promiscuous mode [ 502.205107][T13125] device team_slave_1 entered promiscuous mode [ 502.211608][T13125] device bridge1 entered promiscuous mode [ 502.235507][T13125] device bridge2 entered promiscuous mode [ 502.241638][T13125] device bridge3 entered promiscuous mode [ 502.266515][T13125] bridge0: port 3(team0) entered blocking state [ 502.272930][T13125] bridge0: port 3(team0) entered forwarding state 11:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:11 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/159, 0x26, 0x9f, 0x1}, 0x20) close(r0) 11:47:11 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 502.429219][T13143] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) 11:47:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000d6ffffff8000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:11 executing program 4: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000030c0)={0x1, 0x0, 0x1000, 0x28, &(0x7f0000002080)="dbdf7ad8ba43b3a00e1ab498e64961d7d69a120b77a67eaf8d1faa90b54d187c2c1f3ec964e86ea3", 0x1000, 0x0, &(0x7f00000020c0)="dbb0ee89b367164a6def7acc0ec53cbd56e1ded63316adc1fd8051d30ac3a254d798136b9ef0dc6ad831e68b1fcdd3e8115626b1129b7657f9b25dc6267c25e8af89237fa70acd6f4c66d24a1249de04b6b79875143b0d663870a2b76e53e14a0f76487029177c67319ec5d858526038aba029899445dcfce1fb2f3fd5a7355217ce79097dbbeaeaac973f1dbd5a6d539c6b7a8cc85d0a783fc5f2364ce5a4db771d302414f5aa489d68a9e62bad1f50bf28ee29a7dd6bb634642ffe66292cc7fcc4aef063965d39b45fad0a99080e628d40aec350783b5d824dfcd4a4913129ab5b0d265f352b6ca646beff1d072141045b6f0d95fac760951f2bf5ab4cd65b19b8fbc80919d5cae1f710dfa3b8597080378aa0edf3b95014322e4a048cf020e978bf0a850863544123f2d5375966054100eccac29fe8af7db7d5426bc2925f46bcbe96dd78db673fe82b5f6a0d6c3a7057ab25db4f1217999f66d08adeb1ec1a0ff4a4cc3225a76593f43f3d82f33dfb7fb557a06ce314929c5dc73f104bfc746c79e529aa44fd56d17e9256cd827ab85fba6ed00fbd70f0b66ce77364750ed7835598096948da3216642433119ca5edd99e296f2b3231ae9d95b55973c61ea33caa6ea802d4984a2c676218f25d8f19a80831a0d9031ed1faf538a51d269b562cbba7c6a8704b1aaf669c8f26ea1b970280e0d85cf55155648c574013cf2bccc5dc8990b30638ae7bbe9668f182155c8e929a53b19a227900e26541bffaf878a5ec605ae592d1236802c1a6debeb1943f41e8e565833b0f85d692e4520dfeeb8a62c3a15db1f326233684d08b6d231593d53bc3fdb7a4cb2757cf6c68a148eb5fe05f8cf1998007136b7496c79c07cdf9e627ba7af32328b767ff02dfd6cbd50eea54487dd6bb4679287d9412f95c529b1e8b80a0023dafb398a50e7bb63104dcdf61799d7f0ad6c3007e3052692cc670f96ad416d0814bd4ced377145cac1c354ac740eb9263d07476ee07b9ac71becdc53eb385ffb5947a6c3d094d45745e92b186ed8bc3afb61018b3921371c307d1b98404d121af100ce6b38134016138c72694d683a492b9fe4ab7055f638f54baee8467fc6a3b9dde7a24c094b97ed90a7ef630b0eb4e81260b7b6d4f21883927693cd99642141e203da652d8076a0ca166a01e10d22981cd84f49a059312595b97f7be68bd46135119e1d1a6e786db105cde5498c7999bdc07fa87c6d9217f75ffce524641aeb2355e6f0187e785808d036c301dce35471a8c9f5869e518cbc2d9acf3302c54731bbc933f27723f191132fc045b074126db1203b27ab62789b001bab18cb518a93d938b5de23f843bba14c69cfabe351540130b566a51582cd28ceb3324ff25002d3cb5ff53b520de38b2efe9f8825587130cc20b8cc8fed318018295aafbb46622f88c17082149465d69c2ed4cac53c6753019c51edaee3bd7f196bf08b553304fb3a42acb7e07cbfe2897863b95b567044092171d24d226e13c1fcf34cfbd49765fb09994eb77b4f5ce30e449e15dc485bccdcd3cf39f6c8c823efc1362278d0d25c50769315fd736e428abc5a16cc2d1e881d353bc43156eabaf90eeba419a7e4148ba82be52c76bd65ab3e4176517b4f6044ebf387cc5c176e9d2b459deba1dac70f26667d1a32d867a0aa5245378aaa08c1eac4a88d3ee4cf5f9bb00d2697daa7f6c54c2a186690f8eab4b0cbc2c15b22a53f9ea0c7d22e2cf40901de6ec7c3f16eb2c3527661627d5680ae0459f28abd0c8f9b007bcfcc3338feb36320920b81b3dc1beccdab27a7a2015b5d27866a028de8034e8b940c73ed9bdcdf8289449a72d21cbf624859f3281526c85c8a63ebb5dd63d3cd5913cdc1c85f12930d3424ae05d928364d86729aa93e486ce6129f1c30a57f2496e79d20206f9f26aaa393e01cf9d2c67932159c2a1a61b25d8c42a246bf9851ac6ba4b2516003e4a3cf6a8168cd2964e9365db607b3d3c67a5f9af98db0af87931a8b0f1f6f93686555b49dd5529441e2b6294faa4dddaab3f1147768678c12c3a2544e3c7ec37a4918b7133053326982fcda08ec0559caf7078324645754217863861d5edfabef18a85b3b13b7f6a9a808e13ec0fc66400791c977fd04501e940c31b06945e54615cbceaf83b39c919eef9c88e962c5c0e1b246a95f4e8477cdc6d2b06d52e5e0f0bf2fe0b1e0470a2ce06643897f3e2383ca09f127f79f7c9b171d25781786db3045c3e0e13f71c74878125d49edb783c3d964dd6a85b669c655afdd4a5484aa8c6ee41f9e5539e50b331661faf59bf689ac3fe5ddcbed8035829e06277f4d66bd97ceff5a272c584425d4087bacb68438bcf0ec53b5ef9788ab23410303886b3c75692438353beed47618cf9d354bdbb42232886d0f596d1a16a5fa85ccb6be8d10419b1a7e64ff71063d1098533af098d135ec5f048489543df5e8f4901ef1af0b932b405973daeeee1ec46ec521273e88fd373e9b7442c106960c745ed8182ade90efde7a2e82f6fbbcdc02ae8d6fe01e9db9743c30cb865e4f2848e6995dab99b90bf58956fb18c6b187712915a73c13645f7f52b8292849d47f4567de05f77528bcc48a6e00df086d9dd37c618965ed52537be1ab31938bb11110bd1e498f558d40e9575351916e07a138978c0b149efcdc22ecd0cde17f10a24eda78253b142f12028d3e25ea28bab33cffcbd7da994dac533df4757c11e79c678e4fc3b85d5af6c58bec3d1dfb45dc8f4b606e8ddb81a9c9a769c2d661a6493f3c6be68f58125f823fc5d2af2fa2c014f77f144adfb2984aa2d0016b25c89e809c37eeb00352aeb988697dcfa1f3fd9cc856994139f510ebefd116e569ed2e33f22d867cf316c299d2ed56f8fa56304a52099c094f55f9475a9ce2355b49e94ad628d688a731de0cb695c3b860573b2d92a180652ebe1d6359bacf5e9ed400571d183e4f875e7817660c50221988956bbba7e597b0fd25c114a9021d00b8c6e3c8c28745249cd61708833a2120049a73e67dfffbc60edc8f7dcf2118642e75041e887cca347faebc79e70dae47c29a217cfe0bef35055709a209c93cf75e22cab3cafc1dae7a3edbc4f54cfd8e6f318a1f02139d2d2ac58c7bf5a292cdd8903103f5fcdd61eb2ffef38c74f5ecc3913ecb22e592bf4de01b6fc00b653d35ca3f626e2cac19cf1ccf76fb14273f2e344b3710709ba0ffb654991fe218e2f307012533830eaa5e2d5617dea58d0e397a537fcde1b8bf8b83c1e34ff76daef4dbfd011096ac5ada6067ac5a0df8627be23c85c6b1a7ce9390d2913ff9f1ae495bcb4c84409bf85a0e66e72499ad6d6342c5883456c73cbe9d138bb8dd66c825fcf433c3d2c438a0cbafef97900dc9eccb656138a295d2de010247c4099870484d811d341989b4d1f465d678e7e7c9fb9f9e19b5b4802e93ff0164931f5782c707f1ff82f57117f1c9e177b2d8d19a9521af3c3d30e96ff1f610870688c8ae9f8feea85891691a6e141cdfdd87109a7f0127bd1f0a8bca4e0e0cdfc17de4068f126bb6f06e09c1d1406d5985ba241fe062ca0b3a38c5f9b6124ab3fc67260edb95c28b0ad8cdf6a7b53240c63ded5ecf72426193b15e804417d4cfeaa507334768a6cf564d39db0f0db397c5ef17106f09c37c255b665ef3150337adc533c100fc8e746486c4fa6d4d293c0eff9bf5abe62421d5d57a810935ee47fe09f39a9b9734f31eb159ee0f487ff0e2b1d7bd08704f0ddfcd121a21e8263cd1ccfb47b327918e37b149d7a0eab7a81b8c69ffab65d032ada94847d2354e10a5c786cbca52bcb658054beea6ab650dc4c528d01822b3a9e52ab66e4db2ee8a79dfe98a6178fa61b38265764608fea3b137a8dd4913666c98546767f6ed91ec00f5fb4f0f731fb029d94f0b68fa77f3ed7fc5b6a0a09f69b2dfa30f18daf26712b2b18232bb26950747d7302881e74000e9f5954065a4c49e9805f8cc243137f358fbc5fef086486e712349b0431b6134e091dad47633d9a4f90c77bb1a6d83a32b2c5ceaae6c21a8c175256bb28c0e5bc50461f54c33aee50037b4a0b1d6392e27e28efcad1b57b4d47fd8be6f5dcced8b082d04ff1702d4d760d561d13bbff84050cc98f5715f947c27ec7a9994804aca3f6729ffbd584fdf8fed68838bf7921d3ab34b76b2648339919246491c62aa5334ea0e9feae11d1f41fa7bba371deb2b8d4ecd1c66877cb9535739eda2762a77a9c655d6da2314495533775850c2bd59a7f12ada30aa762219495c6cc40ac3e8bff6eead8cd564ba07e30a7a5f1b0334f28cce92a0125f23e794d8fa52a54ff45d46b3d1e763c5e0b7d9264908fdc8d99895152f1e0d6607b2640cd9040ecf03f36ac716ad9542fa3b7157cd22ecdf28f720fd302d2437aebaddc82863f34dd73b1cbfa4b9a66a7ecb2b47b676787571d3eff7b7c73e77b306df69e302ac770b86b2014f1eaf191364c3f0932f3871f4be5f95bbbe7d501ea26fe31578f1af1f50cfd66c7196bb0adb1b018dd132457e8b3053a87411df04d9ed2a81cf9af72e02d6996f98883a0dca9ad834811a7cadedc0814382f9a266fd4142ebbb19cfb2e885cf1c2a36449ec3754f502a844315bf5cfde76511e46e11062e3ef07c5f274953670b0cde43ce69eb7eaa7d79c24ab48a499b53e4daa098ae8e6f7813d03c151aaf824c953d15922557b784cc75398ebecfae439ae62b670de224ecca2571a6e1b88b8ba651dd6fb9519ec504f4ba5302ede6c6c76e9205a46bdfb1006ca4df97c18ca9eff3dabdc3b8ba9f86a60f597dc7e639b0fe41aee3bd3ef677626b1724459c8c65d68dabc2f39b2af60562c175a287877d104c5d25170c04642903cf92d5c99553666c965d8a40a91c1ccb6c4b7e429e2a68202046dd9d8c2d0749d0808c8747592206c98aaf00caedb2e9bd0f83a4c74d6cb9d6890a25f16e9584daf2bf984657d1033c5f227e9ba36a208f718b306bceb27c8b4e1ed3e0654e727ce95cab4fa4e1644b8999ba26928989da84ca196f8007d550b0249b0d27dd0724b32a248c70f42cab0468c58d634f6d8ad2370609c94e806ccc130a3daf441f0fd49599c157d44b6ede5642e7aa23dd62d1bbe92601d86b16cc1625a988fdb4a131a07acc3b817675001ecaeac4455f219e3a71af0903eb7f96ce0b6fdf7b03460d5faf5a0fa1b62ad53cc62ccf510b003c4353a9f26d88e1a8ac07a9ea0a08dd989c401cda775bbda4e239f8e38d1024bcd302edcd02114a5e85fe33f6e357d82be027e90899335b77fd4415f1aeeb29d84843b5cf1c28e6237da1bd31f9499bbe4ea253d050d18dc71c296e736353d460be6e05a67673732f749b703ab2caf055ee0cd726c98d878ccbe00625e3d9b2d091d0cd1eb9cb51661b59451dc08c6073f45291a98dc27038e4b5b589d5cac7b606ad2e2ed7f16dede013df5d1627e349fe514c4e581205ac2c3d8e70c4f37bfdbbfaabb5b5f5519d1d56bf46c16d20c9dcc8b769d04256956693af7bc3b24efacd045fa6ec1a14f37f86eebb005a79d1107706dc1ea610d75e52d7e518f9c205bb933a402b08b40d0a2990524107fcb8b7df09fbdfdd324347611cae945d0bbb8f63178b6c7cf01974a34a55886ca7f6497ce2e1a7cfe4f3191584e9f63cc5900229e8d74a481708a6f3cb785cc60f7f74d4a98c4cb7ebe9ce9897b2a4cabf3e35c62f741cbdf694d3109d877722e6aa2a43c17c030cd0fd602da79d061f066e987c274f46f9c4552a481d1d7fc"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:11 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 11:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:11 executing program 4: socketpair(0x1d, 0x0, 0x9, &(0x7f0000002b80)) 11:47:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x4}]}]}}, &(0x7f00000002c0)=""/166, 0x36, 0xa6, 0x1}, 0x20) 11:47:11 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:11 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) [ 502.671978][T13156] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 502.792652][T13166] 9pnet_fd: Insufficient options for proto=fd 11:47:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000d60000003c00000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 502.868235][T13169] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r2, 0x0, 0xc) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000030c0)={0x1, 0x0, 0x1000, 0x28, &(0x7f0000002080)="dbdf7ad8ba43b3a00e1ab498e64961d7d69a120b77a67eaf8d1faa90b54d187c2c1f3ec964e86ea3", 0x1000, 0x0, &(0x7f00000020c0)="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"}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000033c0)=ANY=[@ANYBLOB="0900000000000000010000c001000000ffff0000040000004c0729261c1a00000000000001000040ffffffff07000000ff000000070000000000000001000000ff0000000200000000000000ff7f0000000000000100000000000000ec17000000010000008000000000000006000000000001000500000000000000020000000000000001000000b70000000800000001000000af0c0000000000000d000000000800000100010001000000070000000000000002000080ee11000000000000fcffffff0500000000000000010000c0c401000001000000020000000700000000000000bf0dfe13b67a3cd5977aee3017be553f37b72a533b52becc67a047deb877b6180e98c52702c04863286b6b6127ea9661a69586b679a448c51b9c5211fe64d74e5d691bf69e730e60d91473aae7c063d785d3521751e91984a00560bd52b022368986772279e51500"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:11 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x894c, 0x0) 11:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x3f00}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:11 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='@*\x00') [ 502.977209][T13178] 9pnet_fd: Insufficient options for proto=fd 11:47:11 executing program 2: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:11 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 11:47:11 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 11:47:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (rerun: 32) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000030c0)={0x1, 0x0, 0x1000, 0x28, &(0x7f0000002080)="dbdf7ad8ba43b3a00e1ab498e64961d7d69a120b77a67eaf8d1faa90b54d187c2c1f3ec964e86ea3", 0x1000, 0x0, &(0x7f00000020c0)="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"}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"]) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008020000000f9], 0x100000}) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xf, 0x4, 0x0, 0xffff}, 0x48) 11:47:12 executing program 2: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x12, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) 11:47:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="ad", 0x1}], 0x1}, 0x20000081) [ 503.209414][T13200] 9pnet_fd: Insufficient options for proto=fd 11:47:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:12 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:47:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:12 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0) 11:47:12 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0xa5000000, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/166, 0x1a, 0xa6, 0x1}, 0x20) [ 503.404225][T13222] 9pnet_fd: Insufficient options for proto=fd 11:47:12 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:47:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 503.571325][T13234] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 503.599960][T13236] 9pnet_fd: Insufficient options for proto=fd [ 503.602797][T13234] device team0 left promiscuous mode [ 503.620579][T13234] device team_slave_0 left promiscuous mode [ 503.633147][T13234] device team_slave_1 left promiscuous mode [ 503.643933][T13234] device bridge1 left promiscuous mode [ 503.661760][T13234] device bridge2 left promiscuous mode [ 503.699021][T13234] device bridge3 left promiscuous mode [ 503.710717][T13234] bridge0: port 3(team0) entered disabled state [ 503.749500][T13237] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 503.765271][T13237] bridge0: port 3(team0) entered blocking state [ 503.839880][T13237] bridge0: port 3(team0) entered disabled state [ 503.871217][T13237] device team0 entered promiscuous mode [ 503.878766][T13237] device team_slave_0 entered promiscuous mode [ 503.885644][T13237] device team_slave_1 entered promiscuous mode [ 503.892989][T13237] device bridge1 entered promiscuous mode [ 503.901247][T13237] device bridge2 entered promiscuous mode [ 503.907818][T13237] device bridge3 entered promiscuous mode [ 503.915935][T13237] bridge0: port 3(team0) entered blocking state [ 503.922328][T13237] bridge0: port 3(team0) entered forwarding state 11:47:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = gettid() perf_event_open(&(0x7f0000002080)={0x4, 0x80, 0x3, 0x6, 0x81, 0xbd, 0x0, 0x8, 0x81000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x6}, 0x200, 0x2, 0x3, 0x7, 0x401, 0x8000, 0x2, 0x0, 0x9, 0x0, 0x7}, r4, 0xa, r3, 0x8) 11:47:14 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x4800, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f00000002c0)=""/166, 0x26, 0xa6, 0x1}, 0x20) 11:47:14 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000002c0)=""/159, 0x26, 0x9f, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/112, 0x70, 0x0, 0x0}}, 0x10) 11:47:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0xffffffff}, 0x48) 11:47:14 executing program 5: syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11:47:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:47:14 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='0l(\xff\xff\xff\xff~\xa5\x00\x00\x04\x00\x00\x00\xcd\x9dw\x97N\xf8\xe6\xb2\xe2\x03\x8e\fsM3[\x15z*\b\xba\x1e4\xdaj\xd8\xb9\az\xf7S\xf7qc\xeej\x16q\xac\x15\xa0pO\x83D\xddr\xd2\xda\xc0\xfc\x13=\x0f\x18\xae\x90\xfd\xe7Z\xf8\xf2\xcc\x82Y\xc5YE\x8d\x81\x9c*DQ\xdc\xa4\x82\xa8\xab?\x13\xf1\xb2\x9c\xea\x06\x8cQf\xdd\xb4\x9d(\xc4!q\x04\xe9A\xf0\x16\x0f\xdb\x7fS\x8c\xbb\xe0-\xb1p\xfd\nR|\xd8\x11\xb3\x8f\xca\x98\xeaQBl\xed\xd6\xbfv\x01\xa0\xd0y(\xb3\xaaF\x96\x0e\xe1\xa3\x97\xb5`$9o\xebx\xad\xc5uF\x80\xceW\x96\x88\xdd\\7UOf\x9b\xc0=CTi\x99b\xb7\xecu]\xd0\x87V\xf3\xfb\x19N\xd5\xbdi\xd9-\xf8P\xdd]\x8fm\xeao\xa4u>B\xd1\x8b\x10\x82\xe4[\xf2\x8d\xf0\xbf\xc5\t\"_\x98&\x12#>\xf3\xbd8\x01l\xe7\x9fa#$\x0f\xfbL\xf2\x9e') [ 505.405296][T13263] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 505.413636][T13263] device team0 left promiscuous mode [ 505.440833][T13266] 9pnet_fd: Insufficient options for proto=fd 11:47:14 executing program 0: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 505.468910][T13263] device team_slave_0 left promiscuous mode [ 505.482516][T13263] device team_slave_1 left promiscuous mode [ 505.490868][T13263] device bridge1 left promiscuous mode [ 505.498440][T13263] device bridge2 left promiscuous mode [ 505.505618][T13263] device bridge3 left promiscuous mode 11:47:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f00000002c0)=""/166, 0x1a, 0xa6, 0x1}, 0x20) [ 505.546615][T13263] bridge0: port 3(team0) entered disabled state 11:47:14 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000009c0)={&(0x7f00000006c0)=@id={0x1e, 0x3, 0x0, {0x0, 0x2}}, 0x10, 0x0}, 0x0) 11:47:14 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='W', 0x1}], 0x1}, 0x0) [ 505.597605][T13270] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 505.643762][T13270] bridge0: port 3(team0) entered blocking state [ 505.653521][T13270] bridge0: port 3(team0) entered disabled state [ 505.684594][T13270] device team0 entered promiscuous mode [ 505.698707][T13270] device team_slave_0 entered promiscuous mode [ 505.713875][T13270] device team_slave_1 entered promiscuous mode [ 505.746285][T13270] device bridge1 entered promiscuous mode [ 505.752371][T13270] device bridge2 entered promiscuous mode [ 505.771837][T13270] device bridge3 entered promiscuous mode [ 505.786004][T13270] bridge0: port 3(team0) entered blocking state 11:47:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = gettid() perf_event_open(&(0x7f0000002080)={0x4, 0x80, 0x3, 0x6, 0x81, 0xbd, 0x0, 0x8, 0x81000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x6}, 0x200, 0x2, 0x3, 0x7, 0x401, 0x8000, 0x2, 0x0, 0x9, 0x0, 0x7}, r4, 0xa, r3, 0x8) 11:47:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r1}, 0x4) 11:47:14 executing program 4: r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) 11:47:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6d69, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, &(0x7f00000000c0)=""/212}, 0x20) [ 505.792484][T13270] bridge0: port 3(team0) entered forwarding state 11:47:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x3e]}}, &(0x7f0000002280)=""/102388, 0x30, 0x18ff4, 0x1}, 0x20) 11:47:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f00000002c0)=""/166, 0x26, 0xa6, 0x1}, 0x20) 11:47:14 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)) [ 505.942608][T13292] dump_vmcs: 24 callbacks suppressed [ 505.942625][T13292] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 505.975842][T13295] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:47:14 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 11:47:14 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000bc0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x5, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 11:47:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x5, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x4, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x4, 0x2}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0, r2}, 0xc) [ 506.048640][T13303] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 506.086593][T13303] device team0 left promiscuous mode [ 506.117238][T13303] device team_slave_0 left promiscuous mode [ 506.142189][T13303] device team_slave_1 left promiscuous mode [ 506.160863][T13303] device bridge1 left promiscuous mode [ 506.172620][T13303] device bridge2 left promiscuous mode [ 506.191792][T13303] device bridge3 left promiscuous mode [ 506.206810][T13303] bridge0: port 3(team0) entered disabled state [ 506.224258][T13307] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 506.240070][T13307] bridge0: port 3(team0) entered blocking state [ 506.248563][T13307] bridge0: port 3(team0) entered disabled state [ 506.268471][T13307] device team0 entered promiscuous mode [ 506.274618][T13307] device team_slave_0 entered promiscuous mode [ 506.292779][T13307] device team_slave_1 entered promiscuous mode [ 506.301188][T13307] device bridge1 entered promiscuous mode [ 506.311199][T13307] device bridge2 entered promiscuous mode [ 506.319900][T13307] device bridge3 entered promiscuous mode [ 506.326811][T13307] bridge0: port 3(team0) entered blocking state [ 506.333138][T13307] bridge0: port 3(team0) entered forwarding state 11:47:15 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x12, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6d69, 0x1, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={0x0, r0}, 0x10) 11:47:15 executing program 2: socketpair(0x25, 0x1, 0x800, &(0x7f0000000040)) 11:47:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2aa0c, r0}, 0x80) 11:47:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = gettid() perf_event_open(&(0x7f0000002080)={0x4, 0x80, 0x3, 0x6, 0x81, 0xbd, 0x0, 0x8, 0x81000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x6}, 0x200, 0x2, 0x3, 0x7, 0x401, 0x8000, 0x2, 0x0, 0x9, 0x0, 0x7}, r4, 0xa, r3, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) gettid() (async) perf_event_open(&(0x7f0000002080)={0x4, 0x80, 0x3, 0x6, 0x81, 0xbd, 0x0, 0x8, 0x81000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x6}, 0x200, 0x2, 0x3, 0x7, 0x401, 0x8000, 0x2, 0x0, 0x9, 0x0, 0x7}, r4, 0xa, r3, 0x8) (async) 11:47:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 506.537984][T13317] device team0 left promiscuous mode 11:47:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xa2, &(0x7f0000000000)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0}, 0x10) 11:47:15 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f0000000340)) [ 506.570307][T13317] device team_slave_0 left promiscuous mode [ 506.621929][T13317] device team_slave_1 left promiscuous mode [ 506.651957][T13317] device bridge1 left promiscuous mode [ 506.657677][T13317] device bridge2 left promiscuous mode [ 506.663276][T13317] device bridge3 left promiscuous mode [ 506.669309][T13317] bridge0: port 3(team0) entered disabled state 11:47:15 executing program 5: bpf$PROG_BIND_MAP(0x21, &(0x7f0000000080), 0xc) 11:47:15 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:47:15 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 506.718634][T13331] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 506.748093][T13325] bridge0: port 3(team0) entered blocking state [ 506.761372][T13331] CPU: 0 PID: 13331 Comm: syz-executor.1 Not tainted 5.17.0-rc1-next-20220124-syzkaller #0 [ 506.771514][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.781589][T13331] Call Trace: [ 506.784881][T13331] [ 506.787827][T13331] dump_stack_lvl+0xcd/0x134 [ 506.792446][T13331] warn_alloc.cold+0x9b/0x189 [ 506.797154][T13331] ? zone_watermark_ok_safe+0x290/0x290 [ 506.797489][T13325] bridge0: port 3(team0) entered disabled state [ 506.802726][T13331] ? find_held_lock+0x2d/0x110 [ 506.802769][T13331] ? lock_downgrade+0x6e0/0x6e0 [ 506.802815][T13331] ? __vmalloc_node_range+0x7ad/0x1040 [ 506.814596][T13325] device team0 entered promiscuous mode [ 506.818715][T13331] __vmalloc_node_range+0xe0a/0x1040 [ 506.818758][T13331] ? vfree_atomic+0xe0/0xe0 [ 506.818786][T13331] ? vfs_fileattr_set+0xbe0/0xbe0 [ 506.818825][T13331] ? kvm_dev_ioctl+0x1a4/0x1b30 [ 506.825105][T13325] device team_slave_0 entered promiscuous mode [ 506.829817][T13331] __vmalloc+0x69/0x80 [ 506.829845][T13331] ? kvm_dev_ioctl+0x1a4/0x1b30 [ 506.829879][T13331] ? kvm_stat_data_open+0x380/0x380 [ 506.829914][T13331] kvm_dev_ioctl+0x1a4/0x1b30 [ 506.836062][T13325] device team_slave_1 entered promiscuous mode [ 506.839721][T13331] ? kvm_stat_data_open+0x380/0x380 [ 506.839774][T13331] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 506.845492][T13325] device bridge1 entered promiscuous mode [ 506.849638][T13331] ? kvm_stat_data_open+0x380/0x380 [ 506.849680][T13331] __x64_sys_ioctl+0x193/0x200 [ 506.849717][T13331] do_syscall_64+0x35/0xb0 [ 506.856666][T13325] device bridge2 entered promiscuous mode 11:47:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 506.859923][T13331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.859954][T13331] RIP: 0033:0x7fb1b07db059 [ 506.859975][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.859999][T13331] RSP: 002b:00007fb1af10e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.865669][T13325] device bridge3 entered promiscuous mode 11:47:15 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000680)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) [ 506.870023][T13331] RAX: ffffffffffffffda RBX: 00007fb1b08ee100 RCX: 00007fb1b07db059 [ 506.870043][T13331] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 506.870058][T13331] RBP: 00007fb1b083508d R08: 0000000000000000 R09: 0000000000000000 [ 506.870074][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.870089][T13331] R13: 00007ffeb8d4775f R14: 00007fb1af10e300 R15: 0000000000022000 [ 506.870122][T13331] [ 506.876456][T13325] bridge0: port 3(team0) entered blocking state [ 506.986231][T13331] Mem-Info: [ 506.987244][T13325] bridge0: port 3(team0) entered forwarding state [ 506.996690][T13331] active_anon:2753 inactive_anon:176602 isolated_anon:0 [ 506.996690][T13331] active_file:4868 inactive_file:83323 isolated_file:0 [ 506.996690][T13331] unevictable:768 dirty:27 writeback:0 [ 506.996690][T13331] slab_reclaimable:18992 slab_unreclaimable:101335 [ 506.996690][T13331] mapped:28209 shmem:4362 pagetables:1086 bounce:0 [ 506.996690][T13331] kernel_misc_reclaimable:0 [ 506.996690][T13331] free:1210652 free_pcp:9508 free_cma:0 11:47:15 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0xcb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) [ 507.065585][T13331] Node 0 active_anon:11004kB inactive_anon:703520kB active_file:19400kB inactive_file:333292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112836kB dirty:100kB writeback:0kB shmem:14972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 208896kB writeback_tmp:0kB kernel_stack:12836kB pagetables:4340kB all_unreclaimable? no [ 507.107042][T13331] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 507.205437][T13331] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.248941][T13331] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 507.254929][T13331] Node 0 DMA32 free:882248kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:11004kB inactive_anon:699200kB active_file:19400kB inactive_file:333292kB unevictable:1536kB writepending:100kB present:3129332kB managed:2716532kB mlocked:0kB bounce:0kB free_pcp:37696kB local_pcp:21476kB free_cma:0kB [ 507.290432][T13331] lowmem_reserve[]: 0 0 0 0 0 [ 507.296042][T13331] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.323497][T13331] lowmem_reserve[]: 0 0 0 0 0 [ 507.333115][T13331] Node 1 Normal free:3952104kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:996kB local_pcp:0kB free_cma:0kB [ 507.363047][T13331] lowmem_reserve[]: 0 0 0 0 0 [ 507.368045][T13331] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 507.380844][T13331] Node 0 DMA32: 88*4kB (UME) 991*8kB (UME) 579*16kB (ME) 448*32kB (UME) 197*64kB (UME) 75*128kB (UME) 17*256kB (UM) 7*512kB (UME) 3*1024kB (UME) 5*2048kB (ME) 197*4096kB (UM) = 882248kB [ 507.399788][T13331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 507.412931][T13331] Node 1 Normal: 142*4kB (UE) 40*8kB (UME) 25*16kB (UE) 167*32kB (UE) 84*64kB (UME) 26*128kB (UME) 10*256kB (U) 6*512kB (U) 1*1024kB (E) 3*2048kB (UM) 958*4096kB (M) = 3952104kB [ 507.431492][T13331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.442882][T13331] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.452624][T13331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.462498][T13331] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.471945][T13331] 16668 total pagecache pages [ 507.477065][T13331] 0 pages in swap cache [ 507.481317][T13331] Swap cache stats: add 0, delete 0, find 0/0 [ 507.487545][T13331] Free swap = 0kB [ 507.491654][T13331] Total swap = 0kB [ 507.495541][T13331] 2097051 pages RAM [ 507.499460][T13331] 0 pages HighMem/MovableOnly [ 507.504245][T13331] 384573 pages reserved [ 507.511512][T13331] 0 pages cma reserved 11:47:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x9) 11:47:16 executing program 5: socketpair(0xa, 0x3, 0x1, &(0x7f0000000480)) 11:47:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 11:47:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x48949, 0x10001}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f00000020c0)={0xcc, 0x0, 0x1}) r5 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002140)={{0x1, 0x1, 0x18}, './file0/../file0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000021c0)=0x9) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11:47:16 executing program 2: pipe(&(0x7f00000016c0)) 11:47:16 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 507.633893][T13363] validate_nla: 2 callbacks suppressed [ 507.633910][T13363] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:16 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2801000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 507.731247][T13363] device team0 left promiscuous mode 11:47:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:16 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) [ 507.775158][T13363] device team_slave_0 left promiscuous mode [ 507.793477][T13363] device team_slave_1 left promiscuous mode [ 507.809098][T13363] device bridge1 left promiscuous mode [ 507.843840][T13363] device bridge2 left promiscuous mode [ 507.856758][T13363] device bridge3 left promiscuous mode [ 507.868597][T13363] bridge0: port 3(team0) entered disabled state [ 507.882824][T13369] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 507.891629][T13369] bridge0: port 3(team0) entered blocking state [ 507.902682][T13369] bridge0: port 3(team0) entered disabled state [ 507.911073][T13369] device team0 entered promiscuous mode [ 507.917061][T13369] device team_slave_0 entered promiscuous mode [ 507.924664][T13369] device team_slave_1 entered promiscuous mode [ 507.955559][T13369] device bridge1 entered promiscuous mode [ 507.980980][T13369] device bridge2 entered promiscuous mode [ 507.991610][T13369] device bridge3 entered promiscuous mode [ 507.998956][T13369] bridge0: port 3(team0) entered blocking state 11:47:16 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x10}, {0x5, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000002c0)=""/166, 0x42, 0xa6, 0x1}, 0x20) 11:47:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:16 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 508.005357][T13369] bridge0: port 3(team0) entered forwarding state 11:47:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x48949, 0x10001}, 0x0, 0x1, 0xffffffffffffffff, 0xb) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f00000020c0)={0xcc, 0x0, 0x1}) (async) r5 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002140)={{0x1, 0x1, 0x18}, './file0/../file0\x00'}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) (async, rerun: 32) read$FUSE(0xffffffffffffffff, 0x0, 0xc) (async, rerun: 32) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000021c0)=0x9) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11:47:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x401c5820, &(0x7f00000000c0)='devices.deny\x00') 11:47:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) 11:47:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {}]}]}}, &(0x7f00000002c0)=""/166, 0x3e, 0xa6, 0x1}, 0x20) 11:47:16 executing program 2: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000280)) 11:47:16 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="176a6769df128fbf5213a420651d706ce083b592e54ab4bbc8b34a790d6bb839044aeb87371be8baef45eca6ad8480eb5c4993a5c28f32dc6ffd6670e1496a515a1edc8de3ac41e2f2beeb3e126bddb0c809571752e4f25415e3e8b779593decf8641a985d4f1264993446f5b9b3f67904e7627e95ca0ae916d967adac52a476396552579fe92486f098f96cc534", 0x8e}, {&(0x7f0000000080)="d6d79270111fa228322250bc4638ecb113f4814661e9fa81f4a69dc1701b23bc4844", 0x22}, {&(0x7f0000001240)="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", 0xf50}, {0x0, 0x803e000000000000}, {&(0x7f00000000c0)="55b6", 0x2}], 0x5}, 0x11) [ 508.132282][T13394] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 508.185202][T13394] device team0 left promiscuous mode 11:47:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 11:47:17 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='W', 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 508.228085][T13394] device team_slave_0 left promiscuous mode [ 508.255195][T13394] device team_slave_1 left promiscuous mode 11:47:17 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x3) connect$caif(r0, &(0x7f0000000100), 0x18) 11:47:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7ff}) [ 508.285290][T13394] device bridge1 left promiscuous mode [ 508.309369][T13394] device bridge2 left promiscuous mode 11:47:17 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netstat\x00') [ 508.346841][T13394] device bridge3 left promiscuous mode [ 508.366743][T13394] bridge0: port 3(team0) entered disabled state [ 508.445571][T13402] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 508.466488][T13402] bridge0: port 3(team0) entered blocking state [ 508.494583][T13402] bridge0: port 3(team0) entered disabled state [ 508.527806][T13402] device team0 entered promiscuous mode [ 508.533503][T13402] device team_slave_0 entered promiscuous mode [ 508.541658][T13402] device team_slave_1 entered promiscuous mode [ 508.552421][T13402] device bridge1 entered promiscuous mode [ 508.567803][T13402] device bridge2 entered promiscuous mode 11:47:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:17 executing program 2: socket$inet6(0xa, 0x3, 0x2) 11:47:17 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000580)={'sit0\x00', 0x0}) 11:47:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x48949, 0x10001}, 0x0, 0x1, 0xffffffffffffffff, 0xb) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f00000020c0)={0xcc, 0x0, 0x1}) r5 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000002140)={{0x1, 0x1, 0x18}, './file0/../file0\x00'}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000021c0)=0x9) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 11:47:17 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$msr(r0, 0x0, 0x0) [ 508.573765][T13402] device bridge3 entered promiscuous mode [ 508.580688][T13402] bridge0: port 3(team0) entered blocking state [ 508.587028][T13402] bridge0: port 3(team0) entered forwarding state 11:47:17 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:47:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x0) 11:47:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000002c0)=0x1000003, 0x4) [ 508.699024][T13436] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 508.716336][T13436] device team0 left promiscuous mode [ 508.745923][T13436] device team_slave_0 left promiscuous mode [ 508.767184][T13436] device team_slave_1 left promiscuous mode [ 508.795186][T13436] device bridge1 left promiscuous mode [ 508.814591][T13436] device bridge2 left promiscuous mode [ 508.845360][T13436] device bridge3 left promiscuous mode [ 508.852629][T13436] bridge0: port 3(team0) entered disabled state [ 508.872601][T13439] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 508.882782][T13439] bridge0: port 3(team0) entered blocking state [ 508.892260][T13439] bridge0: port 3(team0) entered disabled state [ 508.902181][T13439] device team0 entered promiscuous mode [ 508.908245][T13439] device team_slave_0 entered promiscuous mode [ 508.916119][T13439] device team_slave_1 entered promiscuous mode [ 508.922551][T13439] device bridge1 entered promiscuous mode [ 508.938305][T13439] device bridge2 entered promiscuous mode [ 508.947848][T13439] device bridge3 entered promiscuous mode [ 508.954326][T13439] bridge0: port 3(team0) entered blocking state [ 508.960719][T13439] bridge0: port 3(team0) entered forwarding state 11:47:17 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="16", 0x1) 11:47:17 executing program 2: socket$caif_stream(0x25, 0x1, 0x5) 11:47:17 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 11:47:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') 11:47:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 11:47:17 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:18 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x5b0, 0x460, 0x380, 0xffffffff, 0x380, 0x380, 0x540, 0x540, 0xffffffff, 0x540, 0x540, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'vcan0\x00'}, 0x0, 0x2a0, 0x2d8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip_vti0\x00', 'xfrm0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "6791"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x610) 11:47:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 509.176060][T13446] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 509.197182][T13446] device team0 left promiscuous mode 11:47:18 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000002240), 0x4) [ 509.255073][T13446] device team_slave_0 left promiscuous mode 11:47:18 executing program 5: socketpair(0x1d, 0x0, 0x1f, 0x0) 11:47:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000002100), 0x4) [ 509.305981][T13446] device team_slave_1 left promiscuous mode [ 509.335465][T13446] device bridge1 left promiscuous mode [ 509.362331][T13446] device bridge2 left promiscuous mode [ 509.382937][T13446] device bridge3 left promiscuous mode 11:47:18 executing program 4: socket$inet(0x2, 0x3, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xfffffe66, &(0x7f0000000180)={&(0x7f0000000140)=@gettaction={0x40, 0x32, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) r1 = syz_clone(0x8004000, &(0x7f0000000340)="693cea8544d4a37bb2d84046f2e4e17181261c8c39b5c9d9cc59a0d8375537112f763df79d6adf325577f3e6c439ff5abf19982d92d308a4286970562607044cef0d52036f06c3120aac98178d67e3ff5167ae76d2c0e8e997523132e4f01ef2c110974b97547f21296839846c57d9bcf643685fd7d96668795cc4c9e64667a3944859bd6e88619b500a6cf974793fdee855563ed39197fd86fa2aed0f1c5d88db2f1c271d252a1548d0187b2501ac2195773577709baa93adcc33ed581df7ca6e472d441f2067", 0xc7, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="67cc44b5db2d6f86006592493db7e59191a89f1c8b8c1f46ec57aba26335ecf14388cd5a9e29f76121811d371dd1eae6e680f59e89efa1f82d2a170d23c136416d26f3b87f11946d5973eac09dbd375fa70157897b221227900722c056cb06040189eb527dc1fc1eb92a7d563f702f6620a18cb94376fa6eaa5ce2cd531feb0c2f3ec5d588ee7704e38c1355d08c0f6ade9310017e884acaddde5ad5daf70f01c93d11784e0505569eaf3a468c3862c678a6f830666f4f4d8bf7e0f7519e971781de41a0e64c786c830a984db4c931dfeb94e8a7f8986d87d2b387ebcabf2e067d32") r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/dev_mcast\x00') setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080)=0x5a, 0x4) [ 509.411129][T13446] bridge0: port 3(team0) entered disabled state 11:47:18 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/xfrm_stat\x00') 11:47:18 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:47:18 executing program 2: io_setup(0x6, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x1, &(0x7f00000012c0)=[0x0]) 11:47:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) [ 509.487623][T13456] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0xab) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) [ 509.556834][T13456] bridge0: port 3(team0) entered blocking state [ 509.592626][T13456] bridge0: port 3(team0) entered disabled state [ 509.629564][T13456] device team0 entered promiscuous mode [ 509.658635][T13456] device team_slave_0 entered promiscuous mode [ 509.707520][T13456] device team_slave_1 entered promiscuous mode [ 509.725258][T13456] device bridge1 entered promiscuous mode [ 509.731148][T13456] device bridge2 entered promiscuous mode [ 509.763145][T13456] device bridge3 entered promiscuous mode [ 509.770573][T13456] bridge0: port 3(team0) entered blocking state [ 509.776994][T13456] bridge0: port 3(team0) entered forwarding state 11:47:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:18 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002100), 0xffffffffffffff89) 11:47:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000002100)=0x64e, 0x4) 11:47:18 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) 11:47:18 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 11:47:18 executing program 2: socketpair(0xa, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x204, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x417f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x204}}, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000f80)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0098c4d2"}}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 11:47:18 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x634200) [ 509.896698][T13506] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 509.935293][T13506] device team0 left promiscuous mode 11:47:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window, @mss, @timestamp], 0x4) [ 509.949193][T13506] device team_slave_0 left promiscuous mode 11:47:18 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000980)) [ 510.005333][T13506] device team_slave_1 left promiscuous mode [ 510.017130][T13506] device bridge1 left promiscuous mode [ 510.045553][T13506] device bridge2 left promiscuous mode 11:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) [ 510.077306][T13506] device bridge3 left promiscuous mode [ 510.096675][T13506] bridge0: port 3(team0) entered disabled state 11:47:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 11:47:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080), 0x4) [ 510.121856][T13511] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 510.143564][T13511] bridge0: port 3(team0) entered blocking state [ 510.194780][T13511] bridge0: port 3(team0) entered disabled state [ 510.218174][T13511] device team0 entered promiscuous mode [ 510.232565][T13511] device team_slave_0 entered promiscuous mode 11:47:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:19 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 11:47:19 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x100, 0x100, 0x448, 0x358, 0x100, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'bridge_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @ipv4, [], [], 'veth1_to_batadv\x00', 'veth0_macvtap\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'veth0_to_bridge\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}}, @common=@inet=@length={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) 11:47:19 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') [ 510.295309][T13511] device team_slave_1 entered promiscuous mode [ 510.303098][T13511] device bridge1 entered promiscuous mode [ 510.312344][T13511] device bridge2 entered promiscuous mode [ 510.318854][T13511] device bridge3 entered promiscuous mode [ 510.326367][T13511] bridge0: port 3(team0) entered blocking state [ 510.332820][T13511] bridge0: port 3(team0) entered forwarding state [ 510.393829][T13534] x_tables: duplicate underflow at hook 1 [ 510.443570][T13539] device team0 left promiscuous mode 11:47:19 executing program 0: setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040), 0xfffffffffffffdd6) 11:47:19 executing program 5: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000c80)) 11:47:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100), 0x4) 11:47:19 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x100, 0x100, 0x448, 0x358, 0x100, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'bridge_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @ipv4, [], [], 'veth1_to_batadv\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) [ 510.473587][T13539] device team_slave_0 left promiscuous mode [ 510.505168][T13539] device team_slave_1 left promiscuous mode [ 510.536403][T13539] device bridge1 left promiscuous mode [ 510.576677][T13539] device bridge2 left promiscuous mode [ 510.598001][T13539] device bridge3 left promiscuous mode [ 510.618636][T13539] bridge0: port 3(team0) entered disabled state 11:47:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x7ff}) 11:47:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x34}}, 0x0) 11:47:19 executing program 2: io_setup(0x5, &(0x7f00000001c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xf890}]) 11:47:19 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x100, 0x100, 0x448, 0x358, 0x100, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'bridge_slave_1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @ipv4, [], [], 'veth1_to_batadv\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) [ 510.690408][T13540] bridge0: port 3(team0) entered blocking state [ 510.703154][T13540] bridge0: port 3(team0) entered disabled state [ 510.748878][T13540] device team0 entered promiscuous mode [ 510.791422][T13540] device team_slave_0 entered promiscuous mode 11:47:19 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, r7, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000640)='./bus/file0\x00', &(0x7f0000000680), 0x22800, &(0x7f0000000780)=ANY=[@ANYBLOB='default_permissions,workdir=./bus,xino=off,permi', @ANYRESDEC=r11, @ANYBLOB=',os\x00,obj_role=:\\,subj_role=overlckfsroot=overlay\x00,secl']) lchown(&(0x7f0000000340)='./bus\x00', r11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000047c0)={0x4, 0xffff, {r6}, {r4}, 0x8, 0x6}) syz_fuse_handle_req(r3, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004d80)={&(0x7f0000004080)={0x50, 0x0, 0x1, {0x7, 0x23, 0x3, 0x202000, 0x9, 0x1, 0x2, 0x6}}, &(0x7f0000004100)={0x18, 0xfffffffffffffffe, 0x7, {0xee65}}, &(0x7f0000004140)={0x18, 0x0, 0x4fdc, {0x8}}, &(0x7f0000004180)={0x18, 0xfffffffffffffff5, 0x8, {0x80}}, &(0x7f00000041c0)={0x18, 0x0, 0x4, {0x8}}, &(0x7f0000004200)={0x28, 0x0, 0xffffffffffffffff, {{0xfff, 0x9, 0x2}}}, &(0x7f0000004240)={0x60, 0x0, 0x9, {{0x44, 0x800, 0x5, 0x100000000, 0x400, 0x3, 0x1, 0x4}}}, &(0x7f00000042c0)={0x18, 0x0, 0x6}, &(0x7f0000004300)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000004340)={0x20, 0xffffffffffffffda, 0x234d, {0x0, 0x1}}, &(0x7f0000004380)={0x78, 0x0, 0x0, {0x9, 0x8000, 0x0, {0x6, 0xf248, 0x7fffffff, 0x80, 0x0, 0x9, 0x8, 0x7, 0x7, 0x6000, 0x652, r4, r5, 0x8, 0x7ff}}}, &(0x7f00000044c0)={0x90, 0xfffffffffffffff5, 0x80, {0x3, 0x1, 0x401, 0x2, 0x7f, 0x7fff, {0x2, 0x1f, 0x1, 0x8, 0x0, 0x7, 0x9, 0x3, 0x1ff, 0x7000, 0x8, r4, 0x0, 0x7f, 0xaba}}}, &(0x7f0000004580)={0x68, 0x0, 0x1, [{0x6, 0x6, 0x3, 0x6, '\\/\''}, {0x2, 0x7, 0x0, 0x3}, {0x0, 0x3f, 0x3, 0x6, '.^\''}]}, &(0x7f0000004800)={0x450, 0xfffffffffffffff5, 0x1, [{{0x3, 0x3, 0x2, 0x20000000, 0x7fff, 0x7, {0x0, 0x1, 0x8f, 0x8, 0x4, 0x7fff, 0x100, 0x3, 0x5, 0x9000, 0xffff8bfe, 0x0, 0x0, 0x80000000, 0x2}}, {0x2, 0x808000, 0x0, 0x7}}, {{0x5, 0x3, 0x8, 0x4, 0x200, 0x1, {0x4, 0x3, 0x7fff, 0xfffffffffffffff9, 0xc1a, 0x1, 0x800, 0x401, 0xfffffff9, 0x1000, 0x2, r4, 0xee01, 0x9, 0x1ff}}, {0x0, 0x6, 0x0, 0x9}}, {{0x1, 0x3, 0xfffffffffffffff8, 0x9, 0x3, 0x1, {0x5, 0x8000, 0x3, 0x1, 0x5, 0x400, 0x6, 0x400, 0x9, 0x1000, 0x1a, 0x0, 0x0, 0x0, 0x5}}, {0x2, 0x831, 0x1, 0x3, ','}}, {{0x6, 0x2, 0x2, 0x9, 0x1, 0x5, {0x0, 0x1f, 0x1f, 0xfff, 0x3, 0x0, 0x10000, 0x6, 0x7, 0x4000, 0x7, r4, 0x0, 0x7, 0xb1a0}}, {0x0, 0x40, 0x7, 0x6, 'status\x00'}}, {{0x1, 0x3, 0x1, 0x6, 0x1, 0x7ff, {0x5, 0x4, 0x8, 0x4, 0x100, 0x6e, 0xe5d8, 0xc, 0x200, 0xb000, 0x2, r4, r7, 0x4}}, {0x3, 0x0, 0x2, 0x2, '@\xf4'}}, {{0x0, 0x0, 0x6, 0x8, 0x63, 0x5c, {0x4, 0x3, 0x7, 0x5, 0x1200000000, 0x2800000000000, 0x9b, 0x5, 0x9, 0xb000, 0x8, r11, r5, 0x4, 0x2}}, {0x4, 0x7fff, 0x0, 0x1f}}, {{0x3, 0x0, 0x800, 0x6, 0x0, 0xff, {0x4, 0x5a2def1c, 0x6, 0x9, 0xf9d, 0x9, 0x81, 0x5, 0xff, 0x1000, 0x0, r12, 0xee01, 0xf90, 0xf10}}, {0x4, 0x5, 0x0, 0x108a}}]}, &(0x7f0000004c80)={0xa0, 0x0, 0x3, {{0x3, 0x1, 0x4baa, 0x8001, 0xd74, 0x0, {0x1, 0x2f, 0x1, 0x1, 0x0, 0x3, 0xfffffffb, 0x9, 0x8, 0xc000, 0x81, r4, 0xffffffffffffffff, 0x200, 0xfffeffff}}}}, &(0x7f0000004d40)={0x20, 0x0, 0x80000000, {0x8775, 0x4, 0x0, 0x4}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x1], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:47:19 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)="0afb1abcdb0c0a9dc0310a83c6e20a3c462d35c85e49a84c1857c04f1d655706b34515cca4107d14efbff55dd540bffeaa1c9a171032cbe55f243d237325a5de313aaf228922bf85d5e89e8e984946191f207447714f54c14286549f7f9d02426dbb2ba0dc46a627af52b48102af240273c12a81f467d306117d89937801c753e454a2c8d47c53c16626fb81bf19a3c05095692fcd524944833372343785e8e79fd4df9834dd4e56bf72dadc310869505f9290cb9cbb5312f4afb9af8c87d59f72f4694f1299aece115db7807721bf69aed9cf8c301ed316d05cd51386e6f17a457d6032456153e48e5e57e35f7fca6c") 11:47:19 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfffffffffffffef6) 11:47:19 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) [ 510.835135][T13540] device team_slave_1 entered promiscuous mode [ 510.842281][T13540] device bridge1 entered promiscuous mode [ 510.848243][T13540] device bridge2 entered promiscuous mode [ 510.854114][T13540] device bridge3 entered promiscuous mode [ 510.860441][T13540] bridge0: port 3(team0) entered blocking state [ 510.866804][T13540] bridge0: port 3(team0) entered forwarding state 11:47:19 executing program 4: io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}) 11:47:19 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000002140), 0x40083, 0x0) [ 510.988022][T13571] device team0 left promiscuous mode 11:47:19 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 11:47:19 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 511.034185][T13571] device team_slave_0 left promiscuous mode [ 511.073208][T13571] device team_slave_1 left promiscuous mode 11:47:19 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x2}, 0x0, &(0x7f0000000180)={0x0}) [ 511.119324][T13571] device bridge1 left promiscuous mode [ 511.139617][T13571] device bridge2 left promiscuous mode [ 511.146820][T13571] device bridge3 left promiscuous mode [ 511.153131][T13571] bridge0: port 3(team0) entered disabled state 11:47:19 executing program 5: mq_open(&(0x7f0000000000)='(!&,{]\x00', 0x0, 0x0, 0x0) [ 511.169452][T13575] bridge0: port 3(team0) entered blocking state [ 511.188890][T13575] bridge0: port 3(team0) entered disabled state [ 511.237244][T13575] device team0 entered promiscuous mode [ 511.247973][T13575] device team_slave_0 entered promiscuous mode [ 511.262859][T13575] device team_slave_1 entered promiscuous mode [ 511.278491][T13575] device bridge1 entered promiscuous mode [ 511.293201][T13575] device bridge2 entered promiscuous mode [ 511.313276][T13575] device bridge3 entered promiscuous mode [ 511.335625][T13575] bridge0: port 3(team0) entered blocking state [ 511.341989][T13575] bridge0: port 3(team0) entered forwarding state 11:47:20 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) 11:47:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xc0, 0x0, 0x0) 11:47:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:20 executing program 0: setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) 11:47:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') 11:47:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, r7, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000640)='./bus/file0\x00', &(0x7f0000000680), 0x22800, &(0x7f0000000780)=ANY=[@ANYBLOB='default_permissions,workdir=./bus,xino=off,permi', @ANYRESDEC=r11, @ANYBLOB=',os\x00,obj_role=:\\,subj_role=overlckfsroot=overlay\x00,secl']) lchown(&(0x7f0000000340)='./bus\x00', r11, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000047c0)={0x4, 0xffff, {r6}, {r4}, 0x8, 0x6}) syz_fuse_handle_req(r3, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004d80)={&(0x7f0000004080)={0x50, 0x0, 0x1, {0x7, 0x23, 0x3, 0x202000, 0x9, 0x1, 0x2, 0x6}}, &(0x7f0000004100)={0x18, 0xfffffffffffffffe, 0x7, {0xee65}}, &(0x7f0000004140)={0x18, 0x0, 0x4fdc, {0x8}}, &(0x7f0000004180)={0x18, 0xfffffffffffffff5, 0x8, {0x80}}, &(0x7f00000041c0)={0x18, 0x0, 0x4, {0x8}}, &(0x7f0000004200)={0x28, 0x0, 0xffffffffffffffff, {{0xfff, 0x9, 0x2}}}, &(0x7f0000004240)={0x60, 0x0, 0x9, {{0x44, 0x800, 0x5, 0x100000000, 0x400, 0x3, 0x1, 0x4}}}, &(0x7f00000042c0)={0x18, 0x0, 0x6}, &(0x7f0000004300)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000004340)={0x20, 0xffffffffffffffda, 0x234d, {0x0, 0x1}}, &(0x7f0000004380)={0x78, 0x0, 0x0, {0x9, 0x8000, 0x0, {0x6, 0xf248, 0x7fffffff, 0x80, 0x0, 0x9, 0x8, 0x7, 0x7, 0x6000, 0x652, r4, r5, 0x8, 0x7ff}}}, &(0x7f00000044c0)={0x90, 0xfffffffffffffff5, 0x80, {0x3, 0x1, 0x401, 0x2, 0x7f, 0x7fff, {0x2, 0x1f, 0x1, 0x8, 0x0, 0x7, 0x9, 0x3, 0x1ff, 0x7000, 0x8, r4, 0x0, 0x7f, 0xaba}}}, &(0x7f0000004580)={0x68, 0x0, 0x1, [{0x6, 0x6, 0x3, 0x6, '\\/\''}, {0x2, 0x7, 0x0, 0x3}, {0x0, 0x3f, 0x3, 0x6, '.^\''}]}, &(0x7f0000004800)={0x450, 0xfffffffffffffff5, 0x1, [{{0x3, 0x3, 0x2, 0x20000000, 0x7fff, 0x7, {0x0, 0x1, 0x8f, 0x8, 0x4, 0x7fff, 0x100, 0x3, 0x5, 0x9000, 0xffff8bfe, 0x0, 0x0, 0x80000000, 0x2}}, {0x2, 0x808000, 0x0, 0x7}}, {{0x5, 0x3, 0x8, 0x4, 0x200, 0x1, {0x4, 0x3, 0x7fff, 0xfffffffffffffff9, 0xc1a, 0x1, 0x800, 0x401, 0xfffffff9, 0x1000, 0x2, r4, 0xee01, 0x9, 0x1ff}}, {0x0, 0x6, 0x0, 0x9}}, {{0x1, 0x3, 0xfffffffffffffff8, 0x9, 0x3, 0x1, {0x5, 0x8000, 0x3, 0x1, 0x5, 0x400, 0x6, 0x400, 0x9, 0x1000, 0x1a, 0x0, 0x0, 0x0, 0x5}}, {0x2, 0x831, 0x1, 0x3, ','}}, {{0x6, 0x2, 0x2, 0x9, 0x1, 0x5, {0x0, 0x1f, 0x1f, 0xfff, 0x3, 0x0, 0x10000, 0x6, 0x7, 0x4000, 0x7, r4, 0x0, 0x7, 0xb1a0}}, {0x0, 0x40, 0x7, 0x6, 'status\x00'}}, {{0x1, 0x3, 0x1, 0x6, 0x1, 0x7ff, {0x5, 0x4, 0x8, 0x4, 0x100, 0x6e, 0xe5d8, 0xc, 0x200, 0xb000, 0x2, r4, r7, 0x4}}, {0x3, 0x0, 0x2, 0x2, '@\xf4'}}, {{0x0, 0x0, 0x6, 0x8, 0x63, 0x5c, {0x4, 0x3, 0x7, 0x5, 0x1200000000, 0x2800000000000, 0x9b, 0x5, 0x9, 0xb000, 0x8, r11, r5, 0x4, 0x2}}, {0x4, 0x7fff, 0x0, 0x1f}}, {{0x3, 0x0, 0x800, 0x6, 0x0, 0xff, {0x4, 0x5a2def1c, 0x6, 0x9, 0xf9d, 0x9, 0x81, 0x5, 0xff, 0x1000, 0x0, r12, 0xee01, 0xf90, 0xf10}}, {0x4, 0x5, 0x0, 0x108a}}]}, &(0x7f0000004c80)={0xa0, 0x0, 0x3, {{0x3, 0x1, 0x4baa, 0x8001, 0xd74, 0x0, {0x1, 0x2f, 0x1, 0x1, 0x0, 0x3, 0xfffffffb, 0x9, 0x8, 0xc000, 0x81, r4, 0xffffffffffffffff, 0x200, 0xfffeffff}}}}, &(0x7f0000004d40)={0x20, 0x0, 0x80000000, {0x8775, 0x4, 0x0, 0x4}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x1], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresgid(r9, r7, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) mount$overlay(0x0, &(0x7f0000000640)='./bus/file0\x00', &(0x7f0000000680), 0x22800, &(0x7f0000000780)=ANY=[@ANYBLOB='default_permissions,workdir=./bus,xino=off,permi', @ANYRESDEC=r11, @ANYBLOB=',os\x00,obj_role=:\\,subj_role=overlckfsroot=overlay\x00,secl']) (async) lchown(&(0x7f0000000340)='./bus\x00', r11, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000047c0)={0x4, 0xffff, {r6}, {r4}, 0x8, 0x6}) (async) syz_fuse_handle_req(r3, &(0x7f0000002080)="d1b99cbbdcd1c2cc65da79678ef6e64d7a0baf7bde140f1b958889d7041c4f18f1b7d67774c33751abb5d6373715d897a37841b3e7acae3b3bac5e9a8e4bec457d91222770fa35910041486bec1b41a3365d54751af02ca4b980a73a077ce233b1b647323eb949bddca9711569be7d246fca3e59df661938f6b130d0b3389e23af2a2a24e5c27b364881329afb55bc85d32d8851882ce16760f0d8268f5a5f068b2163f13778fbfe52c9dedbcc4caa7dca6d4769c98790a3320c5b908cc5a52ab05f8141c11e15448b84cae6472a9d4103dd3dc9692fa3174d2ff10a58274d0415198a941c1cfc4e4152bdcc419ff2a55c18fa1513930b5053b23e6328929ecd6822c3d9a4dcafc22751acf751e13cfd69fce69da6be5232874c226b494b4b23ef663b4004acd44b226edd7247045a8aeb3e13ee51d8a0a4302545806aa924fd2e5631dc013255fdcc80ee39439c7ccc04d11321df1c8b5d77d8704c210b9280efe46c8452cca3428f5a6999f5275b5eeff2003777d47ee73eebb3b7f05f74b6dedd65d0663604be0a4545bf0b6e1f980de8696d12e6029bede6bf35cbdff3bed8b2e1a0d1cfef240bd703c04f98827c0436c2d081f55d7120a37cc7d4e8e90ee239df98ffa0e4eda529fbc76babd197ac244d6b3597f847b988e9b8c5da29049be9150f8831422c7adf00b481956dc743ca87053af9e90e13982200208b1a6cdde7a3ddde8a2658250a36d40d84c7ec2014b72041f6399d96bce8056c65a94fe65527172bb6881b9afeea0e82d5cff778f04daaeeca13016d73e72865929016f8f9b5b19077f08df1dcc68da10b482f59b799909eb780882c65a4944d5d844e86a08ceff3a1e9f138f140fe4308590d8c9f5f4a9961e738cb19316db6453f4c15c56a74fbaf252a9c1423eaccc8f6182f1f914d7d1571406a69e0d40bf7b49c2a3010d967477802dc3552ab500c832a1c2d28fc90fd73a9a4b2110a3d31cc33334c680189cbb3391b92b8e685520c59d92093bfff18d9db9ed6f9af000ace80c2d648322eb0cd41c8eb23e40e8160fd32233b9e3b6a98a31c5305900fe09cf9e8a6bbbe7d35f73cd8f173ef4dcb09e5da24516d646e2d5865809ac29ab3ae774ca256783f573bc42160a32f3009a7ad2c231e9146ceced54a8b094236d0d9e51103856ac6ea1854542b3f28c85737ec2ff20ec9459cc843402f3fef203fd9b0511c913d6d4e7aa8dad95df6758a5aed4a6d3d33ae45d4703e5b5d8a4a8f2b4873c7e063f76ead0aa6a88b797210d02b8a28b3bb4c9b535650e2958e94f1c5256e61fb927fd2123ec059a2237188c4b86e3e51eff6f3a5efdb4c8274b7e28c730e88b17ac8334003030e4c0732988fbb263384e0d607b2f225ce49a945fa09eb363ef1faf604d6e321e495041e20a2dc692b435a19304bbb288721eec4014039b013c40c6e2a8ea37a1f135429915ca12fab763db4daa618df54b848d836daeb1eb9bd500d495cd3816048066d6b4b5b9c9a0e8c10389ef54d0b19680a5a0e43974233a7c289fa49b54b408ad8a3981daf9808c063aff82bed772b60b4e2c314d4d3d0ed536bf5ed4e76044d73e72bf9c5093dd234a6ec1064c2dfc95c1fd94042728569e937606e6f286ae05f1a86a339c172ce2e0a6f1b7d8ed0f00c0327c82540da44333c294532166f369adc201edd08f2994a005b3fa464edef80f5d64a58fb2e4490dfe4dde11c4bc67c10ef18126ed34bdcaf6c0b1d357b034c72e5a48190a87f8ffb324e0748b916713c12390ac88c6e0f6744414c01b9a1fcd2bdcd0c7904aba2913228f17a3371fa472c5c66d810540ae1d332568c2a5086f5c48fee98ad00086814c1aa983b3e9be58fb30cb279bd68e724fba97b1048103cec0d31e4cc3c3ddd7967e170f027ea6b574067d2e16e115a2c169cbadb4f6a749c80c36b5786f55bebd01d6167792bbec79d392540345c81c45a6de9399e00215f789c1c827d2a6f6b0d7007f20fd303cc06646103cb37b80cabfa786ba0b038ff98a6bf2b38b8465ec446bcb7984843f057bb33091fe0fc80697471058f75738d723b6e4560e8c4a93519015a6379dbe221b7962edc8a655023393ea69655a85963e0f2d2cab989b913b3a9afee141c9e70cd354cf51be35182319dd64d083762819b065b0c4122a6059aef242a29c08a2b0b5e68fa9e48810e7573eeea5487ba3ae41853d8884ae5d740a3935de915b0eac372798308ba5a3990f4418138a5d0c6f2feac6fc13fca45e03f802e69b2185538753fe66d8999a1ee025eb5292aa407542bdf4f99a0fea636af0f04e0c616cc2c3aa80c619c73cb25d5a93faf05aae657f7764e7db85446bbb5efa7094b7cfc12aaa892b5c864b8198a70fc69e14664499709c5553101c1f63a0244434855af31af7f8fe7b1724b3b721d6b7b0c58c42a8b215d8bd5e9cfdf79be7877a16d537b78417a06d4d50df7f8cbb683531c25933cff1813ebd3bf4ba31f05b0dc4c932452c000d429a436a18499bbf13be5c3b0a879803244288498a0d3712a285640898ea0a50c9d614a6988dfa520ff0ae32639a3f9da8326622ac1396bfb44a0cca9b7632f88f456020dbca6e0cfceba317b6bf2087f3a096281490bb3be4bdeda8e7e6dbbd70681174799e07c00268025ce3d20e277a0b18a1c227359fc55860adf647fea316dd35433610095faa5560464d93ab174755e1e63611445243fb8b698d1b4de35a2b4fdc2cbfeffe3f559aee0dfe7e5702f2f452809b15a67c121ad372a061b2081489e7cd28a6cb8e0c9191b883675ead3828faca2eb482a42aa92ea6bc07dde502f57b81917bf9ad71a0970fdf56bea71e24615e9079eba50598087970836d02096cd37b743cf3db074f352508b794733edeaf3581de2ffe193a0f7bac7597cb2ad9df59e3049e4b79b91afcfee886ab6d37b4cc4ec59800220c27954162d5e2aa65fa1d0578f1354a781bf7b821db8410809abbcaabafc6e3e8766c7610decd1bc3aff589713ea21cc7ae1e98baede7d0b1c066bc4093c8b518b833738bf2af8ae27fe0b0cc8e0b7906b23323d0835164514f8c6bee9aaaa901a76dd5d436bcfaeef13a4e34ceaf405aab44540761e00e8943c42f967b2fc4b912320c5556e09d11e4886bedb840bc876d816799fbb1f287f4e8bd76b33ceacf654c39597125e9ea86556e29a4ed429018960b93d353296ea0da7c0210b17d32cb41890aa344e29fbd085e6717f01b4a318905d5d68d1e28d0839fb8718935fa5a2d2df722ab97f295c11c498ee58a5be2c1817532e65828d16b417a7eb520b1609f049f45c3fc3cb73177b6fac9d27b4ff796c2a1931e9f202c0d5086b60e7ccd37f7b56475d78a98d45789cf6e132ee2fe0479352155555dbd3c9c13c40615508828f974c40c875a4e510e408476e78c527301242505bd8e83877080c808439238762c5fd8b1952d19ea68eb764dc0b8669e6dc7d753230391f58a197c9cf94292201177c9f172f2d1cbefa8e322219ce44023df52094ed40bbdfbb310b16a8da5801ab0c8e735be04e20d1108ad211d08f750a0d717c0109799b06da068ac1d33e3eeee0e92f59b50ba7a41764c5b40c9cfe00da6494520582df4e32a1aeebcd1eab7ddfb1705f5f92a5b468e2ac7b2ed947ca46ad492ccb4859eeda98ea8f29ec95f5a45ebd3aa72e74b17f055c7b14ff5c33663f86d9b57bb636bf061daf4b08af3d4bafff20aa469013b8df533a1c5ff8c38a35486c02aa27787d8a822aa9f739c34600b24af30b1cae79d8d21025f60afa4d1fbb153a913e91e62909e8ccdb548e3de9affda840c78b5cb40143b4a5a51b070595c40f7b59a3fdf6ec43d2e777d2ad3aaf3189d03242c36343b17eb4d1df9588bc1e9af225fa85dfbea65007032d36a34792f84d83c073c17739db176136c251a36c229f38cb7ba0a449ee2dd2e0dabc6090a6edc586fae0b13f0713b45defc87d6b9baf7359a162f6e9d4d1f16d09ab82dcd9c45d645afb17870247bd679c0730beea36fdd98314d8003fc3715a28e455af83aee3a7c2039a74efe32acb273b49cae268507fc952321194a4aa9182903a565e9bec353773a9363fa865180f2e3d075aa6cea9a61885f60cfbd2237c095ea57dc74216d02348ae42c04b6829c88ec9ff0bb3070185efdc016eea673a11ea2e2cb500eb2e0edd086139066ebf26dbb2be7e4833eb4480d5c230fcec7880af220a871850852fe41b23197ac9e802908a0453926f8324b94b330e4c1d1f5dfd6104abd62e41f45783cd8119467d927c30ca70559040f7fb9ac13ddc5ec2dba4740ac92eef2f58ac2ab2d50a50550ced99affe8e5d4fca75da61082b31fd07f7ab8859a9018cc47cc42dd70fe68e9d98c398b8808f7070a3f2e003f2caf61063110c0b070e635626a88fb4ce7ecba5e65f281fb4bdae4dc56db22ed20ab55794fed68a0c67e38e073ead93a484f517e240d93ee91fd7e65e7754eb2645c97f8d9d9a005b368b5393b4cf54c518d0c6362aedd7b51daebab3729bd8b6efc7e60335f873bd320d5d0003db5ea151a6c0eb9fa9e3ecbff24cbe29111176511dbf4786f94f9101123e7f9d34bbf38722c1ecb2cd32ff95da07598e135cddc0c99a4d849621010b485535de413d089a3ddb7237f2433dbd574bdc245e220f562f2d8f257192fbb244423bb0406658e46357a0b3ef646c2be51b9b7e1129a8b88a053e766ae24151c1937bf38f32e8c0bab925929dae532fe14a6acdcc3104458ad63091101c78f350e7aa7e0a413ab51c997d85b145d683ae07a014d66294a83b2b358d4ceea5af9d608dcc80678cc1d333c32fae4ae4aec9d978dc109e01ae2f78f4bb0537a3441aee6e60bf1252c34dfa3d78d497d9de4b6454d37840aeeefd2575b9d8d07f7821482fa355c5a4de2a10b1e69d48f286853f6f95a885ef24e1e1174a3b961923339b82fdd2762986805bc6a22cc7f8381a98358b9807de709180666a791048d0b822b69c4f5ec5078857644d8f4a2903903732364d2ca542ab28099fedf22f6bcc35543e5e6590cf7d0be04da4bac5e6f7c518fee03c53d164137aab3b07b4f25bca37bf988cf390bb1a9043c9fc51c4767adeae01db50071eb71a2a3d74dc952339cd374ee57782d70706fa0166adb9eb4c816cbce7a0fc90c00d874edf3406dc5a3253eae0b2eab528c5e48cdb4bf579123aefd5ac9989c8cadf4b88584c7072469ea6b41f858f4cc83b8d7485c613b4bde14e64b2dd49d4b00b4a84dca53c35710de48746bf7993e3859dd88d8d2ec5e7b6e2d127d05a35be0f8770aaafd6158d7d1c294d0ae53bc422f08825b5f00a9213d6e9f9bcf3050ef861a287fd848cae4c05df5e1faf36c7ab54422e2df78b6c955275054d8cee8c8d5cc04c7c3661913a0d95ee7e4c0296c7b383d9b221b78a5f654fd5b7ae8ec591d99d36bbd82576624db9d4c3759350c547dd3b9d8ff9b5594a1c764dbc2b089e2664cb089a1aab5920ec09758de291ef0c6d7a3134e0005d2c595d3ca7b0672d778dfd18f2fc27fcc1d215cb04533074fdecbb0b1a2277d9447d92993ceff39f2fc6cd2d0d88f506ca22bd6c5343ee5c7dfadc872dbbdd136ad7b86510657c5a4ba9ed7916fa5f3ceb909e67f9e25135bd8f5a605444d586e3461ceffba5c871d18c7d3c2b8e53b437495ee8a38df8edbdd1545979b08d698dbb2afb3a5d308027272c69cfdf78f3d2e93bbc09ed4387cdf87b6648e9e081c4468d4d1cd5ac808424c1a74f40ba0fea1819e3779c9f722aa5b3d20275d027e39385135f2e19e003499cfde5bd3a8831dc795b37095567bea0956ed6705a02fb54984454f6fabb3e57260b56b1b051a8a8e17dd5148f552d708dcf98d14ce2a64d914c20b5ec31dcff9ce6fd6a353ebb92ea2cbab390b5d13252e310b71525ddfe25e72f17cddbaf05a0ad66e5593671d0702254578036692c1892a38766a308a572c58b0b5d189af1d672ab66891461504f3b3c176c775cb156a764637cccf8d2309af7baf0d9849cc4613caf762970c4f806a4236aadfdacd873b63ec94289e3e3e7b16e6d4476151dc5ccbf4e331dad41ba480298bdf4aded3f1e8dc0c75784c68591b9f98d0ba99eb89bbaf6c4080b0506e0005a4a5911b2ef6c37f69ce112e9731936ab27e2d55589e78ff3ed50309e6a4e24510a6928ff8c0877d011712a986c604602b60a459e1afa84bd5fe15a73487b1ca14efd6d851d96c24703c7adf66e6c62a2ec167aedc4302a0b5a7895cbde4eb77d9fb4b6b1be9e88c99a8e914998bb7f44695207ed2b08861a62dfb1c29a7a80dd15b9eaa22fa71c3ea353e81d2d4d5cf6a79a3534b2ac4fe18790111a00a71cfa6a8515220b52abc4b66ebf8df7eba445e40459ca48a38b5f3d9e0d9d34ee282eedc53fa7df83b489baa6025d35f697c39a73cad9e5fbab4593644750362a9fcbea3e529d4b81a9d3b90bd612511fc45de466e226043a7ec9ab58f5ebbf67e2efb61d6609f3fc7140da0b24fa01aba9712bd6d74dde7ebfeb2de63ffb8d01122369f8372ece3975f981a87b2cd8c87ea479319692ce6b816aa2faade7a15aa3cdcfaf86ace703db0582a56fa7901d279d2572bf14d45d50d1311be0916e0b0bd4cc92c94cf0390052efeefda82a0d689880e950b4967bd810fa7607ec81a210e7030ae776c39c638815b677f61690743b1c6cdff5f9e1586de64c3465f341ddb224182804cd83f93287d4225e3bb6944dd76922fb207587ea804858ec47aa7b591616573cda00b9b13c3cc3f5cc4cbc04ddf266ed0ec5dcebfa8b1625b28d76cd2cc68b5d7d6d624f4d38d70cdb4188b766db15c448b20abd350a5b114f698b3cb995bd898b67b64ac27d8990e37a57bc7353e1c745a3739bb09f042b9e2416566ed8af4a041d47027511c926acfb6f57997e16fdfa8e88a9162fe93574db603b99261ed6b05c2c49c127c032785b5431d8784d3e47a1f9a00e8dab7687917871f63725ae810c53edb2430454aaa4b633b7a2e75334802deda31f8c68f74f5e7202a9e8ddbc0d4be981250f734cc7a4c7f248a801714859c36a6f2abf723332c23989f1fd8bbb295b349442a2d255e3cac89e06ec34f88f54aa1d9f00adf33334018d1ae099a83f22781191f1a7c7efe4ab1e038245611a1b90eefe5e6f4d29d1bec79596952a03803ee2a943720f831e6861fb3e09cc4fe9e05f53d7b4f73cf23d7bfe2117f476c02cf49752fdf3ae6f401260062d17c6f4e8d01abe7f0ca84582b3fbc14bf92c2e41b3fd3a2235e7b0c939b19445b062db67bc6100514bc75995ec1c617fa36242b4ec413b55393844a27b4d22102e25d7a1b713809a5b4a0a4e3f82413bb9e1d4ab3388ac223002a448cd85042d41f781d3f23e9156bcc8202befd0b68ca979af961e4c653076f3d7a4983bb7493e78eee42e0cb0cef094747678f58f054c4ddc69da16bbdd99d05735f89ec65adc8d5a761525b1adde2ab05c92eaf626354a7e42a7c5ca0d158bb41d5142b15b72b939987ffd1293b8aff2ef9394c71ea9ea2fd207e415efe489453e9dbd8e78ed98eacd72489c8550c1a7369165c9c103fed6be02bd8e8e4845135c60771e969fdef70885e0defd784dc585984f3a07e6c80330acc5e70a3b108537e9a00a8628e426b957d8afc79803147755962f02a700af133ec93d41d9032d34abb164138961974c10fe91a5e075f1da6004d889c678e8542b47f6faf218be5d3007c7e4af549273af5e26d13986717cf717892175436d929c18eb8dc513629f41edcb4415528fde8054c04090b28cfdc26eeb1375873915a461850c22216dedc4b63d31feec5c6a15509e4c550bc68e5ba71fd2aec9409e7b6ad0556411e15243e51f765422ed9ecf0fbd196c888e5e052ffebfa75b3b5fa7f34ad93880a13b9795060f786d549ffcc7564821a6c2cf309a4849a149cd7e10151af2691a8a463c7e9ac15157a9f45d026a81c17c46a0774111c7d5c157099a7688a6ec5df8e3891a959b210258f12e0b3435340dce4dcd7f36348aa92309629b4bbe4bb76c757393a0fb5191e00f67167e347dcc41a932ccc8588a4a8e8be462fc855450b6043a6732f050ba61b86fe9c602a2379a7159f252c110dd964571e9805cb9ea50ab2e8c5d398350aa2af49c6a37541ea94ebba36c6ea758077c1fbba9fa78d554074ae57f1a394c29f12825fbe1562c70ac6f05f2f612d3988ff2c273ce4ff95393145fd461ca2f9d32dd0cc08d1d853cd123f972c8ef03b80cea3540330d432c2799bc783d379540696c58c23b6eacf61930279a535d54d62fb6b8a5f01879dcbb6ef7f525d7fcbfe3a4c1c3f91c1a761c3132a4cf0cd09a51ba2810800d769a98e2289c83810f5ad707ad0a4155de4c8c7851393f8551d460d543fa18be7a4b6c0a5bf823cd75769552ff219b80f3edfddb3c55a4fa284fe2ccf5a4c67a9029a121516368378253136cc25f74d219d64e54756f19b853eb0e7d57f40213286f831263787ba63797ee1d20b11960cd61a5415d8e04393364e9f331de443a825355001fb6f6d03ea5177ab1618a6f6aafb50c236e459321a154381e20edf9158aa1b436e9a14ba44647ed1893ac55c0764bab9d8049a437c23a4ac89986a07f247ebeee3e881b7ee13861ab75d0e59941ef9585d0edc471aae4caf165e45ddb99bbd06d589940babeec7f5404fbfbde0838638ecaa3ef179a3a4d7416280afe6db90150a9f9f1fa6e6a6077417c099cd49fc7e1e844dfbc6f02cb528642c1f61ae4217f61b2acdaf1d1282b8c1cbf814a7b0753a5996c9bf487ab6df28bb60a39297b75fda7fba31cace537776643c031a0e23219392a8f8bed8af4684cd2cafd6069ea10911b11441919b28c290fe2763c0348980324c941fa8968dffcd0cc43d539e259e0961942cbff71665c107b2b8621c87840405eca897a7636b5da256fea1d3f13be00f5d9113eff21c3259386e49306f8fa7ee1eab7316e754d96a56ba4d708d7049a4f61b6d6b5ffeda54acedf212a5de5e022fb01f40aa5eea63aa18bd414a0093aed62d20ac6d2bc11cd8808c0c2646b6cd849b1aef32354f54f721c9738ef94d38c4977470e0134ad47cf90b2731998fcaa06599fa0ab4ec035c36e5c401e1fd91f25db5b8d8df5efb7104a0bbcd2bf078309a789ce1ca4959c3db873fc797c952c7e98486f660fa52c266a5c2044097796f5d7d5f6b885ddde5914c97fb69a498466939a9536be2a1f5776b1a32996e3ef72195d14ca4ba45b4e8097fb6c65789b5f93f9ab045ff0beca1e118f865308e5fc0fc1a338e0ed3a1d4cd78531b0c29472364cdaeb08cfb074c35f8c58cc12eb035768320134eb941699470c819e3116d007d8e388d51af84bad02660d1137fe3855e7b5f93970f89fceffd8202d23853a76b25594145856f0aeaf425a332bdb429af12ab4cbd19c6f3c3faa64b010b32037c9419f78146b9b1eb9178194cc96c69340e094a2b3d2c58e7ff0fb3417dde36704157190e8012458f42d2de3908304f0ccc071ead08973e0b864551379c66f89fc8ec917839dd4a0473d9f68933067cc0d5f97700d12e628bb05193603e501554e1672c121b27d21f5b1c39656b88732e521d8f7b4450478f61355d671d4c09b45e9308acceed755d43d94d9006d220a01eb36ba6929e845930f3682f72592e146380a7ca11fda007ff1be5b404e82fd2bb426bed3cd10ddae701d73de56051d09f55c111762d119e1df0fa66872105970b7e059a15ecd85905b47a32b79ca38c74e1209b59b7ec1977819618cee0eb4ede80b6f3ac7400deec3015b2904ec809a13edd95f5780024338a4e391fa6b52a53f8f361e80107326911b1ce42e4c9d493fce39ed81b1e7b8dcd6dc5713ded872a90318cb8a8cf86d953667d1f3560fb79f7c83b8599134a31cd0c2ebc2771d7c1fe2be67f6ba6bd836d173f4dca8aeda0f9445b8dda3999cd49e15e10a3ea0f6fa6532f6e420da6114d19cb57c93e2bf7217c7afc58f1035c9d25c5a7a7c4a69618ec52609a74a524db92a057f056b7a68fadbe790944466d819ae18ecfc67d7febee75afa33a47f358b07e0a7e11c92617351de2a44c280d8070063506f6232d340006c65e268154e458841c70609047516d0176b7cdf1516ae4f8927898bdc002eff43d2e85646c828dbf5ff255a8ed9f0da20ae8ba09a468f13462c5b55b39b48d96d76f0c70ec4d6d6f9620243352e14a92f6a2e12d934a2531a1d83345242793e328d4fb1bfd90afa629189912d07be5b6ebb383c3bc7c96243138e48396b6b4d1f2795d1de07cce0760cfa415f1c98f729021473835acb9d09bb70e88f6fb147177e6b228a9809b6f3c57243b5688a4d331b3d15078ff76220ba6d60a2315de75122a548748bdc4b22c90378d832791163fbaaef87f2b64c5b6d4b13cb11d908eecdb94f4a800f1d941a424b7e4abfdf99d81c295643cbe2c067d9c63e6b592896e3a33ad5d5ae78d523ecb54c625e0def43bbb7a6aa2745f563d207f53b3080faffb110ef4b98a6751b08d0c4e67dcf1e1ed368470523692a77fc510fb598c3a7318b3911b8ba6d694c4a644a10ad5f3b3e90d2a71e6a3f4809bb73fb1587b607fdf0be6d20d8cdcde4554b82654b2fdab14fe729d83a97e8704576793876f823afc926ff3d23f2672f94285b2744caa59f29d80983ea5edbe15e9f80ee53b7773a753b059f76afcb5658b9275da99fc9c96524ff607460c9d29de4ecb98056d7c014aaaa3ef6c85577c924ff1fb41540e2564964444dc80e99e78097baf1e1081d6682265865ab29031b25225f5791e692665524e995f027d3ba3945e37db6c3bab37e3e28e0815e53499939553308ed26f3d804a73209f3516d5517db288517978d0d055fd42dc5fbcf4c6ff01617118f4418e908fab1937283e0ce82cdd7ca52c3529ed30d04100c948fb2830676edecf30c1218b91ebed9af7c388a1119c51ea7a520eca6ac064e13c0e812e59e2184dc05d41c7061f5566f314bb1648f02c30896af52b430960dcbd44f691397a7af4f636d8f51691fc28548c4a401b2409667389de059e4c0dd2593ce94988222a54c4f6fa8f291cd4f8babfba19cdb2c197a25fd095ad6f15263caecab14ef1110fd507274a03adce4bf03906a6dd33dd6b435503125c4d508da469d30b11be31c91eadcf1f66f6699ebaa95d4a76e0f51b4f0ee2da089b59a1670a2d031b1d200d0bb0d358a003cccb3ecca963d842a936e6863e0f354d2f7ca468890ec8c80c1861400bbac309a100e9a5e48f805e5cade8f98f8258ecbd5bd012a8e6167b0e67b19966ab5cd6be9d2d3fb0bab9c5a9026c9e2c1918e41aa8ffbde9798005c81d64d4f48319b0fd95608fc1992e09ed394cb516dc3e67dfd263318c88083aed52c4f9bd3bbdfa7935edb89e72dbac833e9601c28fdbbb66927cf5871033df1d0690e56081fa2ed7c5020a9554aa07f1264ba704775bf75229a0d1047d0778d7b00a4fe37a1424737c9dc0363a4389edb37fc8d95660769700c1b2b", 0x2000, &(0x7f0000004d80)={&(0x7f0000004080)={0x50, 0x0, 0x1, {0x7, 0x23, 0x3, 0x202000, 0x9, 0x1, 0x2, 0x6}}, &(0x7f0000004100)={0x18, 0xfffffffffffffffe, 0x7, {0xee65}}, &(0x7f0000004140)={0x18, 0x0, 0x4fdc, {0x8}}, &(0x7f0000004180)={0x18, 0xfffffffffffffff5, 0x8, {0x80}}, &(0x7f00000041c0)={0x18, 0x0, 0x4, {0x8}}, &(0x7f0000004200)={0x28, 0x0, 0xffffffffffffffff, {{0xfff, 0x9, 0x2}}}, &(0x7f0000004240)={0x60, 0x0, 0x9, {{0x44, 0x800, 0x5, 0x100000000, 0x400, 0x3, 0x1, 0x4}}}, &(0x7f00000042c0)={0x18, 0x0, 0x6}, &(0x7f0000004300)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000004340)={0x20, 0xffffffffffffffda, 0x234d, {0x0, 0x1}}, &(0x7f0000004380)={0x78, 0x0, 0x0, {0x9, 0x8000, 0x0, {0x6, 0xf248, 0x7fffffff, 0x80, 0x0, 0x9, 0x8, 0x7, 0x7, 0x6000, 0x652, r4, r5, 0x8, 0x7ff}}}, &(0x7f00000044c0)={0x90, 0xfffffffffffffff5, 0x80, {0x3, 0x1, 0x401, 0x2, 0x7f, 0x7fff, {0x2, 0x1f, 0x1, 0x8, 0x0, 0x7, 0x9, 0x3, 0x1ff, 0x7000, 0x8, r4, 0x0, 0x7f, 0xaba}}}, &(0x7f0000004580)={0x68, 0x0, 0x1, [{0x6, 0x6, 0x3, 0x6, '\\/\''}, {0x2, 0x7, 0x0, 0x3}, {0x0, 0x3f, 0x3, 0x6, '.^\''}]}, &(0x7f0000004800)={0x450, 0xfffffffffffffff5, 0x1, [{{0x3, 0x3, 0x2, 0x20000000, 0x7fff, 0x7, {0x0, 0x1, 0x8f, 0x8, 0x4, 0x7fff, 0x100, 0x3, 0x5, 0x9000, 0xffff8bfe, 0x0, 0x0, 0x80000000, 0x2}}, {0x2, 0x808000, 0x0, 0x7}}, {{0x5, 0x3, 0x8, 0x4, 0x200, 0x1, {0x4, 0x3, 0x7fff, 0xfffffffffffffff9, 0xc1a, 0x1, 0x800, 0x401, 0xfffffff9, 0x1000, 0x2, r4, 0xee01, 0x9, 0x1ff}}, {0x0, 0x6, 0x0, 0x9}}, {{0x1, 0x3, 0xfffffffffffffff8, 0x9, 0x3, 0x1, {0x5, 0x8000, 0x3, 0x1, 0x5, 0x400, 0x6, 0x400, 0x9, 0x1000, 0x1a, 0x0, 0x0, 0x0, 0x5}}, {0x2, 0x831, 0x1, 0x3, ','}}, {{0x6, 0x2, 0x2, 0x9, 0x1, 0x5, {0x0, 0x1f, 0x1f, 0xfff, 0x3, 0x0, 0x10000, 0x6, 0x7, 0x4000, 0x7, r4, 0x0, 0x7, 0xb1a0}}, {0x0, 0x40, 0x7, 0x6, 'status\x00'}}, {{0x1, 0x3, 0x1, 0x6, 0x1, 0x7ff, {0x5, 0x4, 0x8, 0x4, 0x100, 0x6e, 0xe5d8, 0xc, 0x200, 0xb000, 0x2, r4, r7, 0x4}}, {0x3, 0x0, 0x2, 0x2, '@\xf4'}}, {{0x0, 0x0, 0x6, 0x8, 0x63, 0x5c, {0x4, 0x3, 0x7, 0x5, 0x1200000000, 0x2800000000000, 0x9b, 0x5, 0x9, 0xb000, 0x8, r11, r5, 0x4, 0x2}}, {0x4, 0x7fff, 0x0, 0x1f}}, {{0x3, 0x0, 0x800, 0x6, 0x0, 0xff, {0x4, 0x5a2def1c, 0x6, 0x9, 0xf9d, 0x9, 0x81, 0x5, 0xff, 0x1000, 0x0, r12, 0xee01, 0xf90, 0xf10}}, {0x4, 0x5, 0x0, 0x108a}}]}, &(0x7f0000004c80)={0xa0, 0x0, 0x3, {{0x3, 0x1, 0x4baa, 0x8001, 0xd74, 0x0, {0x1, 0x2f, 0x1, 0x1, 0x0, 0x3, 0xfffffffb, 0x9, 0x8, 0xc000, 0x81, r4, 0xffffffffffffffff, 0x200, 0xfffeffff}}}}, &(0x7f0000004d40)={0x20, 0x0, 0x80000000, {0x8775, 0x4, 0x0, 0x4}}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x1], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:20 executing program 5: syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') 11:47:20 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10}, 0x10) 11:47:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV4MASK={0x0, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0xffffffffffffff15}}, 0x0) 11:47:20 executing program 4: accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x0) getresuid(&(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) [ 511.499669][T13598] device team0 left promiscuous mode [ 511.538546][T13598] device team_slave_0 left promiscuous mode [ 511.565966][T13598] device team_slave_1 left promiscuous mode [ 511.584485][T13598] device bridge1 left promiscuous mode [ 511.601511][T13598] device bridge2 left promiscuous mode 11:47:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x9}}, 0x18) [ 511.616431][T13598] device bridge3 left promiscuous mode [ 511.630579][T13598] bridge0: port 3(team0) entered disabled state [ 511.650183][T13621] bridge0: port 3(team0) entered blocking state 11:47:20 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a00), 0x10c00, 0x0) 11:47:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:47:20 executing program 5: getresuid(&(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)) [ 511.675814][T13621] bridge0: port 3(team0) entered disabled state [ 511.727967][T13621] device team0 entered promiscuous mode [ 511.755422][T13621] device team_slave_0 entered promiscuous mode [ 511.778470][T13621] device team_slave_1 entered promiscuous mode 11:47:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) (async, rerun: 32) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, r7, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$overlay(0x0, &(0x7f0000000640)='./bus/file0\x00', &(0x7f0000000680), 0x22800, &(0x7f0000000780)=ANY=[@ANYBLOB='default_permissions,workdir=./bus,xino=off,permi', @ANYRESDEC=r11, @ANYBLOB=',os\x00,obj_role=:\\,subj_role=overlckfsroot=overlay\x00,secl']) (async) lchown(&(0x7f0000000340)='./bus\x00', r11, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000047c0)={0x4, 0xffff, {r6}, {r4}, 0x8, 0x6}) (rerun: 64) syz_fuse_handle_req(r3, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004d80)={&(0x7f0000004080)={0x50, 0x0, 0x1, {0x7, 0x23, 0x3, 0x202000, 0x9, 0x1, 0x2, 0x6}}, &(0x7f0000004100)={0x18, 0xfffffffffffffffe, 0x7, {0xee65}}, &(0x7f0000004140)={0x18, 0x0, 0x4fdc, {0x8}}, &(0x7f0000004180)={0x18, 0xfffffffffffffff5, 0x8, {0x80}}, &(0x7f00000041c0)={0x18, 0x0, 0x4, {0x8}}, &(0x7f0000004200)={0x28, 0x0, 0xffffffffffffffff, {{0xfff, 0x9, 0x2}}}, &(0x7f0000004240)={0x60, 0x0, 0x9, {{0x44, 0x800, 0x5, 0x100000000, 0x400, 0x3, 0x1, 0x4}}}, &(0x7f00000042c0)={0x18, 0x0, 0x6}, &(0x7f0000004300)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f0000004340)={0x20, 0xffffffffffffffda, 0x234d, {0x0, 0x1}}, &(0x7f0000004380)={0x78, 0x0, 0x0, {0x9, 0x8000, 0x0, {0x6, 0xf248, 0x7fffffff, 0x80, 0x0, 0x9, 0x8, 0x7, 0x7, 0x6000, 0x652, r4, r5, 0x8, 0x7ff}}}, &(0x7f00000044c0)={0x90, 0xfffffffffffffff5, 0x80, {0x3, 0x1, 0x401, 0x2, 0x7f, 0x7fff, {0x2, 0x1f, 0x1, 0x8, 0x0, 0x7, 0x9, 0x3, 0x1ff, 0x7000, 0x8, r4, 0x0, 0x7f, 0xaba}}}, &(0x7f0000004580)={0x68, 0x0, 0x1, [{0x6, 0x6, 0x3, 0x6, '\\/\''}, {0x2, 0x7, 0x0, 0x3}, {0x0, 0x3f, 0x3, 0x6, '.^\''}]}, &(0x7f0000004800)={0x450, 0xfffffffffffffff5, 0x1, [{{0x3, 0x3, 0x2, 0x20000000, 0x7fff, 0x7, {0x0, 0x1, 0x8f, 0x8, 0x4, 0x7fff, 0x100, 0x3, 0x5, 0x9000, 0xffff8bfe, 0x0, 0x0, 0x80000000, 0x2}}, {0x2, 0x808000, 0x0, 0x7}}, {{0x5, 0x3, 0x8, 0x4, 0x200, 0x1, {0x4, 0x3, 0x7fff, 0xfffffffffffffff9, 0xc1a, 0x1, 0x800, 0x401, 0xfffffff9, 0x1000, 0x2, r4, 0xee01, 0x9, 0x1ff}}, {0x0, 0x6, 0x0, 0x9}}, {{0x1, 0x3, 0xfffffffffffffff8, 0x9, 0x3, 0x1, {0x5, 0x8000, 0x3, 0x1, 0x5, 0x400, 0x6, 0x400, 0x9, 0x1000, 0x1a, 0x0, 0x0, 0x0, 0x5}}, {0x2, 0x831, 0x1, 0x3, ','}}, {{0x6, 0x2, 0x2, 0x9, 0x1, 0x5, {0x0, 0x1f, 0x1f, 0xfff, 0x3, 0x0, 0x10000, 0x6, 0x7, 0x4000, 0x7, r4, 0x0, 0x7, 0xb1a0}}, {0x0, 0x40, 0x7, 0x6, 'status\x00'}}, {{0x1, 0x3, 0x1, 0x6, 0x1, 0x7ff, {0x5, 0x4, 0x8, 0x4, 0x100, 0x6e, 0xe5d8, 0xc, 0x200, 0xb000, 0x2, r4, r7, 0x4}}, {0x3, 0x0, 0x2, 0x2, '@\xf4'}}, {{0x0, 0x0, 0x6, 0x8, 0x63, 0x5c, {0x4, 0x3, 0x7, 0x5, 0x1200000000, 0x2800000000000, 0x9b, 0x5, 0x9, 0xb000, 0x8, r11, r5, 0x4, 0x2}}, {0x4, 0x7fff, 0x0, 0x1f}}, {{0x3, 0x0, 0x800, 0x6, 0x0, 0xff, {0x4, 0x5a2def1c, 0x6, 0x9, 0xf9d, 0x9, 0x81, 0x5, 0xff, 0x1000, 0x0, r12, 0xee01, 0xf90, 0xf10}}, {0x4, 0x5, 0x0, 0x108a}}]}, &(0x7f0000004c80)={0xa0, 0x0, 0x3, {{0x3, 0x1, 0x4baa, 0x8001, 0xd74, 0x0, {0x1, 0x2f, 0x1, 0x1, 0x0, 0x3, 0xfffffffb, 0x9, 0x8, 0xc000, 0x81, r4, 0xffffffffffffffff, 0x200, 0xfffeffff}}}}, &(0x7f0000004d40)={0x20, 0x0, 0x80000000, {0x8775, 0x4, 0x0, 0x4}}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x1], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) [ 511.824266][T13621] device bridge1 entered promiscuous mode [ 511.830692][T13621] device bridge2 entered promiscuous mode [ 511.838367][T13621] device bridge3 entered promiscuous mode [ 511.855868][T13621] bridge0: port 3(team0) entered blocking state [ 511.862290][T13621] bridge0: port 3(team0) entered forwarding state 11:47:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:20 executing program 4: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) 11:47:20 executing program 2: syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 11:47:20 executing program 0: io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:47:20 executing program 5: io_setup(0x0, &(0x7f0000000cc0)) 11:47:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') write$FUSE_INTERRUPT(r0, 0x0, 0x0) 11:47:20 executing program 4: syz_open_dev$MSR(&(0x7f0000000000), 0x1000, 0x0) 11:47:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 11:47:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000280)=""/215, &(0x7f0000000040)=0xd7) [ 511.992727][T13645] device team0 left promiscuous mode [ 512.006936][T13645] device team_slave_0 left promiscuous mode [ 512.029499][T13645] device team_slave_1 left promiscuous mode 11:47:20 executing program 4: socket(0x23, 0x0, 0xfffffffe) 11:47:20 executing program 0: socket$inet(0x2, 0xa67af25ead8725c2, 0x0) [ 512.065199][T13645] device bridge1 left promiscuous mode [ 512.086304][T13645] device bridge2 left promiscuous mode [ 512.146709][T13645] device bridge3 left promiscuous mode [ 512.185936][T13645] bridge0: port 3(team0) entered disabled state [ 512.241906][T13654] bridge0: port 3(team0) entered blocking state [ 512.254624][T13654] bridge0: port 3(team0) entered disabled state [ 512.275538][T13654] device team0 entered promiscuous mode [ 512.294370][T13654] device team_slave_0 entered promiscuous mode [ 512.311629][T13654] device team_slave_1 entered promiscuous mode [ 512.318990][T13654] device bridge1 entered promiscuous mode [ 512.326165][T13654] device bridge2 entered promiscuous mode [ 512.332026][T13654] device bridge3 entered promiscuous mode [ 512.338520][T13654] bridge0: port 3(team0) entered blocking state [ 512.344807][T13654] bridge0: port 3(team0) entered forwarding state 11:47:21 executing program 5: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001e40)) 11:47:21 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)) 11:47:21 executing program 0: io_setup(0x6, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x0, 0x0) 11:47:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@deltaction={0x14}, 0x14}}, 0x0) 11:47:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'veth1_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 11:47:21 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:47:21 executing program 4: mq_open(&(0x7f0000000b00)='/dev/nvram\x00', 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) 11:47:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x23, 0xa52c, 0x1020220, 0xff80, 0x5, 0x3, 0x8}}, 0x50) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r3, 0x0, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x8e4b266fc9a015c8, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000002180)={0x79, 0x0, 0x7ff}) r5 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text16={0x10, &(0x7f0000002080)="0fc7ff660f3882962a1b660fc7360038baa00066b85b4e000066ef66b9800000c00f326635010000000f30f30f1630670f0964160f381ddb660f6f572d", 0x3d}], 0x1, 0x6, &(0x7f0000002100)=[@cr0={0x0, 0x40000}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 512.468894][T13670] device team0 left promiscuous mode [ 512.474695][T13670] device team_slave_0 left promiscuous mode [ 512.492261][T13670] device team_slave_1 left promiscuous mode [ 512.501596][T13670] device bridge1 left promiscuous mode [ 512.532256][T13670] device bridge2 left promiscuous mode [ 512.550601][T13670] device bridge3 left promiscuous mode [ 512.570343][T13678] x_tables: duplicate underflow at hook 3 [ 512.576639][T13670] bridge0: port 3(team0) entered disabled state 11:47:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x23, 0xa52c, 0x1020220, 0xff80, 0x5, 0x3, 0x8}}, 0x50) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r3, 0x0, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x8e4b266fc9a015c8, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000002180)={0x79, 0x0, 0x7ff}) r5 = dup3(r2, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text16={0x10, &(0x7f0000002080)="0fc7ff660f3882962a1b660fc7360038baa00066b85b4e000066ef66b9800000c00f326635010000000f30f30f1630670f0964160f381ddb660f6f572d", 0x3d}], 0x1, 0x6, &(0x7f0000002100)=[@cr0={0x0, 0x40000}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x23, 0xa52c, 0x1020220, 0xff80, 0x5, 0x3, 0x8}}, 0x50) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r3, 0x0, 0xc) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x8e4b266fc9a015c8, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000002180)={0x79, 0x0, 0x7ff}) (async) dup3(r2, r0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text16={0x10, &(0x7f0000002080)="0fc7ff660f3882962a1b660fc7360038baa00066b85b4e000066ef66b9800000c00f326635010000000f30f30f1630670f0964160f381ddb660f6f572d", 0x3d}], 0x1, 0x6, &(0x7f0000002100)=[@cr0={0x0, 0x40000}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], 0x2) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) 11:47:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) 11:47:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) [ 512.621242][T13674] bridge0: port 3(team0) entered blocking state 11:47:21 executing program 5: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 11:47:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000002040)='io\x00') [ 512.680110][T13674] bridge0: port 3(team0) entered disabled state 11:47:21 executing program 0: syz_clone(0x20000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 512.739427][T13674] device team0 entered promiscuous mode [ 512.768261][T13674] device team_slave_0 entered promiscuous mode [ 512.774730][T13674] device team_slave_1 entered promiscuous mode 11:47:21 executing program 4: openat$nvram(0xffffffffffffff9c, 0x0, 0x402000, 0x0) [ 512.823739][T13674] device bridge1 entered promiscuous mode [ 512.850326][T13674] device bridge2 entered promiscuous mode [ 512.877891][T13674] device bridge3 entered promiscuous mode [ 512.892497][T13674] bridge0: port 3(team0) entered blocking state [ 512.898965][T13674] bridge0: port 3(team0) entered forwarding state 11:47:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:21 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 11:47:21 executing program 5: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) 11:47:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffc) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x23, 0xa52c, 0x1020220, 0xff80, 0x5, 0x3, 0x8}}, 0x50) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) read$FUSE(r3, 0x0, 0xc) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x8e4b266fc9a015c8, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000002180)={0x79, 0x0, 0x7ff}) (async, rerun: 64) r5 = dup3(r2, r0, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text16={0x10, &(0x7f0000002080)="0fc7ff660f3882962a1b660fc7360038baa00066b85b4e000066ef66b9800000c00f326635010000000f30f30f1630670f0964160f381ddb660f6f572d", 0x3d}], 0x1, 0x6, &(0x7f0000002100)=[@cr0={0x0, 0x40000}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], 0x2) (async, rerun: 64) ioctl$KVM_RUN(r1, 0xae80, 0x0) (rerun: 64) 11:47:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000500)) 11:47:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 11:47:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) 11:47:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 11:47:21 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 513.121658][T13726] validate_nla: 10 callbacks suppressed [ 513.121676][T13726] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 513.150734][T13726] device team0 left promiscuous mode [ 513.162180][T13726] device team_slave_0 left promiscuous mode [ 513.175200][T13726] device team_slave_1 left promiscuous mode [ 513.208539][T13726] device bridge1 left promiscuous mode 11:47:22 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2cf40) 11:47:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0xfff}]}) [ 513.250806][T13726] device bridge2 left promiscuous mode 11:47:22 executing program 0: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) [ 513.304193][T13726] device bridge3 left promiscuous mode [ 513.335757][T13726] bridge0: port 3(team0) entered disabled state [ 513.386223][T13731] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 513.415339][T13731] bridge0: port 3(team0) entered blocking state [ 513.453886][T13731] bridge0: port 3(team0) entered disabled state [ 513.472187][T13731] device team0 entered promiscuous mode [ 513.478080][T13731] device team_slave_0 entered promiscuous mode [ 513.484427][T13731] device team_slave_1 entered promiscuous mode [ 513.491256][T13731] device bridge1 entered promiscuous mode [ 513.497250][T13731] device bridge2 entered promiscuous mode 11:47:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:22 executing program 2: getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) 11:47:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:47:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x48) 11:47:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)) 11:47:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) [ 513.503229][T13731] device bridge3 entered promiscuous mode [ 513.510227][T13731] bridge0: port 3(team0) entered blocking state [ 513.516621][T13731] bridge0: port 3(team0) entered forwarding state 11:47:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x280000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 11:47:22 executing program 2: syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) 11:47:22 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000f80)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0098c4d2"}}) 11:47:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:47:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 11:47:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @loopback}}}, 0xa0) 11:47:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:47:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') 11:47:22 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 11:47:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x1) 11:47:22 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') 11:47:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 11:47:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000500)) 11:47:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:22 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x7fffffff, 0x902) 11:47:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 11:47:22 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x2}, &(0x7f0000000100), 0x0) [ 514.142377][T13795] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11:47:23 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)="88") 11:47:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000001340)='net/fib_trie\x00') 11:47:23 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 11:47:23 executing program 2: socketpair(0x18, 0x0, 0x49a, 0x0) 11:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:23 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 11:47:23 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:23 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 514.399264][T13808] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:23 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) 11:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:23 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000740), 0x254003) 11:47:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = openat$incfs(r3, &(0x7f0000002080)='.pending_reads\x00', 0x2000, 0x1b8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') syz_open_procfs(0x0, &(0x7f00000007c0)='fd/3\x00') 11:47:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0xfffffffffffffffc, 0x0) [ 514.591187][T13827] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @loopback}}}, 0xa0) 11:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') 11:47:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000002100)=0x7f, 0x4) 11:47:23 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') [ 514.782069][T13841] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:23 executing program 0: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0xc0000) 11:47:23 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') 11:47:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000000c0)) 11:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = openat$incfs(r3, &(0x7f0000002080)='.pending_reads\x00', 0x2000, 0x1b8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'virt_wifi0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 11:47:23 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') 11:47:23 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40086602, &(0x7f00000000c0)='devices.deny\x00') 11:47:23 executing program 4: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) [ 514.971683][T13854] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 515.025190][T13856] x_tables: duplicate underflow at hook 3 11:47:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) 11:47:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 11:47:23 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x86141) 11:47:23 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) [ 515.164345][T13871] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = openat$incfs(r3, &(0x7f0000002080)='.pending_reads\x00', 0x2000, 0x1b8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:24 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 11:47:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') 11:47:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000400)) 11:47:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 11:47:24 executing program 2: socket$inet6(0xa, 0x3, 0x40) [ 515.370566][T13887] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000080)) 11:47:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000007b240)={0x0, [], 0x0, "7ac681948f7af4"}) 11:47:24 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x801) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 11:47:24 executing program 5: memfd_create(&(0x7f0000004180)='task\x00', 0x2) [ 515.548765][T13903] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:24 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x1c}, 0x10) 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)) 11:47:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000040)="cad62f15", 0x4) 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20881) 11:47:24 executing program 0: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x1a5440) 11:47:24 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 11:47:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001000)) 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 11:47:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:24 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 11:47:24 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000002c0), 0x4, &(0x7f0000000340)) 11:47:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='highspeed\x00', 0xa) 11:47:24 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, r2}, 0x10) 11:47:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:24 executing program 4: syz_open_dev$dri(&(0x7f0000000100), 0x6, 0x2242) 11:47:24 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x302, 0x0) 11:47:24 executing program 5: socket$kcm(0x29, 0xf, 0x0) 11:47:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4) 11:47:25 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 11:47:25 executing program 4: syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x22240) 11:47:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:25 executing program 2: clock_gettime(0x4, &(0x7f0000000980)) 11:47:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000001e00)) 11:47:25 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x230040, 0x0) 11:47:25 executing program 2: socketpair(0xa, 0x0, 0x7, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000f80)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x3, 0x8, 0x1, 0x0, 0x0, 0x1, "0098c4d2"}, 0x80}) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, &(0x7f0000002040)) 11:47:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) 11:47:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:25 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000980)) 11:47:25 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:47:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:25 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 11:47:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000021c0)={0x8, 0x80, 0x3, 0x3f, 0x0, 0x6, 0x0, 0x5, 0x9e7ed61e60e5a662, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x76, 0x3}, 0x0, 0x7, 0x2, 0x7, 0x6, 0x1, 0x800, 0x0, 0x5, 0x0, 0xffffffff}, r2, 0x3, 0xffffffffffffffff, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, 0x0, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = creat(&(0x7f0000002080)='./file0\x00', 0xc0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000002140)={0xbc, 0x0, 0x4}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000020c0)={[{0x4, 0x81, 0x20, 0x1, 0xff, 0x4, 0x81, 0x76, 0x3, 0x81, 0x2, 0x9, 0x7f}, {0x1df, 0x8001, 0x80, 0xbe, 0xd5, 0x9, 0xd7, 0x5b, 0x5, 0x80, 0x3, 0x9, 0x5}, {0x9, 0x1, 0x0, 0x0, 0x1a, 0x7, 0x1f, 0xd1, 0x37, 0x6, 0x1f, 0x8, 0xa3}], 0x1}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002240)="0f78ae00400f06f2640f0866b80e0000000f23c80f21f866350400d0000f23f80f3566b9d60b00000f32ba2100edb809010f00d836f20fd053a966b895136f600f23d80f21f86635000000a00f23f8", 0x4f}], 0x1, 0x1, &(0x7f0000002300)=[@cstype3={0x5, 0x3}, @cr4={0x1, 0x4}], 0x2) 11:47:25 executing program 0: socket(0x0, 0x800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) 11:47:25 executing program 2: getresuid(&(0x7f0000001740), &(0x7f0000001780), 0x0) 11:47:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) 11:47:25 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0xa4000, 0x0) 11:47:25 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4880) 11:47:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="ee", 0x1) 11:47:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:25 executing program 4: syz_open_procfs(0x0, &(0x7f0000000700)='timers\x00') 11:47:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) 11:47:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) 11:47:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000021c0)={0x8, 0x80, 0x3, 0x3f, 0x0, 0x6, 0x0, 0x5, 0x9e7ed61e60e5a662, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x76, 0x3}, 0x0, 0x7, 0x2, 0x7, 0x6, 0x1, 0x800, 0x0, 0x5, 0x0, 0xffffffff}, r2, 0x3, 0xffffffffffffffff, 0xa) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) read$FUSE(0xffffffffffffffff, 0x0, 0xc) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r5 = creat(&(0x7f0000002080)='./file0\x00', 0xc0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000002140)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000020c0)={[{0x4, 0x81, 0x20, 0x1, 0xff, 0x4, 0x81, 0x76, 0x3, 0x81, 0x2, 0x9, 0x7f}, {0x1df, 0x8001, 0x80, 0xbe, 0xd5, 0x9, 0xd7, 0x5b, 0x5, 0x80, 0x3, 0x9, 0x5}, {0x9, 0x1, 0x0, 0x0, 0x1a, 0x7, 0x1f, 0xd1, 0x37, 0x6, 0x1f, 0x8, 0xa3}], 0x1}) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002240)="0f78ae00400f06f2640f0866b80e0000000f23c80f21f866350400d0000f23f80f3566b9d60b00000f32ba2100edb809010f00d836f20fd053a966b895136f600f23d80f21f86635000000a00f23f8", 0x4f}], 0x1, 0x1, &(0x7f0000002300)=[@cstype3={0x5, 0x3}, @cr4={0x1, 0x4}], 0x2) 11:47:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:26 executing program 2: socket(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) clock_getres(0x2, 0x0) 11:47:26 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 11:47:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffffffffffe86) 11:47:26 executing program 5: socket(0x11, 0x2, 0x80) 11:47:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 11:47:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000002100)=0x9, 0x4) 11:47:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:26 executing program 0: pselect6(0x40, &(0x7f0000000040)={0xff}, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) 11:47:26 executing program 2: io_setup(0x6, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x0, 0x0) io_cancel(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:47:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xfffffffa, 0x4) 11:47:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000021c0)={0x8, 0x80, 0x3, 0x3f, 0x0, 0x6, 0x0, 0x5, 0x9e7ed61e60e5a662, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x76, 0x3}, 0x0, 0x7, 0x2, 0x7, 0x6, 0x1, 0x800, 0x0, 0x5, 0x0, 0xffffffff}, r2, 0x3, 0xffffffffffffffff, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, 0x0, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = creat(&(0x7f0000002080)='./file0\x00', 0xc0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000002140)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000020c0)={[{0x4, 0x81, 0x20, 0x1, 0xff, 0x4, 0x81, 0x76, 0x3, 0x81, 0x2, 0x9, 0x7f}, {0x1df, 0x8001, 0x80, 0xbe, 0xd5, 0x9, 0xd7, 0x5b, 0x5, 0x80, 0x3, 0x9, 0x5}, {0x9, 0x1, 0x0, 0x0, 0x1a, 0x7, 0x1f, 0xd1, 0x37, 0x6, 0x1f, 0x8, 0xa3}], 0x1}) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000022c0)=[@text16={0x10, &(0x7f0000002240)="0f78ae00400f06f2640f0866b80e0000000f23c80f21f866350400d0000f23f80f3566b9d60b00000f32ba2100edb809010f00d836f20fd053a966b895136f600f23d80f21f86635000000a00f23f8", 0x4f}], 0x1, 0x1, &(0x7f0000002300)=[@cstype3={0x5, 0x3}, @cr4={0x1, 0x4}], 0x2) 11:47:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 11:47:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:26 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe083, 0x0) 11:47:26 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') 11:47:26 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 11:47:26 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x1}) 11:47:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) io_setup(0x6, &(0x7f0000000cc0)) 11:47:26 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 11:47:26 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 11:47:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) [ 518.139280][T14086] validate_nla: 12 callbacks suppressed [ 518.139298][T14086] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:27 executing program 2: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x2}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100000001]}, 0x8}) 11:47:27 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) 11:47:27 executing program 4: memfd_create(&(0x7f0000004180)='task\x00', 0x0) 11:47:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000580), 0x4) 11:47:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000004140)=0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = openat$cgroup_int(r4, &(0x7f00000040c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000004100)) read$FUSE(r4, 0x0, 0xc) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x6}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_targets\x00') 11:47:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000100)=0x90) 11:47:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'veth1_to_bond\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 518.389422][T14097] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000180)) 11:47:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 11:47:27 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/ip_mr_cache\x00') [ 518.522310][T14106] x_tables: duplicate underflow at hook 3 11:47:27 executing program 5: syz_open_dev$media(&(0x7f00000009c0), 0x5, 0x2d4442) 11:47:27 executing program 2: syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') 11:47:27 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x57ba}}) [ 518.597867][T14112] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) (async) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000004140)=0x3) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) r5 = openat$cgroup_int(r4, &(0x7f00000040c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000004100)) (async) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x6}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 11:47:27 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 11:47:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:27 executing program 0: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) 11:47:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) 11:47:27 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) 11:47:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) [ 518.823674][T14136] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:27 executing program 4: bind$rose(0xffffffffffffffff, 0x0, 0x0) 11:47:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 11:47:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r2, 0x0, 0xc) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000004140)=0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = openat$cgroup_int(r4, &(0x7f00000040c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000004100)) read$FUSE(r4, 0x0, 0xc) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x6}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r2, 0x0, 0xc) (async) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000004140)=0x3) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) openat$cgroup_int(r4, &(0x7f00000040c0)='cpuset.mems\x00', 0x2, 0x0) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000004100)) (async) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000040)={0x6}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 11:47:27 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') 11:47:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) 11:47:27 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x4, 0x0) 11:47:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') 11:47:27 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) [ 519.027105][T14152] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve0\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "4dc3"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 11:47:27 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 11:47:27 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 11:47:28 executing program 5: sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x48522664cf550330) [ 519.193319][T14177] x_tables: duplicate underflow at hook 2 11:47:28 executing program 2: pselect6(0x40, &(0x7f0000000040)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 519.239853][T14181] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:28 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close$fd_v4l2_buffer(r0) 11:47:28 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 11:47:28 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) 11:47:28 executing program 5: mq_open(&(0x7f0000000b00)='/dev/nvram\x00', 0x0, 0x0, &(0x7f0000000b40)) 11:47:28 executing program 0: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 11:47:28 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000002100), 0x4) [ 519.467674][T14197] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x0, 0x0}) 11:47:28 executing program 4: syz_clone(0x0, 0x0, 0x0, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)="88e8c6074c3edaa4a4c54dd052a5ab3040") 11:47:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000340)={0x0, 0x0}) [ 519.638199][T14209] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) 11:47:28 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) 11:47:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:28 executing program 5: syz_open_dev$radio(0x0, 0x0, 0x2) 11:47:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 11:47:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 11:47:28 executing program 0: socket(0x3, 0x0, 0x7ff) 11:47:28 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 11:47:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000600)) [ 519.851653][T14224] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 519.866589][T14229] x_tables: duplicate underflow at hook 3 11:47:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 11:47:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 11:47:28 executing program 5: accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x0) getresuid(&(0x7f0000001740), 0x0, 0x0) [ 520.037264][T14239] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:28 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') 11:47:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:28 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 11:47:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 11:47:29 executing program 5: syz_clone(0x108a0300, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:29 executing program 0: io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 11:47:29 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 11:47:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 11:47:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:29 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 11:47:29 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 11:47:29 executing program 0: io_setup(0x6, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:47:29 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) 11:47:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:29 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0), &(0x7f0000002300)="88e8c6074c3edaa4a4c54dd052a5ab30401d221e466c8bc846fd52021de14ad2e033f208729a63e183db") 11:47:29 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 11:47:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:29 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:47:29 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 11:47:29 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') 11:47:29 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780), 0x10) 11:47:29 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4042, 0x0) [ 520.727626][T14297] device team0 left promiscuous mode [ 520.747688][T14297] device team_slave_0 left promiscuous mode [ 520.767822][T14297] device team_slave_1 left promiscuous mode 11:47:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/184, &(0x7f0000000180)=0xb8) [ 520.800707][T14297] device bridge1 left promiscuous mode 11:47:29 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x28401, 0x0) 11:47:29 executing program 0: io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r0, 0xf07, 0x0, 0x0, 0x0) [ 520.848006][T14297] device bridge2 left promiscuous mode [ 520.884014][T14297] device bridge3 left promiscuous mode [ 520.910211][T14297] bridge0: port 3(team0) entered disabled state 11:47:29 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000740)={r1}) 11:47:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb23d2d58e4515a88, 0x0) 11:47:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) 11:47:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000001e00)) 11:47:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x4, 0x7ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000200)={r1}) 11:47:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000800)='net/rfcomm\x00') 11:47:30 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x349500, 0x0) 11:47:30 executing program 5: io_setup(0x2012, &(0x7f0000000140)) 11:47:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 11:47:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 11:47:30 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 11:47:30 executing program 4: connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 11:47:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001fc0), &(0x7f0000002000)=0x8) 11:47:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 11:47:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 11:47:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 11:47:30 executing program 4: syz_clone(0x82080000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:30 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clock_gettime(0x6, &(0x7f0000000080)) 11:47:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 11:47:30 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x0) 11:47:30 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) 11:47:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$tun(r0, 0x0, 0xe6) 11:47:30 executing program 0: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x2) 11:47:30 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 11:47:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') 11:47:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) 11:47:30 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x496182, 0x0) 11:47:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 11:47:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001e40)) 11:47:31 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) 11:47:31 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') 11:47:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002080)={"6bb18cb8c6ff65b30962db19eabba2d5", 0x0, 0x0, {0x3a, 0x3f}, {0xe8a3, 0x1}, 0x100, [0x8, 0xc8, 0x1, 0xc5aa, 0xffff, 0xb332, 0x801, 0x9, 0x6, 0x3, 0x5, 0x3, 0x2, 0x80000000, 0xd53, 0xffff]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) ioctl$KVM_NMI(r4, 0xae9a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) 11:47:31 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 11:47:31 executing program 2: syz_clone(0x40b90000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:47:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x0) 11:47:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 11:47:31 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/mcfilter6\x00') 11:47:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002080)={"6bb18cb8c6ff65b30962db19eabba2d5", 0x0, 0x0, {0x3a, 0x3f}, {0xe8a3, 0x1}, 0x100, [0x8, 0xc8, 0x1, 0xc5aa, 0xffff, 0xb332, 0x801, 0x9, 0x6, 0x3, 0x5, 0x3, 0x2, 0x80000000, 0xd53, 0xffff]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) 11:47:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x370, 0x160, 0xa8, 0xffffffff, 0x230, 0x160, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'veth1_to_bond\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @dev, @loopback, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv4=@multicast1, @port, @icmp_id}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "26c3"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @empty, @remote, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @empty, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 11:47:31 executing program 2: mq_open(0x0, 0x0, 0x0, &(0x7f0000000b40)) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) [ 522.672865][T14403] x_tables: duplicate underflow at hook 1 11:47:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 11:47:31 executing program 5: syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x0) 11:47:31 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 11:47:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x80000001, 0x4) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 11:47:31 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xdc0c0, 0x0) 11:47:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002080)={"6bb18cb8c6ff65b30962db19eabba2d5", 0x0, 0x0, {0x3a, 0x3f}, {0xe8a3, 0x1}, 0x100, [0x8, 0xc8, 0x1, 0xc5aa, 0xffff, 0xb332, 0x801, 0x9, 0x6, 0x3, 0x5, 0x3, 0x2, 0x80000000, 0xd53, 0xffff]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) ioctl$KVM_NMI(r4, 0xae9a) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000002080)={"6bb18cb8c6ff65b30962db19eabba2d5", 0x0, 0x0, {0x3a, 0x3f}, {0xe8a3, 0x1}, 0x100, [0x8, 0xc8, 0x1, 0xc5aa, 0xffff, 0xb332, 0x801, 0x9, 0x6, 0x3, 0x5, 0x3, 0x2, 0x80000000, 0xd53, 0xffff]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) (async) 11:47:31 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000002140), 0x40083, 0x0) [ 522.882254][T14419] x_tables: duplicate underflow at hook 3 11:47:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000300)=@deltfilter={0xec4, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp6={{0xa}, {0xe94, 0x2, [@TCA_RSVP_ACT={0xe90, 0x6, [@m_ctinfo={0xe8c, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xe5d, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 11:47:31 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x81, 0x4002) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 11:47:31 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 11:47:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 11:47:31 executing program 4: socketpair(0xa, 0x1, 0x7, 0x0) 11:47:31 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 11:47:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000002100)=0xffffffff, 0x4) 11:47:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 11:47:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='net/anycast6\x00') ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 523.156511][T14454] x_tables: duplicate underflow at hook 3 [ 523.257053][T14460] validate_nla: 15 callbacks suppressed [ 523.257070][T14460] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:32 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}) 11:47:32 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)) 11:47:32 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800), 0x10) 11:47:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 11:47:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{}, "6906643132ff0df4", "76fb551800bf522f4d12bc0d6bbe03ee", "90b24417", "fa6e3db2056d93ed"}, 0x28) 11:47:32 executing program 5: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) 11:47:32 executing program 4: socket(0x1e, 0x0, 0x8) 11:47:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 523.425493][T14475] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 11:47:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 11:47:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) [ 523.610980][T14488] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async, rerun: 32) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:32 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) 11:47:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={0x0, 0x0}) 11:47:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000001e00)) 11:47:32 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2e102, 0x0) 11:47:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 11:47:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$tun(r0, &(0x7f0000000140)=ANY=[], 0xe6) 11:47:32 executing program 0: socketpair(0xa, 0x0, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x0) 11:47:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') read$FUSE(r0, 0x0, 0x0) 11:47:32 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) [ 523.758872][T14500] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 11:47:32 executing program 5: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 523.971394][T14519] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:32 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 11:47:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) 11:47:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="ee44763cd6fa095c712f", 0xa) 11:47:32 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x6}, 0x0, 0x0, &(0x7f0000000200), 0x0) 11:47:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1}, 0x0) [ 524.104637][T14528] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 11:47:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 11:47:32 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{}]}) 11:47:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0) 11:47:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x9, 0x4) 11:47:33 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000002100)=0x9, 0x4) 11:47:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text64={0x40, &(0x7f0000002080)="66460f6c780d66460f38818001000000c481fc2f13c4224d8c3066bad00466edc423395d9b0200000083430f07420f01f8f466b8e0008ed0", 0x38}], 0x1, 0x1, &(0x7f0000002100), 0x0) r6 = creat(&(0x7f0000002100)='./file0\x00', 0x80) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:33 executing program 0: syz_clone(0x104c00, 0x0, 0x0, 0x0, 0x0, 0x0) 11:47:33 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, &(0x7f00000000c0)={0x2}, 0x0, 0x0) 11:47:33 executing program 5: socketpair(0xa, 0x1, 0x0, 0x0) 11:47:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) [ 524.369436][T14550] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:33 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000000)) 11:47:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040), 0x8) 11:47:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000002c0), 0x4) 11:47:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0) 11:47:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x7ff, 0x10001}) 11:47:33 executing program 0: syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00') 11:47:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) [ 524.624530][T14571] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (rerun: 32) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) read$FUSE(r4, 0x0, 0xc) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text64={0x40, &(0x7f0000002080)="66460f6c780d66460f38818001000000c481fc2f13c4224d8c3066bad00466edc423395d9b0200000083430f07420f01f8f466b8e0008ed0", 0x38}], 0x1, 0x1, &(0x7f0000002100), 0x0) r6 = creat(&(0x7f0000002100)='./file0\x00', 0x80) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:33 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x101040, 0x0) 11:47:33 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 11:47:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef4100000", 0x17}], 0x1}, 0x0) 11:47:33 executing program 0: socket$inet(0x2, 0x3, 0xab) 11:47:33 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000740)) 11:47:33 executing program 4: syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') 11:47:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000500)=0x90) 11:47:33 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 11:47:33 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0x460, 0x380, 0xffffffff, 0x380, 0x380, 0x540, 0x540, 0xffffffff, 0x540, 0x540, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port, @gre_key}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_0\x00', 'vcan0\x00'}, 0x0, 0x2a0, 0x2d8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip_vti0\x00', 'xfrm0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "6791"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "9a20"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x638) [ 524.820129][T14587] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000080)) 11:47:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) [ 524.984154][T14603] x_tables: duplicate underflow at hook 1 [ 524.984528][T14602] netlink: 'syz-executor.3': attribute type 10 has an invalid length. 11:47:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text64={0x40, &(0x7f0000002080)="66460f6c780d66460f38818001000000c481fc2f13c4224d8c3066bad00466edc423395d9b0200000083430f07420f01f8f466b8e0008ed0", 0x38}], 0x1, 0x1, &(0x7f0000002100), 0x0) r6 = creat(&(0x7f0000002100)='./file0\x00', 0x80) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000020c0)=[@text64={0x40, &(0x7f0000002080)="66460f6c780d66460f38818001000000c481fc2f13c4224d8c3066bad00466edc423395d9b0200000083430f07420f01f8f466b8e0008ed0", 0x38}], 0x1, 0x1, &(0x7f0000002100), 0x0) (async) creat(&(0x7f0000002100)='./file0\x00', 0x80) (async) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) 11:47:34 executing program 5: socket(0x1d, 0x0, 0xffff0001) 11:47:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="8b", 0x1) 11:47:34 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') 11:47:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 11:47:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') read$FUSE(r0, 0x0, 0x0) 11:47:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100), 0xc) 11:47:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 11:47:34 executing program 0: io_setup(0x80000, &(0x7f0000000000)) 11:47:34 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005a00), 0x301040, 0x0) 11:47:34 executing program 4: getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) 11:47:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000020000000f9], 0x6000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:34 executing program 5: clock_gettime(0x0, &(0x7f0000000980)) 11:47:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0) 11:47:34 executing program 0: io_setup(0x2012, &(0x7f0000000140)=0x0) io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 11:47:34 executing program 2: socket$inet(0x2, 0x3, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xfffffe66, &(0x7f0000000180)={&(0x7f0000000140)=@gettaction={0x40, 0x32, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) r1 = syz_clone(0x8004000, &(0x7f0000000340)="693cea8544d4a37bb2d84046f2e4e17181261c8c39b5c9d9cc59a0d8375537112f763df79d6adf325577f3e6c439ff5abf19982d92d308a4286970562607044cef0d52036f06c3120aac98178d67e3ff5167ae76d2c0e8e997523132e4f01ef2c110974b97547f21296839846c57d9bcf643685fd7d96668795cc4c9e64667a3944859bd6e88619b500a6cf974793fdee855563ed39197fd86fa2aed0f1c5d88db2f1c271d252a1548d0187b2501ac2195773577709baa93adcc33ed581df7ca6e472d441f2067", 0xc7, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="67cc44b5db2d6f86006592493db7e59191a89f1c8b8c1f46ec57aba26335ecf14388cd5a9e29f76121811d371dd1eae6e680f59e89efa1f82d2a170d23c136416d26f3b87f11946d5973eac09dbd375fa70157897b221227900722c056cb06040189eb527dc1fc1eb92a7d563f702f6620a18cb94376fa6eaa5ce2cd531feb0c2f3ec5d588ee7704e38c1355d08c0f6ade9310017e884acaddde5ad5daf70f01c93d11784e0505569eaf3a468c3862c678a6f830666f4f4d8bf7e0f7519e971781de41a0e64c786c830a984db4c931dfeb94e8a7f8986d87d2b387ebcabf2e067d32") r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/dev_mcast\x00') setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080)=0x5a, 0x4) syz_open_procfs(0x0, &(0x7f0000000980)='task\x00') 11:47:34 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r0, &(0x7f0000000100), 0x18) 11:47:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 11:47:34 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'dummy0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 11:47:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0) 11:47:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}}, 0x24040045) 11:47:34 executing program 5: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x501000, 0x0) 11:47:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba", 0x29}], 0x1}, 0x0) 11:47:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000020000000f9], 0x6000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:35 executing program 2: socket$inet6(0xa, 0x0, 0x978) 11:47:35 executing program 4: io_setup(0x6, &(0x7f0000000cc0)) 11:47:35 executing program 0: io_setup(0x5, &(0x7f00000001c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0) 11:47:35 executing program 5: socketpair(0xa, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x338, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1dd}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x69, @remote, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @local, 0x33}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x200, @mcast1, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb708}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x668a9480}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2850}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x417f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x40890}, 0x26040804) socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000640)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xe7c6, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x2, 0x2, 0xa, 0x6, 0x50, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7de}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x7, 0xfff, 0x1}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000800)={0x0, r2}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x83, 0x1, 0x15c, 0x39, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x20, 0x4, 0x9}}) recvfrom$rose(r1, &(0x7f0000000940)=""/220, 0xdc, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000f80)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0098c4d2"}}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 11:47:35 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0) 11:47:35 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x800) read$FUSE(r0, 0x0, 0x0) 11:47:35 executing program 4: socket(0x10, 0x3, 0x8000004) 11:47:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba800000", 0x2c}], 0x1}, 0x0) 11:47:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000020000000f9], 0x6000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @private=0x6}}}, &(0x7f0000000100)=0x90) 11:47:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) 11:47:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 11:47:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) io_setup(0x6, &(0x7f0000000cc0)=0x0) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:47:35 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x311, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) 11:47:35 executing program 4: socket(0x22, 0x0, 0x10001) 11:47:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0) 11:47:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0) 11:47:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x648, 0x158, 0x158, 0x210, 0x98, 0x0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'batadv0\x00', 'vlan1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00'}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_bond\x00'}, 0x0, 0x2c8, 0x308, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@ttl={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9f6c5c95e753ddbda376becf82af4d4debfb7825799af22f52c54f068858"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6a8) [ 526.789517][T14723] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:47:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002080), 0x404d82, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000020c0)={0xb6, 0x0, 0x4f1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_misc(r5, &(0x7f0000002140)={'syz1', "941d875ee4c565ce78b3f918e7a712eaee02"}, 0x16) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00') 11:47:35 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 11:47:35 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') 11:47:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000000)) 11:47:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x0) 11:47:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 11:47:35 executing program 2: mq_open(&(0x7f0000000b00)='/dev/nvram\x00', 0x0, 0x0, 0x0) 11:47:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve0\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "4dc3"}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 11:47:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000001280)) 11:47:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<'], 0x34}}, 0x0) [ 527.173813][T14758] x_tables: duplicate underflow at hook 2 11:47:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000001e00)) 11:47:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 11:47:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="ab140ad9", 0x4) 11:47:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002080), 0x404d82, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000020c0)={0xb6, 0x0, 0x4f1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_misc(r5, &(0x7f0000002140)={'syz1', "941d875ee4c565ce78b3f918e7a712eaee02"}, 0x16) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002080), 0x404d82, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000020c0)={0xb6, 0x0, 0x4f1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) write$binfmt_misc(r5, &(0x7f0000002140)={'syz1', "941d875ee4c565ce78b3f918e7a712eaee02"}, 0x16) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:36 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') 11:47:36 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 11:47:36 executing program 2: socket(0x1e, 0x0, 0x1) 11:47:36 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x80100, 0x0) 11:47:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, 0x0) 11:47:36 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:47:36 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x2, 0x0) 11:47:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'veth1_to_bond\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 11:47:36 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) fsopen(0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000440)='/dev/dri/card#\x00', 0x0, 0xffffffffffffffff) 11:47:36 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 11:47:36 executing program 5: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) [ 527.596234][T14802] x_tables: duplicate underflow at hook 3 11:47:36 executing program 3: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='&\x00', &(0x7f0000000100)="b8", 0x1) 11:47:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002080), 0x404d82, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000020c0)={0xb6, 0x0, 0x4f1}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) write$binfmt_misc(r5, &(0x7f0000002140)={'syz1', "941d875ee4c565ce78b3f918e7a712eaee02"}, 0x16) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:36 executing program 0: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0xf607b791fe67a746) 11:47:36 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000000c0)) 11:47:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') connect$pppoe(r0, 0x0, 0x0) 11:47:36 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 11:47:36 executing program 2: bpf$MAP_CREATE(0xa, &(0x7f0000000200)=@bloom_filter, 0x48) [ 527.808338][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.839238][T14820] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:47:36 executing program 3: syz_io_uring_setup(0x2e9e, &(0x7f0000000200)={0x0, 0x52b7}, &(0x7f0000b53000/0x3000)=nil, &(0x7f00007fe000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 11:47:36 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 527.864077][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:47:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') fsmount(r0, 0x0, 0x0) [ 527.911312][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.935424][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.993381][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.060631][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.099225][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.134382][T14818] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:47:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 11:47:37 executing program 2: r0 = io_uring_setup(0x1598, &(0x7f0000000080)) syz_io_uring_setup(0xddf, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 11:47:37 executing program 3: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0, 0x0, 0x8970}, {0x0}], 0x0, &(0x7f0000000600)) 11:47:37 executing program 5: mq_open(&(0x7f0000000040)='$!E-#\x00', 0x0, 0x0, &(0x7f0000000080)) 11:47:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:37 executing program 2: setfsuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 11:47:37 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)=ANY=[]) [ 528.491771][T14840] loop3: detected capacity change from 0 to 137 [ 528.566329][T14840] affs: No valid root block on device loop3 11:47:37 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f00000013c0)=[{0x0, 0x0, 0x6ec0}, {&(0x7f0000000280)="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", 0x1d0, 0x5}]) 11:47:37 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x208800, 0x0) 11:47:37 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x30f481) 11:47:37 executing program 5: r0 = socket(0x11, 0xa, 0x0) connect$pppoe(r0, 0x0, 0x0) 11:47:37 executing program 3: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x2002011, &(0x7f0000000340)) 11:47:37 executing program 2: fsopen(&(0x7f0000000380)='fuse\x00', 0x0) 11:47:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:37 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 11:47:37 executing program 5: r0 = syz_io_uring_setup(0x1042, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:47:37 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsmount(r0, 0x0, 0x0) 11:47:37 executing program 0: syz_mount_image$affs(&(0x7f0000003240), &(0x7f0000003cc0)='./file0\x00', 0x0, 0x0, &(0x7f00000042c0), 0x480, &(0x7f00000043c0)) 11:47:37 executing program 3: bpf$BPF_GET_MAP_INFO(0x8, 0x0, 0x0) 11:47:37 executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 11:47:37 executing program 5: r0 = socket(0xa, 0x3, 0x100) setsockopt$CAIFSO_LINK_SELECT(r0, 0x29, 0x3, 0x0, 0x300) 11:47:37 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r0, &(0x7f000000cd00)=[{{&(0x7f0000004580)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, 0x0, 0x0, &(0x7f0000004c80)=[{0x10}], 0x10}}], 0x1, 0x0) 11:47:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='net/llc/socket\x00') 11:47:37 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) 11:47:37 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 11:47:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:37 executing program 5: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2bb98205) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ff9c, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 11:47:37 executing program 3: syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x6042) 11:47:37 executing program 4: syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') 11:47:37 executing program 2: fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) 11:47:37 executing program 0: bpf$MAP_CREATE(0x1e, &(0x7f0000000200)=@bloom_filter, 0x48) [ 529.169005][T14896] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:47:38 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20000a90) 11:47:38 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x240, 0x0, 0x10}, 0x18) 11:47:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000002100), 0x4) 11:47:38 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x101) 11:47:38 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') syz_open_dev$dri(&(0x7f0000000100), 0xfff, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x3, 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x0, @random="bcafe18678a8", 'geneve0\x00'}}) 11:47:38 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x441, 0x0, 0xc}, 0x18) 11:47:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:38 executing program 5: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x12-\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0) 11:47:38 executing program 4: syz_mount_image$affs(&(0x7f0000000080), 0x0, 0x0, 0x3, &(0x7f0000000540)=[{&(0x7f0000000100)="90", 0x1}, {0x0}, {&(0x7f0000000500), 0x0, 0x8001}], 0x0, &(0x7f0000000600)) 11:47:38 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000200)=@bloom_filter, 0x48) 11:47:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) 11:47:38 executing program 2: syz_io_uring_setup(0x3cc1, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x20}, 0x0, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00), 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 11:47:38 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x10000000) [ 529.614275][T14927] loop4: detected capacity change from 0 to 128 11:47:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') 11:47:38 executing program 5: bpf$BPF_GET_MAP_INFO(0x23, 0x0, 0x0) 11:47:38 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 11:47:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={0x0, 0x0}) 11:47:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:38 executing program 0: syz_mount_image$gfs2(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000005c0)={[{@statfs_percent}]}) 11:47:38 executing program 5: mq_open(&(0x7f0000000000)='}-\x00', 0x40, 0x0, &(0x7f0000000040)={0x1764000, 0x1, 0x0, 0x4}) 11:47:38 executing program 4: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='%\x00', 0x0, 0xffffffffffffffff) 11:47:38 executing program 5: syz_io_uring_setup(0x3c53, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:38 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 530.045188][ T3688] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 530.305277][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 530.445105][ T3688] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 530.454607][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.465202][ T3688] usb 4-1: config 0 descriptor?? [ 530.507395][ T3688] pwc: Philips PCA645VC USB webcam detected. [ 531.165407][ T3688] pwc: recv_control_msg error -32 req 02 val 2700 [ 531.205112][ T3688] pwc: recv_control_msg error -32 req 02 val 2c00 [ 531.485145][ T3688] pwc: recv_control_msg error -71 req 04 val 1300 [ 531.505057][ T3688] pwc: recv_control_msg error -71 req 04 val 1400 [ 531.525098][ T3688] pwc: recv_control_msg error -71 req 02 val 2000 [ 531.545139][ T3688] pwc: recv_control_msg error -71 req 02 val 2100 [ 531.575417][ T3688] pwc: recv_control_msg error -71 req 04 val 1500 [ 531.595105][ T3688] pwc: recv_control_msg error -71 req 02 val 2500 [ 531.615017][ T3688] pwc: recv_control_msg error -71 req 02 val 2400 [ 531.635066][ T3688] pwc: recv_control_msg error -71 req 02 val 2600 [ 531.665141][ T3688] pwc: recv_control_msg error -71 req 02 val 2900 [ 531.685153][ T3688] pwc: recv_control_msg error -71 req 02 val 2800 [ 531.716394][ T3688] pwc: recv_control_msg error -71 req 04 val 1100 [ 531.745044][ T3688] pwc: recv_control_msg error -71 req 04 val 1200 [ 531.754539][ T3688] pwc: Registered as video71. [ 531.760594][ T3688] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 531.775766][ T3688] usb 4-1: USB disconnect, device number 4 11:47:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x20}, 0x0, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00), 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 11:47:40 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11:47:40 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018"]) 11:47:40 executing program 0: syz_io_uring_setup(0x3c53, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:47:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (rerun: 32) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:40 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f00000003c0)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48) 11:47:40 executing program 2: bpf$MAP_CREATE(0x7, &(0x7f0000000200)=@bloom_filter, 0x48) 11:47:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:40 executing program 5: socket$inet6(0xa, 0x0, 0x10001) 11:47:40 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f00000001c0)) 11:47:40 executing program 5: fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) [ 532.162625][T14979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:47:41 executing program 2: mq_open(&(0x7f0000000100)='\x00', 0x0, 0x0, 0x0) [ 532.293986][T14986] can: request_module (can-proto-0) failed. [ 532.344996][ T8613] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 532.595008][ T8613] usb 4-1: Using ep0 maxpacket: 8 [ 532.726015][ T8613] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 532.735272][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.746195][ T8613] usb 4-1: config 0 descriptor?? [ 532.798279][ T8613] pwc: Philips PCA645VC USB webcam detected. [ 533.435241][ T8613] pwc: recv_control_msg error -32 req 02 val 2700 [ 533.475164][ T8613] pwc: recv_control_msg error -32 req 02 val 2c00 [ 533.735105][ T8613] pwc: recv_control_msg error -71 req 04 val 1300 [ 533.765226][ T8613] pwc: recv_control_msg error -71 req 04 val 1400 [ 533.785113][ T8613] pwc: recv_control_msg error -71 req 02 val 2000 [ 533.805063][ T8613] pwc: recv_control_msg error -71 req 02 val 2100 [ 533.825142][ T8613] pwc: recv_control_msg error -71 req 04 val 1500 [ 533.845093][ T8613] pwc: recv_control_msg error -71 req 02 val 2500 [ 533.874994][ T8613] pwc: recv_control_msg error -71 req 02 val 2400 [ 533.896272][ T8613] pwc: recv_control_msg error -71 req 02 val 2600 [ 533.925048][ T8613] pwc: recv_control_msg error -71 req 02 val 2900 [ 533.945098][ T8613] pwc: recv_control_msg error -71 req 02 val 2800 [ 533.965159][ T8613] pwc: recv_control_msg error -71 req 04 val 1100 [ 533.985078][ T8613] pwc: recv_control_msg error -71 req 04 val 1200 [ 533.992731][ T8613] pwc: Registered as video71. [ 533.999951][ T8613] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 534.016433][ T8613] usb 4-1: USB disconnect, device number 5 11:47:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x20}, 0x0, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00), 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 11:47:43 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) 11:47:43 executing program 2: socketpair(0x10, 0x3, 0x0, &(0x7f0000000380)) 11:47:43 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x1}, 0x0, 0x0, 0x0, 0x0) 11:47:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:43 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 11:47:43 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) 11:47:43 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/155, 0x9b}], 0x1) 11:47:43 executing program 4: syz_mount_image$affs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 11:47:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 534.675274][ T5159] usb 4-1: new high-speed USB device number 6 using dummy_hcd 11:47:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') accept4$netrom(r0, 0x0, 0x0, 0x400) [ 534.935158][ T5159] usb 4-1: Using ep0 maxpacket: 8 [ 535.055093][ T5159] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 535.077188][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.093985][ T5159] usb 4-1: config 0 descriptor?? [ 535.137406][ T5159] pwc: Philips PCA645VC USB webcam detected. [ 535.795131][ T5159] pwc: recv_control_msg error -32 req 02 val 2700 [ 535.835195][ T5159] pwc: recv_control_msg error -32 req 02 val 2c00 [ 536.095062][ T5159] pwc: recv_control_msg error -71 req 04 val 1300 [ 536.115184][ T5159] pwc: recv_control_msg error -71 req 04 val 1400 [ 536.135884][ T5159] pwc: recv_control_msg error -71 req 02 val 2000 [ 536.155146][ T5159] pwc: recv_control_msg error -71 req 02 val 2100 [ 536.175050][ T5159] pwc: recv_control_msg error -71 req 04 val 1500 [ 536.195032][ T5159] pwc: recv_control_msg error -71 req 02 val 2500 [ 536.215086][ T5159] pwc: recv_control_msg error -71 req 02 val 2400 [ 536.235075][ T5159] pwc: recv_control_msg error -71 req 02 val 2600 [ 536.255123][ T5159] pwc: recv_control_msg error -71 req 02 val 2900 [ 536.275035][ T5159] pwc: recv_control_msg error -71 req 02 val 2800 [ 536.295912][ T5159] pwc: recv_control_msg error -71 req 04 val 1100 [ 536.315071][ T5159] pwc: recv_control_msg error -71 req 04 val 1200 [ 536.329453][ T5159] pwc: Registered as video71. [ 536.336419][ T5159] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 536.356566][ T5159] usb 4-1: USB disconnect, device number 6 11:47:45 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x20}, 0x0, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00), 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 11:47:45 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) 11:47:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:45 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 11:47:45 executing program 2: syz_read_part_table(0x0, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="c77e7efadb982cf6fce1d3a1464d43299dd11ea274f298854a64733deab992cefc641885352343a470dec20ea5d416bcd84379e6756c87b969921c61265e0e54e44b97b577cbfd09b6d22b44f291624c927710d8d6621af66b50c22d4576b2312bb93e23abb904d6a1420cbfcebe04d2936f856b4cfa02084136c68561dfe98b2380f12f1dd5448bdad977649e6d8484755ce4fd0ed7d5fde844c999f861a8f5f4f5114c9ffb91945fcf178e9f02ce9524650994384b5dc31a72", 0xba, 0x8}, {&(0x7f0000000200)="89806bf67da34470740b18a459d7cab03a06781c5574d8401195fde811c25b69c00e7192ab17fbd0f63194d3740190718a68b0da01938af0269623531b6982855c4154a96fadd356a73de9c80534027f8356e7cb82e13f92545449d7998ee42f32a0a822d5e1eec83935ebff765ec98ac4999bed0201c7cc3e458ffe6a56b8aecf708f63b91a83778db92cecd1089a2855d97e853834a12142cb831ee5d04ab123261acdd25c1512dd1c52a6a6e0bcf011f5e7fdcf3c79ade3b951cc13ed934dbe3b1be5e83607eda6311082139c448ab6149c475527966fe6fdec5fc0ff51a12449cf28c5d4a8d05b19", 0xea, 0x7}, {&(0x7f0000000000)="92d1af69572b613a89408ff389c333370a6d5a4a0185d9131cede98ccc0bf1f8f6d917e8ff0bec8b2f3757eebb6656d4b4e810c1", 0x34}, {&(0x7f0000000300)="1064a7ec239ebaa04c41b27ae1a0c1b1aab3c6b3424113cb5a83c322a770c4df46edd5ab412ace211dc2e33606c5a0c247b2dffa4601d4e1a61a0d358e3527eb1ee6d20dcd03be4b96c87a74129da828ea30f1978728b1212325446b3d1c079ea43e6d758712ea76d826a23ce020d68e132f17ef0ca07034fd0332aad715f6c710763396449b36f2a434760b7d2edf80ec1d93ed1bcb330aa98840504f26c5109ad2f265e12ec18632e238102fddf895e3f285cfae3705cb642b6c2249bf7450fd2e84d616812ecc369da9a6b99fe3414f055e5c1a", 0xd5, 0x7ff}, {&(0x7f0000000040)="a1cf2ff558", 0x5, 0x80000001}]) 11:47:45 executing program 5: r0 = syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) [ 536.663911][T15038] loop2: detected capacity change from 0 to 264192 11:47:45 executing program 4: socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:47:45 executing program 2: syz_mount_image$affs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 11:47:45 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:47:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10060, 0x0, 0x0) 11:47:45 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f0000000200)=@bloom_filter, 0x48) [ 536.937666][ T2971] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.965140][ T2971] Buffer I/O error on dev loop2, logical block 0, async page read [ 537.016649][ T2971] ldm_validate_partition_table(): Disk read failed. [ 537.025984][ T8613] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 537.068448][ T2971] Dev loop2: unable to read RDB block 0 [ 537.091575][ T2971] loop2: unable to read partition table [ 537.097561][ T2971] loop2: partition table beyond EOD, truncated [ 537.315885][ T8613] usb 4-1: Using ep0 maxpacket: 8 [ 537.435266][ T8613] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 537.451808][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.467761][ T8613] usb 4-1: config 0 descriptor?? [ 537.517606][ T8613] pwc: Philips PCA645VC USB webcam detected. [ 538.165081][ T8613] pwc: recv_control_msg error -32 req 02 val 2700 [ 538.205092][ T8613] pwc: recv_control_msg error -32 req 02 val 2c00 [ 538.465184][ T8613] pwc: recv_control_msg error -71 req 04 val 1300 [ 538.485029][ T8613] pwc: recv_control_msg error -71 req 04 val 1400 [ 538.505114][ T8613] pwc: recv_control_msg error -71 req 02 val 2000 [ 538.525079][ T8613] pwc: recv_control_msg error -71 req 02 val 2100 [ 538.545756][ T8613] pwc: recv_control_msg error -71 req 04 val 1500 [ 538.565197][ T8613] pwc: recv_control_msg error -71 req 02 val 2500 [ 538.585050][ T8613] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.605077][ T8613] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.627525][ T8613] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.655091][ T8613] pwc: recv_control_msg error -71 req 02 val 2800 [ 538.675078][ T8613] pwc: recv_control_msg error -71 req 04 val 1100 [ 538.695043][ T8613] pwc: recv_control_msg error -71 req 04 val 1200 [ 538.702148][ T8613] pwc: Registered as video71. [ 538.707984][ T8613] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 538.727782][ T8613] usb 4-1: USB disconnect, device number 7 11:47:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x0}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x20}, 0x0, &(0x7f0000000dc0)={0x0, 0x8, 0x1}, &(0x7f0000000e00), 0x0}) 11:47:47 executing program 4: syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x10000) 11:47:47 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'erspan0\x00', &(0x7f0000002140)={'erspan0\x00', 0x0, 0x80, 0x700, 0x6, 0x7f, {{0x2c, 0x4, 0x2, 0x31, 0xb0, 0x65, 0x0, 0x8e, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0x5f, [@rand_addr=0x64010102, @broadcast, @multicast2, @local]}, @noop, @end, @generic={0x94, 0x7, "f5d7e5b1b6"}, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x1, [0x4, 0x6, 0x101]}, @ssrr={0x89, 0x7, 0xe9, [@loopback]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0xd, "5b07fb51c00378166f522d"}, {0x7, 0xd, "fe85df77e05456a3fc3421"}, {0x1, 0xf, "5b9296f0366fb96c3e0880ba76"}, {0x7, 0xf, "fbdc96be620b4e121252aa10b9"}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0xf, "3117a50fcc5b886bb861879675"}, {0x6, 0x6, "81cb4911"}, {0x1, 0x9, "7baf2cbf338102"}, {0x1, 0x8, "019f449ba5cb"}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000022c0)=0x0) perf_event_open(&(0x7f0000002240)={0x5, 0x80, 0x7f, 0x40, 0xf, 0x86, 0x0, 0x9, 0x1100, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000020c0), 0x8}, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x7f, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0x7a}, r3, 0x7, 0xffffffffffffffff, 0xc) fcntl$setownex(r1, 0xf, &(0x7f0000002080)={0x0, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11:47:47 executing program 2: bpf$MAP_CREATE(0x18, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x48) 11:47:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0, 0x4}, 0x20) 11:47:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:47 executing program 4: fsopen(&(0x7f0000000140)='sockfs\x00', 0x0) 11:47:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:47:47 executing program 2: fsopen(&(0x7f0000000080)='nsfs\x00', 0x0) 11:47:48 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'erspan0\x00', &(0x7f0000002140)={'erspan0\x00', 0x0, 0x80, 0x700, 0x6, 0x7f, {{0x2c, 0x4, 0x2, 0x31, 0xb0, 0x65, 0x0, 0x8e, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0x5f, [@rand_addr=0x64010102, @broadcast, @multicast2, @local]}, @noop, @end, @generic={0x94, 0x7, "f5d7e5b1b6"}, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x1, [0x4, 0x6, 0x101]}, @ssrr={0x89, 0x7, 0xe9, [@loopback]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0xd, "5b07fb51c00378166f522d"}, {0x7, 0xd, "fe85df77e05456a3fc3421"}, {0x1, 0xf, "5b9296f0366fb96c3e0880ba76"}, {0x7, 0xf, "fbdc96be620b4e121252aa10b9"}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0xf, "3117a50fcc5b886bb861879675"}, {0x6, 0x6, "81cb4911"}, {0x1, 0x9, "7baf2cbf338102"}, {0x1, 0x8, "019f449ba5cb"}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000022c0)=0x0) perf_event_open(&(0x7f0000002240)={0x5, 0x80, 0x7f, 0x40, 0xf, 0x86, 0x0, 0x9, 0x1100, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000020c0), 0x8}, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x7f, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0x7a}, r3, 0x7, 0xffffffffffffffff, 0xc) fcntl$setownex(r1, 0xf, &(0x7f0000002080)={0x0, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'erspan0\x00', &(0x7f0000002140)={'erspan0\x00', 0x0, 0x80, 0x700, 0x6, 0x7f, {{0x2c, 0x4, 0x2, 0x31, 0xb0, 0x65, 0x0, 0x8e, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0x5f, [@rand_addr=0x64010102, @broadcast, @multicast2, @local]}, @noop, @end, @generic={0x94, 0x7, "f5d7e5b1b6"}, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x1, [0x4, 0x6, 0x101]}, @ssrr={0x89, 0x7, 0xe9, [@loopback]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0xd, "5b07fb51c00378166f522d"}, {0x7, 0xd, "fe85df77e05456a3fc3421"}, {0x1, 0xf, "5b9296f0366fb96c3e0880ba76"}, {0x7, 0xf, "fbdc96be620b4e121252aa10b9"}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0xf, "3117a50fcc5b886bb861879675"}, {0x6, 0x6, "81cb4911"}, {0x1, 0x9, "7baf2cbf338102"}, {0x1, 0x8, "019f449ba5cb"}]}]}}}}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) getpid() (async) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000022c0)) (async) perf_event_open(&(0x7f0000002240)={0x5, 0x80, 0x7f, 0x40, 0xf, 0x86, 0x0, 0x9, 0x1100, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000020c0), 0x8}, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x7f, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0x7a}, r3, 0x7, 0xffffffffffffffff, 0xc) (async) fcntl$setownex(r1, 0xf, &(0x7f0000002080)={0x0, r2}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 11:47:48 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) readv(r0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 11:47:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}, 0x1, 0x10}, 0x0) [ 539.395173][ T5160] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 539.655002][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 539.775457][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 539.810518][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.875897][ T5160] usb 4-1: config 0 descriptor?? [ 539.917326][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 540.575050][ T5160] pwc: recv_control_msg error -32 req 02 val 2700 [ 540.615251][ T5160] pwc: recv_control_msg error -32 req 02 val 2c00 [ 540.885103][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 540.905143][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 540.925050][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 540.953356][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 540.975071][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 540.998081][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 541.017159][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 541.035145][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 541.055126][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 541.075046][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 541.096613][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 541.115099][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 541.122310][ T5160] pwc: Registered as video71. [ 541.128163][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 541.143599][ T5160] usb 4-1: USB disconnect, device number 8 11:47:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:47:50 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) io_uring_setup(0x57ee, &(0x7f0000000740)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 11:47:50 executing program 5: syz_io_uring_setup(0x169c, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:47:50 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'erspan0\x00', &(0x7f0000002140)={'erspan0\x00', 0x0, 0x80, 0x700, 0x6, 0x7f, {{0x2c, 0x4, 0x2, 0x31, 0xb0, 0x65, 0x0, 0x8e, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0x5f, [@rand_addr=0x64010102, @broadcast, @multicast2, @local]}, @noop, @end, @generic={0x94, 0x7, "f5d7e5b1b6"}, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x1, [0x4, 0x6, 0x101]}, @ssrr={0x89, 0x7, 0xe9, [@loopback]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0xd, "5b07fb51c00378166f522d"}, {0x7, 0xd, "fe85df77e05456a3fc3421"}, {0x1, 0xf, "5b9296f0366fb96c3e0880ba76"}, {0x7, 0xf, "fbdc96be620b4e121252aa10b9"}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0xf, "3117a50fcc5b886bb861879675"}, {0x6, 0x6, "81cb4911"}, {0x1, 0x9, "7baf2cbf338102"}, {0x1, 0x8, "019f449ba5cb"}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000022c0)=0x0) perf_event_open(&(0x7f0000002240)={0x5, 0x80, 0x7f, 0x40, 0xf, 0x86, 0x0, 0x9, 0x1100, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000020c0), 0x8}, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x7f, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0x7a}, r3, 0x7, 0xffffffffffffffff, 0xc) fcntl$setownex(r1, 0xf, &(0x7f0000002080)={0x0, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'erspan0\x00', &(0x7f0000002140)={'erspan0\x00', 0x0, 0x80, 0x700, 0x6, 0x7f, {{0x2c, 0x4, 0x2, 0x31, 0xb0, 0x65, 0x0, 0x8e, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x13, 0x5f, [@rand_addr=0x64010102, @broadcast, @multicast2, @local]}, @noop, @end, @generic={0x94, 0x7, "f5d7e5b1b6"}, @noop, @timestamp={0x44, 0x10, 0xde, 0x0, 0x1, [0x4, 0x6, 0x101]}, @ssrr={0x89, 0x7, 0xe9, [@loopback]}, @cipso={0x86, 0x68, 0x3, [{0x5, 0xd, "5b07fb51c00378166f522d"}, {0x7, 0xd, "fe85df77e05456a3fc3421"}, {0x1, 0xf, "5b9296f0366fb96c3e0880ba76"}, {0x7, 0xf, "fbdc96be620b4e121252aa10b9"}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0xf, "3117a50fcc5b886bb861879675"}, {0x6, 0x6, "81cb4911"}, {0x1, 0x9, "7baf2cbf338102"}, {0x1, 0x8, "019f449ba5cb"}]}]}}}}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) getpid() (async) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000022c0)) (async) perf_event_open(&(0x7f0000002240)={0x5, 0x80, 0x7f, 0x40, 0xf, 0x86, 0x0, 0x9, 0x1100, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000020c0), 0x8}, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x7f, 0xfdb5, 0x0, 0xfffffff9, 0x0, 0x7a}, r3, 0x7, 0xffffffffffffffff, 0xc) (async) fcntl$setownex(r1, 0xf, &(0x7f0000002080)={0x0, r2}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 11:47:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 11:47:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}, 0x1, 0x10}, 0x0) 11:47:50 executing program 5: syz_io_uring_setup(0x20025417, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 11:47:50 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) fstatfs(r0, &(0x7f0000000140)=""/239) 11:47:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') write$vhost_msg(r0, 0x0, 0x0) 11:47:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80) [ 541.785126][ T8613] usb 4-1: new high-speed USB device number 9 using dummy_hcd 11:47:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{}]}) 11:47:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9652], 0x100000}) r5 = syz_mount_image$romfs(&(0x7f0000002080), &(0x7f00000020c0)='\x00', 0x3, 0x3, &(0x7f0000002280)=[{&(0x7f0000002100)="3f906360eccd3fa0777be29e51866e1495f74713890ea79b1cd6d825566164004eb2d374ce362eb3b6f6ee524b6c5caa1debd944ca7e28c42eaf22e704ea7ecdb137c379e3fb17c47692ce8542d54a1c848502e2504be951bd98b9e5ad3ec3de5d9bc54b74107846a3e98b217cb2120adf6357dc8fd0e71fafa9d7a0939ff11c431828cb1adeb3ea176bca269ddb1c95786195d878780fb77a1d3f060cc095a72fa229f08878c013439d66a30e7f928343477a2598704a9ec983b16592ea9f11e1be89c1119a0fad7524457d1a6f50", 0xcf, 0x8001}, {&(0x7f0000002200)="2851656643c333ccef43094b9a646a4a46d2c731e04e6cd447244a2474ccfe45950a0bac0114607d75373d22", 0x2c}, {&(0x7f0000002240)="3bdbb2eacbf021952ab2c94f3ac2475670b3df219e205774e5367b2575c6acbeef", 0x21, 0x100000000}], 0x200000, &(0x7f0000002300)={[{'status\x00'}, {'%'}, {'\\['}, {'\x00'}, {}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_gt={'fowner>', r4}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'status\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x35, 0x34, 0x33, 0x62, 0x65, 0x31], 0x2d, [0x61, 0x38, 0x34, 0x31], 0x2d, [0x32, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x62, 0x32, 0x37], 0x2d, [0x34, 0x31, 0x33, 0x66, 0x34, 0x65, 0x64, 0x32]}}}]}) r6 = dup3(r2, r5, 0x80000) ftruncate(r6, 0x101) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 542.035905][ T8613] usb 4-1: Using ep0 maxpacket: 8 [ 542.156014][ T8613] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 542.194833][ T8613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.219304][ T8613] usb 4-1: config 0 descriptor?? [ 542.267462][ T8613] pwc: Philips PCA645VC USB webcam detected. [ 542.333668][T15138] loop1: detected capacity change from 0 to 264192 [ 542.476725][ T8832] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 542.925050][ T8613] pwc: recv_control_msg error -32 req 02 val 2700 [ 542.965063][ T8613] pwc: recv_control_msg error -71 req 02 val 2c00 [ 542.985146][ T8613] pwc: recv_control_msg error -71 req 04 val 1000 [ 543.005134][ T8613] pwc: recv_control_msg error -71 req 04 val 1300 [ 543.025026][ T8613] pwc: recv_control_msg error -71 req 04 val 1400 [ 543.045023][ T8613] pwc: recv_control_msg error -71 req 02 val 2000 [ 543.066454][ T8613] pwc: recv_control_msg error -71 req 02 val 2100 [ 543.085101][ T8613] pwc: recv_control_msg error -71 req 04 val 1500 [ 543.106745][ T8613] pwc: recv_control_msg error -71 req 02 val 2500 [ 543.125011][ T8613] pwc: recv_control_msg error -71 req 02 val 2400 [ 543.145020][ T8613] pwc: recv_control_msg error -71 req 02 val 2600 [ 543.165273][ T8613] pwc: recv_control_msg error -71 req 02 val 2900 [ 543.185039][ T8613] pwc: recv_control_msg error -71 req 02 val 2800 [ 543.205110][ T8613] pwc: recv_control_msg error -71 req 04 val 1100 [ 543.225154][ T8613] pwc: recv_control_msg error -71 req 04 val 1200 [ 543.232400][ T8613] pwc: Registered as video71. [ 543.238020][ T8613] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 543.255499][ T8613] usb 4-1: USB disconnect, device number 9 11:47:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:47:52 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') 11:47:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 11:47:52 executing program 5: syz_mount_image$affs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)) 11:47:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}, 0x1, 0x10}, 0x0) 11:47:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9652], 0x100000}) (async) r5 = syz_mount_image$romfs(&(0x7f0000002080), &(0x7f00000020c0)='\x00', 0x3, 0x3, &(0x7f0000002280)=[{&(0x7f0000002100)="3f906360eccd3fa0777be29e51866e1495f74713890ea79b1cd6d825566164004eb2d374ce362eb3b6f6ee524b6c5caa1debd944ca7e28c42eaf22e704ea7ecdb137c379e3fb17c47692ce8542d54a1c848502e2504be951bd98b9e5ad3ec3de5d9bc54b74107846a3e98b217cb2120adf6357dc8fd0e71fafa9d7a0939ff11c431828cb1adeb3ea176bca269ddb1c95786195d878780fb77a1d3f060cc095a72fa229f08878c013439d66a30e7f928343477a2598704a9ec983b16592ea9f11e1be89c1119a0fad7524457d1a6f50", 0xcf, 0x8001}, {&(0x7f0000002200)="2851656643c333ccef43094b9a646a4a46d2c731e04e6cd447244a2474ccfe45950a0bac0114607d75373d22", 0x2c}, {&(0x7f0000002240)="3bdbb2eacbf021952ab2c94f3ac2475670b3df219e205774e5367b2575c6acbeef", 0x21, 0x100000000}], 0x200000, &(0x7f0000002300)={[{'status\x00'}, {'%'}, {'\\['}, {'\x00'}, {}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_gt={'fowner>', r4}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'status\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x35, 0x34, 0x33, 0x62, 0x65, 0x31], 0x2d, [0x61, 0x38, 0x34, 0x31], 0x2d, [0x32, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x62, 0x32, 0x37], 0x2d, [0x34, 0x31, 0x33, 0x66, 0x34, 0x65, 0x64, 0x32]}}}]}) r6 = dup3(r2, r5, 0x80000) ftruncate(r6, 0x101) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:52 executing program 5: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0, 0x0, 0x8970}, {0x0}], 0x8, &(0x7f0000000600)) 11:47:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r1, &(0x7f0000000200), 0x43408) bpf$ITER_CREATE(0x21, 0x0, 0x0) [ 543.578845][T15156] loop1: detected capacity change from 0 to 264192 [ 543.771589][T15163] loop5: detected capacity change from 0 to 137 [ 543.845231][ T5160] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 543.858441][T15163] affs: No valid root block on device loop5 11:47:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_vif\x00') read$midi(r0, &(0x7f0000000100)=""/142, 0x8e) [ 543.918364][ T8832] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 11:47:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9652], 0x100000}) r5 = syz_mount_image$romfs(&(0x7f0000002080), &(0x7f00000020c0)='\x00', 0x3, 0x3, &(0x7f0000002280)=[{&(0x7f0000002100)="3f906360eccd3fa0777be29e51866e1495f74713890ea79b1cd6d825566164004eb2d374ce362eb3b6f6ee524b6c5caa1debd944ca7e28c42eaf22e704ea7ecdb137c379e3fb17c47692ce8542d54a1c848502e2504be951bd98b9e5ad3ec3de5d9bc54b74107846a3e98b217cb2120adf6357dc8fd0e71fafa9d7a0939ff11c431828cb1adeb3ea176bca269ddb1c95786195d878780fb77a1d3f060cc095a72fa229f08878c013439d66a30e7f928343477a2598704a9ec983b16592ea9f11e1be89c1119a0fad7524457d1a6f50", 0xcf, 0x8001}, {&(0x7f0000002200)="2851656643c333ccef43094b9a646a4a46d2c731e04e6cd447244a2474ccfe45950a0bac0114607d75373d22", 0x2c}, {&(0x7f0000002240)="3bdbb2eacbf021952ab2c94f3ac2475670b3df219e205774e5367b2575c6acbeef", 0x21, 0x100000000}], 0x200000, &(0x7f0000002300)={[{'status\x00'}, {'%'}, {'\\['}, {'\x00'}, {}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_gt={'fowner>', r4}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'status\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x35, 0x34, 0x33, 0x62, 0x65, 0x31], 0x2d, [0x61, 0x38, 0x34, 0x31], 0x2d, [0x32, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x62, 0x32, 0x37], 0x2d, [0x34, 0x31, 0x33, 0x66, 0x34, 0x65, 0x64, 0x32]}}}]}) r6 = dup3(r2, r5, 0x80000) ftruncate(r6, 0x101) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9652], 0x100000}) (async) syz_mount_image$romfs(&(0x7f0000002080), &(0x7f00000020c0)='\x00', 0x3, 0x3, &(0x7f0000002280)=[{&(0x7f0000002100)="3f906360eccd3fa0777be29e51866e1495f74713890ea79b1cd6d825566164004eb2d374ce362eb3b6f6ee524b6c5caa1debd944ca7e28c42eaf22e704ea7ecdb137c379e3fb17c47692ce8542d54a1c848502e2504be951bd98b9e5ad3ec3de5d9bc54b74107846a3e98b217cb2120adf6357dc8fd0e71fafa9d7a0939ff11c431828cb1adeb3ea176bca269ddb1c95786195d878780fb77a1d3f060cc095a72fa229f08878c013439d66a30e7f928343477a2598704a9ec983b16592ea9f11e1be89c1119a0fad7524457d1a6f50", 0xcf, 0x8001}, {&(0x7f0000002200)="2851656643c333ccef43094b9a646a4a46d2c731e04e6cd447244a2474ccfe45950a0bac0114607d75373d22", 0x2c}, {&(0x7f0000002240)="3bdbb2eacbf021952ab2c94f3ac2475670b3df219e205774e5367b2575c6acbeef", 0x21, 0x100000000}], 0x200000, &(0x7f0000002300)={[{'status\x00'}, {'%'}, {'\\['}, {'\x00'}, {}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_gt={'fowner>', r4}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, 'status\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x32, 0x35, 0x34, 0x33, 0x62, 0x65, 0x31], 0x2d, [0x61, 0x38, 0x34, 0x31], 0x2d, [0x32, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x62, 0x32, 0x37], 0x2d, [0x34, 0x31, 0x33, 0x66, 0x34, 0x65, 0x64, 0x32]}}}]}) (async) dup3(r2, r5, 0x80000) (async) ftruncate(r6, 0x101) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) [ 544.135106][ T5160] usb 4-1: Using ep0 maxpacket: 8 11:47:53 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='@\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) [ 544.286689][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 544.331167][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.399471][T15170] loop1: detected capacity change from 0 to 264192 [ 544.407405][ T5160] usb 4-1: config 0 descriptor?? [ 544.447577][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 544.464162][ T8832] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 545.114025][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 545.135072][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 545.155156][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 545.176385][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 545.195079][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 545.215045][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 545.235064][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 545.255044][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 545.275136][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 545.295083][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 545.315060][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 545.335101][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 545.355166][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 545.377225][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 545.399483][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 545.408892][ T5160] pwc: Registered as video71. [ 545.414708][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 545.435509][ T5160] usb 4-1: USB disconnect, device number 10 11:47:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xd36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}, 0x1, 0x10}, 0x0) 11:47:54 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:47:54 executing program 2: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) 11:47:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) 11:47:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:47:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) splice(r0, &(0x7f0000002080)=0x9, r2, &(0x7f00000020c0)=0x1, 0x2, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:47:54 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000000480)=[{&(0x7f0000000100)}, {0x0, 0x0, 0x80000001}]) 11:47:54 executing program 2: syz_mount_image$affs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="902d6bc5", 0x4}], 0x0, 0x0) 11:47:54 executing program 2: syz_mount_image$affs(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000240)='>', 0x1, 0x10000}, {&(0x7f0000000340)='w', 0x1, 0x7fffffff}], 0x0, 0x0) [ 545.834172][T15205] loop5: detected capacity change from 0 to 264192 11:47:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) splice(r0, &(0x7f0000002080)=0x9, r2, &(0x7f00000020c0)=0x1, 0x2, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) pipe2(&(0x7f0000002100), 0x800) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) splice(r0, &(0x7f0000002080)=0x9, r2, &(0x7f00000020c0)=0x1, 0x2, 0x8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:54 executing program 5: syz_mount_image$affs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="90", 0x1}], 0x0, 0x0) [ 545.985056][ T5160] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 546.042839][T15207] loop2: detected capacity change from 0 to 264192 [ 546.225034][ T5160] usb 4-1: Using ep0 maxpacket: 8 11:47:55 executing program 2: bpf$BPF_GET_MAP_INFO(0x21, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 546.345369][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 546.374079][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.398665][ T8832] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 546.451396][ T5160] usb 4-1: config 0 descriptor?? [ 546.497402][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 546.532885][ T8832] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 546.568992][ T8832] Buffer I/O error on dev loop2, logical block 33008, async page read 11:47:55 executing program 4: bpf$BPF_GET_MAP_INFO(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:47:55 executing program 5: r0 = fsopen(&(0x7f0000000140)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 11:47:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cmdline\x00') r1 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x00', 0x0, r0) 11:47:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 547.155035][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 547.175061][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 547.195150][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 547.215075][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 547.235085][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 547.255104][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 547.275025][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 547.297321][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 547.315023][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 547.335051][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 547.355056][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 547.379710][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 547.406480][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 547.425032][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 547.444997][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 547.453782][ T5160] pwc: Registered as video71. [ 547.467447][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 547.502624][ T5160] usb 4-1: USB disconnect, device number 11 11:47:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:47:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) splice(r0, &(0x7f0000002080)=0x9, r2, &(0x7f00000020c0)=0x1, 0x2, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) pipe2(&(0x7f0000002100), 0x800) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) splice(r0, &(0x7f0000002080)=0x9, r2, &(0x7f00000020c0)=0x1, 0x2, 0x8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:47:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:47:56 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/145, 0x91) 11:47:56 executing program 4: bpf$BPF_GET_MAP_INFO(0xe, 0x0, 0x0) 11:47:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:56 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) 11:47:56 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0, 0x0) 11:47:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000440)='/dev/dri/card#\x00', 0x0, r0) 11:47:56 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11:47:56 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f0000000480)=[{0x0}, {0x0, 0x0, 0x7ff}]) 11:47:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) [ 548.010078][T15270] loop4: detected capacity change from 0 to 7 [ 548.075194][ T5160] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 548.090026][ T9721] Dev loop4: unable to read RDB block 7 [ 548.096374][ T9721] loop4: unable to read partition table [ 548.102594][ T9721] loop4: partition table beyond EOD, truncated [ 548.113519][T15270] Dev loop4: unable to read RDB block 7 [ 548.123417][T15270] loop4: unable to read partition table [ 548.129461][T15270] loop4: partition table beyond EOD, truncated [ 548.152096][T15270] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 548.315005][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 548.435265][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 548.444507][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.461063][ T5160] usb 4-1: config 0 descriptor?? [ 548.510241][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 548.935048][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 548.955043][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 548.975096][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 548.995424][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 549.019266][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 549.045068][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 549.065009][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 549.085723][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 549.105082][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 549.125087][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 549.145174][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 549.166442][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 549.186112][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 549.205029][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 549.225405][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 549.249265][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 549.261728][ T5160] pwc: Registered as video71. [ 549.278030][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 549.300558][ T5160] usb 4-1: USB disconnect, device number 12 11:47:58 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:47:58 executing program 2: r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 11:47:58 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x6}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 11:47:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000020c0)) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r5, 0x0, 0xc) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000002080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:47:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:47:58 executing program 4: socket$inet6(0xa, 0x1, 0x2) 11:47:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) 11:47:58 executing program 5: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f0000000540)=[{&(0x7f0000000100)="90", 0x1, 0x3}, {&(0x7f0000000140)="ee5aa4dba8dbd609089ecdd145a77993f27f4108c347a198424b28a3f3a5ca4dbab2ebe7bc2944acf2021f3439595baa40ac10bd31c8bdcf1c508522ab25106f0ba188b7159485c2169cf4b302869380cff0fdf7aac0140873106452d61d60be057bf248407f2440fd3d836224442c34ce2392635d20d897f05cd2d56a668d08b2b2ac961a4f1842813464f68fb2cc0c163d552c20", 0x95, 0x8970}, {&(0x7f0000000280)="e8c338eb371b646707661a2f54214874312a063cc4e90b660b7066aca9f1176e13479ad42de429272c2bc6faf541", 0x2e}], 0x8, &(0x7f0000000600)={[{')/@+!'}], [{@subj_role={'subj_role', 0x3d, '\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:47:58 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') 11:47:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (rerun: 32) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000020c0)) (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r5, 0x0, 0xc) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000002080)) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc], 0x100000}) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 549.627646][T15292] loop5: detected capacity change from 0 to 137 [ 549.666544][T15292] affs: Unrecognized mount option ")/@+!" or missing value [ 549.702553][T15292] affs: Error parsing options 11:47:58 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000140), 0x0, 0x602) 11:47:58 executing program 2: r0 = mq_open(&(0x7f0000000000)='+@!!{&\xa9,-%\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/179, 0xb3, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) [ 549.894970][ T5160] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 550.145047][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 550.265217][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 550.274370][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.285111][ T5160] usb 4-1: config 0 descriptor?? [ 550.327977][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 550.765120][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 550.785156][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 550.805120][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 550.825113][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 550.845114][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 550.865127][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 550.885075][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 550.905052][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 550.925094][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 550.945141][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 550.966310][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 550.985126][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 551.005036][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 551.025513][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 551.045058][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 551.065075][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 551.072478][ T5160] pwc: Registered as video71. [ 551.079348][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 551.094832][ T5160] usb 4-1: USB disconnect, device number 13 11:48:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:48:00 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001", @ANYRES32]) 11:48:00 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) 11:48:00 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) syz_open_procfs(0x0, 0x0) 11:48:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000020c0)) (async, rerun: 32) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (rerun: 32) read$FUSE(r5, 0x0, 0xc) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000002080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 11:48:00 executing program 2: syz_mount_image$affs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000540)=[{&(0x7f0000000100)="902d6bc5181662b246237f2776dc923e951fe6adb29b4c", 0x17, 0x3}, {&(0x7f0000000140)="ee5aa4dba8dbd609089ecdd145a77993f27f4108c347a198424b28a3f3a5ca4dbab2ebe7bc2944", 0x27, 0x8970}, {&(0x7f0000000280)="e8c338eb371b646707661a2f54214874312a063cc4e90b660b7066aca9f1176e13479ad42de429272c2bc6faf541ea1bcc98cbf40712010cd66ca5bfb5e0cd1dce2cc4fcc1d66380473dfe38dea9f9a624c4e433d8de058a3983dc745c22fc156f873c2b3a0abccaede2b43bffe053f695e1abd0f44f2a7dd211ccd2c96390ba4c3c8bb566adc8ed44b6ecc7781727", 0x8f}, {&(0x7f0000000340)="35583aee904949e5054e4c5f8569ba1ae14e20700c036af75c696498c24da060daba63baf3d0d1b87d91c9b6cc352c3d182ed2f90af4c323b3795534453bc87b74bfb88ec07e8bd00613a1afdf1d45e58e06fefdbedf8b235bd0f456869cf9a8f407277bbcd65712a05a6ffa073cdfcc39c0b9c094", 0x75}, {&(0x7f0000000500)}], 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) [ 551.302132][T15313] autofs4:pid:15313:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967041), cmd(0xc0189377) 11:48:00 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=[@dead_binder_done, @increfs], 0x0, 0x0, &(0x7f0000000140)}) [ 551.372499][T15313] autofs4:pid:15313:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 551.409328][T15325] loop2: detected capacity change from 0 to 137 11:48:00 executing program 4: r0 = fsopen(&(0x7f0000000040)='sysv\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)=')](\x00', &(0x7f0000000080), 0x0) 11:48:00 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x1}, &(0x7f0000000040)={0x3}, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 11:48:00 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:00 executing program 2: syz_mount_image$affs(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1800, &(0x7f0000000340)) [ 551.745117][ T5160] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 552.013008][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 552.145297][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 552.154452][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.169527][ T5160] usb 4-1: config 0 descriptor?? [ 552.218239][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 552.635077][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 552.655953][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 552.675060][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 552.695048][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 552.715046][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 552.735484][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 552.755044][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 552.775017][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 552.795140][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 552.815068][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 552.835083][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 552.855125][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 552.875936][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 552.895219][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 552.915100][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 552.935235][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 552.949330][ T5160] pwc: Registered as video71. [ 552.965061][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 552.994438][ T5160] usb 4-1: USB disconnect, device number 14 11:48:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7ff], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002080)={0x6, 0x1}) 11:48:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:01 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) syz_io_uring_setup(0x78c5, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) 11:48:01 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) fsopen(&(0x7f0000000080)='erofs\x00', 0x1) 11:48:01 executing program 2: memfd_create(&(0x7f0000000000)='\\:\'^,\x00', 0x3) 11:48:02 executing program 2: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x83e5}, 0x0, 0x0, 0x0) 11:48:02 executing program 4: openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 11:48:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x0, 0x0, 0x494}, 0x48) 11:48:02 executing program 4: syz_open_dev$sndmidi(&(0x7f0000000200), 0x0, 0x446802) 11:48:02 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) signalfd(r0, &(0x7f0000000d80), 0x8) 11:48:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7ff], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002080)={0x6, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7ff], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002080)={0x6, 0x1}) (async) [ 553.600427][ T5160] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 553.925183][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 554.076859][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 554.114999][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.125143][ T5160] usb 4-1: config 0 descriptor?? [ 554.187280][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 554.645056][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 554.665077][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 554.685149][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 554.711548][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 554.752325][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 554.795186][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 554.835166][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 554.855061][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 554.875068][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 554.895089][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 554.925110][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 554.945338][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 554.965161][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 554.985092][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 555.005045][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 555.033332][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 555.041180][ T5160] pwc: Registered as video71. [ 555.051394][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 555.063751][ T5160] usb 4-1: USB disconnect, device number 15 11:48:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:03 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @multicast, 'bridge_slave_0\x00'}}, 0x1e) 11:48:03 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) 11:48:03 executing program 2: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000600)) 11:48:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7ff], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002080)={0x6, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x7ff], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000002080)={0x6, 0x1}) (async) 11:48:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 555.189537][T15385] affs: No valid root block on device loop2 11:48:04 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000200)={0x5a}, 0xfe85) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[], 0x23) 11:48:04 executing program 2: r0 = syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) readv(r0, 0x0, 0x0) 11:48:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002080), 0x8100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xb31d, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f16], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:48:04 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000040)=""/162, 0xa2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 11:48:04 executing program 2: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) [ 555.675052][ T5160] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 555.719061][T15408] dump_vmcs: 26 callbacks suppressed [ 555.719081][T15408] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 555.793024][T15412] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:04 executing program 2: bpf$MAP_CREATE(0xe, &(0x7f0000000200)=@bloom_filter, 0x48) [ 555.955341][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 556.075496][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 556.090432][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.166078][ T5160] usb 4-1: config 0 descriptor?? [ 556.237788][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 556.655109][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 556.675126][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 556.695095][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 556.715104][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 556.736741][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 556.756528][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 556.775140][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 556.795100][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 556.815089][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 556.836391][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 556.855071][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 556.875131][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 556.895078][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 556.915065][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 556.935179][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 556.955062][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 556.962699][ T5160] pwc: Registered as video71. [ 556.972351][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 556.984541][ T5160] usb 4-1: USB disconnect, device number 16 11:48:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:05 executing program 4: syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') 11:48:05 executing program 2: bpf$MAP_CREATE(0x1d, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002080), 0x8100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xb31d, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f16], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000002080), 0x8100, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xb31d, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f16], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 11:48:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:05 executing program 5: getresuid(&(0x7f0000000040), &(0x7f0000000080), 0x0) 11:48:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x8001}, 0x48) 11:48:06 executing program 4: mq_open(0x0, 0x0, 0x0, &(0x7f0000000080)) 11:48:06 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 557.278733][T15426] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 557.318527][T15436] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:06 executing program 2: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 11:48:06 executing program 5: syz_io_uring_setup(0x3c53, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 11:48:06 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 557.574986][ T5164] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 557.825075][ T5164] usb 4-1: Using ep0 maxpacket: 8 [ 557.945326][ T5164] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 557.954410][ T5164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.965857][ T5164] usb 4-1: config 0 descriptor?? [ 558.007519][ T5164] pwc: Philips PCA645VC USB webcam detected. [ 558.445194][ T5164] pwc: recv_control_msg error -71 req 02 val 2b00 [ 558.465133][ T5164] pwc: recv_control_msg error -71 req 02 val 2700 [ 558.485094][ T5164] pwc: recv_control_msg error -71 req 02 val 2c00 [ 558.505106][ T5164] pwc: recv_control_msg error -71 req 04 val 1000 [ 558.525073][ T5164] pwc: recv_control_msg error -71 req 04 val 1300 [ 558.545140][ T5164] pwc: recv_control_msg error -71 req 04 val 1400 [ 558.565074][ T5164] pwc: recv_control_msg error -71 req 02 val 2000 [ 558.585049][ T5164] pwc: recv_control_msg error -71 req 02 val 2100 [ 558.605008][ T5164] pwc: recv_control_msg error -71 req 04 val 1500 [ 558.627647][ T5164] pwc: recv_control_msg error -71 req 02 val 2500 [ 558.645086][ T5164] pwc: recv_control_msg error -71 req 02 val 2400 [ 558.665067][ T5164] pwc: recv_control_msg error -71 req 02 val 2600 [ 558.685060][ T5164] pwc: recv_control_msg error -71 req 02 val 2900 [ 558.709944][ T5164] pwc: recv_control_msg error -71 req 02 val 2800 [ 558.738042][ T5164] pwc: recv_control_msg error -71 req 04 val 1100 [ 558.755069][ T5164] pwc: recv_control_msg error -71 req 04 val 1200 [ 558.762165][ T5164] pwc: Registered as video71. [ 558.768417][ T5164] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 558.780584][ T5164] usb 4-1: USB disconnect, device number 17 11:48:07 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:07 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:07 executing program 5: r0 = eventfd(0x1004) write$eventfd(r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x8) write$eventfd(r0, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) read$eventfd(r0, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 11:48:07 executing program 2: syz_mount_image$affs(0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[{&(0x7f0000000100)="90", 0x1}, {&(0x7f0000000140)="ee", 0x1, 0x8970}, {&(0x7f0000000280)="e8", 0x1}, {&(0x7f0000000340)='5', 0x1}, {0x0}], 0x0, 0x0) 11:48:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000002080), 0x8100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000020c0)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xb31d, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f16], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 558.964696][T15459] loop2: detected capacity change from 0 to 137 11:48:07 executing program 4: bpf$MAP_CREATE(0x16, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:07 executing program 2: getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 11:48:07 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) 11:48:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8275, 0x0, @perf_config_ext={0x4e741c7c, 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:08 executing program 2: syz_mount_image$affs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:48:08 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100088}, 0x20) 11:48:08 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:08 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) fsopen(0x0, 0x1) socket$pppoe(0x18, 0x1, 0x0) 11:48:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8275, 0x0, @perf_config_ext={0x4e741c7c, 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:08 executing program 4: bpf$MAP_CREATE(0x21, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:08 executing program 5: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') 11:48:08 executing program 2: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) 11:48:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/sco\x00') 11:48:08 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 11:48:08 executing program 5: syz_io_uring_setup(0x1fc0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000d4f000/0x1000)=nil, 0x0, 0x0) 11:48:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') close$fd_v4l2_buffer(r0) 11:48:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8275, 0x0, @perf_config_ext={0x4e741c7c, 0x8}, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:09 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:09 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_vif\x00') 11:48:09 executing program 2: socketpair(0x3, 0x0, 0x0, &(0x7f00000001c0)) 11:48:09 executing program 5: socketpair(0x1d, 0x0, 0x2, &(0x7f00000001c0)) 11:48:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002080)={0x1, 0x3, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:09 executing program 5: syz_mount_image$affs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 11:48:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "f1ba9a17c53f12c4", "05800d6ddd5d9c626aa17decdb74767d3c061344a3663182e322da4aa89a2b17", "dc799751", "f92a8e8062b23f1c"}, 0x38) 11:48:09 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x6d2edd41b635c330, 0xffffffffffffffff, 0x8000000) 11:48:09 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:09 executing program 5: pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), 0x0) 11:48:09 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f00000013c0)=[{0x0, 0x0, 0x6ec0}, {&(0x7f0000000280)="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", 0x1cf, 0x5}]) 11:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:09 executing program 2: bpf$BPF_GET_MAP_INFO(0x11, 0x0, 0x0) 11:48:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002080)={0x1, 0x3, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:09 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) [ 560.940994][T15543] loop4: detected capacity change from 0 to 110 11:48:09 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x442, 0x0, 0x12}, 0x18) 11:48:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:09 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind(r0, 0x0, 0xfffffffffffffeaf) 11:48:09 executing program 4: syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) fsopen(0x0, 0x0) 11:48:09 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000), 0x1e) 11:48:10 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002080)={0x1, 0x3, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000300), 0x4) 11:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:10 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f00000005c0)) 11:48:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0}}, 0x48) 11:48:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:10 executing program 5: fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) 11:48:10 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) 11:48:10 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@local}, @my=0x1, 0x1, 0x0, 0x1, 0x0, 0x9}) 11:48:10 executing program 5: syz_io_uring_setup(0x1fc0, &(0x7f0000000080), &(0x7f0000800000/0x800000)=nil, &(0x7f0000d4f000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 11:48:10 executing program 3: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002100)=[@text64={0x40, &(0x7f0000002080)="46afc7442400a7000000c74424020d000000ff2c243e2e67420f78b0bb122509c4411d73d204f30f1ecc0f32c481557cb476f7ff000066baf80cb80cdc518cef66bafc0c66ed66b81c018ee866baf80cb868516782ef66bafc0cb879ffffffef", 0x60}], 0x1, 0x4, &(0x7f0000002140)=[@cr0={0x0, 0x8001002c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$audion(&(0x7f0000002180), 0x1ff, 0x10000) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000021c0)={0x10000, 0x9}) 11:48:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:10 executing program 4: syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0xffffffffffffffff) 11:48:10 executing program 2: clock_settime(0x2c31bb425567ff55, 0x0) 11:48:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') 11:48:10 executing program 4: bpf$BPF_GET_MAP_INFO(0x22, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:48:11 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x101840) 11:48:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:48:11 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002100)=[@text64={0x40, &(0x7f0000002080)="46afc7442400a7000000c74424020d000000ff2c243e2e67420f78b0bb122509c4411d73d204f30f1ecc0f32c481557cb476f7ff000066baf80cb80cdc518cef66bafc0c66ed66b81c018ee866baf80cb868516782ef66bafc0cb879ffffffef", 0x60}], 0x1, 0x4, &(0x7f0000002140)=[@cr0={0x0, 0x8001002c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$audion(&(0x7f0000002180), 0x1ff, 0x10000) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000021c0)={0x10000, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002100)=[@text64={0x40, &(0x7f0000002080)="46afc7442400a7000000c74424020d000000ff2c243e2e67420f78b0bb122509c4411d73d204f30f1ecc0f32c481557cb476f7ff000066baf80cb80cdc518cef66bafc0c66ed66b81c018ee866baf80cb868516782ef66bafc0cb879ffffffef", 0x60}], 0x1, 0x4, &(0x7f0000002140)=[@cr0={0x0, 0x8001002c}], 0x1) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_open_dev$audion(&(0x7f0000002180), 0x1ff, 0x10000) (async) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000021c0)={0x10000, 0x9}) (async) 11:48:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') write$midi(r0, 0x0, 0x0) 11:48:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x0, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') accept4$netrom(r0, 0x0, 0x0, 0x0) 11:48:11 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "f1ba9a17c53f12c4", "05800d6ddd5d9c626aa17decdb74767d3c061344a3663182e322da4aa89a2b17", "dc799751", "f92a8e8062b23f1c"}, 0x38) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 11:48:11 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}) 11:48:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002100)=[@text64={0x40, &(0x7f0000002080)="46afc7442400a7000000c74424020d000000ff2c243e2e67420f78b0bb122509c4411d73d204f30f1ecc0f32c481557cb476f7ff000066baf80cb80cdc518cef66bafc0c66ed66b81c018ee866baf80cb868516782ef66bafc0cb879ffffffef", 0x60}], 0x1, 0x4, &(0x7f0000002140)=[@cr0={0x0, 0x8001002c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$audion(&(0x7f0000002180), 0x1ff, 0x10000) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000021c0)={0x10000, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002100)=[@text64={0x40, &(0x7f0000002080)="46afc7442400a7000000c74424020d000000ff2c243e2e67420f78b0bb122509c4411d73d204f30f1ecc0f32c481557cb476f7ff000066baf80cb80cdc518cef66bafc0c66ed66b81c018ee866baf80cb868516782ef66bafc0cb879ffffffef", 0x60}], 0x1, 0x4, &(0x7f0000002140)=[@cr0={0x0, 0x8001002c}], 0x1) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_open_dev$audion(&(0x7f0000002180), 0x1ff, 0x10000) (async) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f00000021c0)={0x10000, 0x9}) (async) [ 562.626021][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 11:48:11 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 11:48:11 executing program 2: socketpair$tipc(0x1e, 0xf9ce2cdbc4ccba79, 0x0, 0x0) 11:48:11 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:11 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 11:48:11 executing program 4: ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) 11:48:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) readv(r0, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2) [ 563.015111][ T8615] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 563.245066][ T8615] usb 4-1: device descriptor read/64, error 18 [ 563.514991][ T8615] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 563.714971][ T8615] usb 4-1: device descriptor read/64, error 18 [ 563.835215][ T8615] usb usb4-port1: attempt power cycle [ 564.265026][ T8615] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 564.365242][ T8615] usb 4-1: Invalid ep0 maxpacket: 0 [ 564.515004][ T8615] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 564.605100][ T8615] usb 4-1: Invalid ep0 maxpacket: 0 [ 564.610599][ T8615] usb usb4-port1: unable to enumerate USB device 11:48:14 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) connect$tipc(r0, &(0x7f0000000640), 0x10) 11:48:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:14 executing program 5: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0xa040, 0x0) 11:48:14 executing program 2: syz_read_part_table(0x0, 0x3, &(0x7f0000000480)=[{0x0}, {}, {0x0, 0x0, 0x7ff}]) 11:48:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x0, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:14 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') [ 565.765217][T15673] loop2: detected capacity change from 0 to 7 11:48:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r2, 0x8cbdc66f99df3bb, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 11:48:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 565.858844][ T8832] Dev loop2: unable to read RDB block 7 [ 565.875463][ T8832] loop2: unable to read partition table 11:48:14 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 11:48:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') mq_notify(r0, &(0x7f0000000380)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) [ 565.910516][ T8832] loop2: partition table beyond EOD, truncated [ 565.938803][T15673] Dev loop2: unable to read RDB block 7 11:48:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) [ 565.975275][T15673] loop2: unable to read partition table [ 566.005407][T15673] loop2: partition table beyond EOD, truncated [ 566.023304][T15673] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 11:48:14 executing program 5: bpf$BPF_GET_MAP_INFO(0x1b, 0x0, 0x0) [ 566.095211][ T5164] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 566.305043][ T5164] usb 4-1: device descriptor read/64, error 18 [ 566.574991][ T5164] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 566.765005][ T5164] usb 4-1: device descriptor read/64, error 18 [ 566.885249][ T5164] usb usb4-port1: attempt power cycle [ 567.304968][ T5164] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 567.395191][ T5164] usb 4-1: Invalid ep0 maxpacket: 0 [ 567.545031][ T5164] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 567.635198][ T5164] usb 4-1: Invalid ep0 maxpacket: 0 [ 567.640718][ T5164] usb usb4-port1: unable to enumerate USB device 11:48:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x0, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:17 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 11:48:17 executing program 2: fsopen(0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11:48:17 executing program 5: fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x0) 11:48:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:17 executing program 2: syz_open_dev$hiddev(&(0x7f00000004c0), 0x0, 0x791c00) 11:48:17 executing program 5: bpf$BPF_GET_MAP_INFO(0x13, 0x0, 0x0) 11:48:17 executing program 4: r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11:48:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:17 executing program 2: read$midi(0xffffffffffffffff, 0x0, 0x0) 11:48:17 executing program 5: bpf$BPF_GET_MAP_INFO(0x9, 0x0, 0x0) [ 569.294991][ T5164] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 569.505939][ T5164] usb 4-1: device descriptor read/64, error 18 [ 569.774968][ T5164] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 569.985015][ T5164] usb 4-1: device descriptor read/64, error 18 [ 570.105151][ T5164] usb usb4-port1: attempt power cycle [ 570.515060][ T5164] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 570.605201][ T5164] usb 4-1: Invalid ep0 maxpacket: 0 [ 570.755023][ T5164] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 570.845974][ T5164] usb 4-1: Invalid ep0 maxpacket: 0 [ 570.851382][ T5164] usb usb4-port1: unable to enumerate USB device 11:48:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:20 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 11:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:20 executing program 5: bpf$MAP_CREATE(0x5, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:20 executing program 2: syz_open_dev$usbmon(&(0x7f00000001c0), 0x100, 0x0) 11:48:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002080), 0xab40, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:20 executing program 4: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0}], 0x8, &(0x7f0000000600)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x35], 0x2d, [0x32], 0x2d, [0x0, 0x0, 0x37]}}}]}) 11:48:20 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 11:48:20 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 572.097691][T15748] affs: Unrecognized mount option "fsuuid=" or missing value 11:48:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000880)='net/xfrm_stat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x34e, 0x0, 0x0) r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:48:20 executing program 5: bpf$BPF_GET_MAP_INFO(0x10, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 572.159945][T15748] affs: Error parsing options [ 572.365102][ T20] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 572.625131][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 572.745144][ T20] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 572.754219][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.764219][ T20] usb 4-1: config 0 descriptor?? [ 572.828578][ T20] pwc: Philips PCA645VC USB webcam detected. [ 573.255022][ T20] pwc: recv_control_msg error -71 req 02 val 2b00 [ 573.275110][ T20] pwc: recv_control_msg error -71 req 02 val 2700 [ 573.295086][ T20] pwc: recv_control_msg error -71 req 02 val 2c00 [ 573.315039][ T20] pwc: recv_control_msg error -71 req 04 val 1000 [ 573.335166][ T20] pwc: recv_control_msg error -71 req 04 val 1300 [ 573.355012][ T20] pwc: recv_control_msg error -71 req 04 val 1400 [ 573.377393][ T20] pwc: recv_control_msg error -71 req 02 val 2000 [ 573.395058][ T20] pwc: recv_control_msg error -71 req 02 val 2100 [ 573.415037][ T20] pwc: recv_control_msg error -71 req 04 val 1500 [ 573.435020][ T20] pwc: recv_control_msg error -71 req 02 val 2500 [ 573.454984][ T20] pwc: recv_control_msg error -71 req 02 val 2400 [ 573.474968][ T20] pwc: recv_control_msg error -71 req 02 val 2600 [ 573.495036][ T20] pwc: recv_control_msg error -71 req 02 val 2900 [ 573.515113][ T20] pwc: recv_control_msg error -71 req 02 val 2800 [ 573.535091][ T20] pwc: recv_control_msg error -71 req 04 val 1100 [ 573.555040][ T20] pwc: recv_control_msg error -71 req 04 val 1200 [ 573.563288][ T20] pwc: Registered as video71. [ 573.569107][ T20] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input42 [ 573.582929][ T20] usb 4-1: USB disconnect, device number 30 11:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002080), 0xab40, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:22 executing program 4: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f0000000540)=[{&(0x7f0000000100)="902d6bc5181662b246237f2776dc923e951fe6ad", 0x14, 0x3}, {&(0x7f0000000280)="e8c338eb371b646707661a2f54214874312a063cc4e90b660b7066aca9f1176e13479ad42de429272c2bc6faf541ea1bcc98cbf40712010cd66ca5bfb5e0cd1dce2cc4fcc1d66380473dfe38dea9f9a624c4e433d8de058a3983dc745c22fc156f873c2b3a0abccaede2b43bffe053f695e1abd0f44f2a7dd211ccd2c96390ba4c3c8bb566adc8ed44b6ecc778172772eb1c7176bd63db9a3df0234c61d351fee5ce3b8ee1eda1af86bfcf77146fc25bb7895cfdbf11b7a52bf6bf671f22", 0xbe, 0x4}, {&(0x7f0000000340)}, {&(0x7f0000000440), 0x0, 0x5}, {&(0x7f0000000500)="e1d41c1cf55d5e38ca1da5b1015472099df155650921268b2242dddef0995d", 0x1f, 0x8001}], 0x8, &(0x7f0000000600)={[{')/@+!'}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x37, 0x39, 0x52, 0x32, 0x0, 0x35], 0x2d, [0x32, 0x62, 0x30, 0x64], 0x2d, [0x39, 0x32, 0x37, 0x36], 0x2d, [0x62, 0x36, 0x39, 0x62], 0x2d, [0x31, 0x0, 0x64, 0x39, 0x64, 0x37, 0x65, 0x38]}}}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 11:48:22 executing program 5: socketpair(0x9, 0x0, 0x0, &(0x7f0000000440)) 11:48:22 executing program 2: socketpair(0x28, 0x0, 0x9, &(0x7f0000000400)) 11:48:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) [ 573.788295][T15765] loop4: detected capacity change from 0 to 128 11:48:22 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 11:48:22 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 11:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 573.898041][T15765] affs: Unrecognized mount option ")/@+!" or missing value [ 573.925938][T15765] affs: Error parsing options 11:48:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:48:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002080), 0xab40, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 11:48:22 executing program 5: r0 = io_uring_setup(0x6352, &(0x7f0000000140)) fdatasync(r0) 11:48:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$vhost_msg(r0, 0x0, 0x0) [ 574.105050][ T3688] usb 4-1: new high-speed USB device number 31 using dummy_hcd 11:48:22 executing program 4: syz_read_part_table(0x7, 0x6, &(0x7f0000000480)=[{&(0x7f0000000100)="c77e7efadb982cf6fce1d3a1464d43299dd11ea274f298854a64733deab992cefc641885352343a470dec20ea5d416bcd84379e6756c87b969921c61265e0e54e44b97b577cbfd09b6d22b44f291624c927710d8d6621af66b50c22d4576b2312bb93e23abb904d6a1420cbfcebe04d2936f856b4cfa02084136c685", 0x7c}, {&(0x7f0000000200), 0x0, 0x7}, {&(0x7f0000000000)="92d1af69572b613a89408ff389c333370a6d5a4a0185d9131cede98ccc0bf1f8f6d917e8ff0bec8b2f3757eebb6656d4b4e810c1", 0x34}, {&(0x7f0000000300)="1064a7ec239ebaa04c41b27ae1a0c1b1aab3c6b3424113cb5a83c322a770c4df46edd5ab412ace211dc2e33606c5a0c247b2dffa4601d4e1a61a0d358e3527eb1ee6d20dcd03be4b96c87a74129da828ea30f1978728b1212325446b3d1c079ea43e6d758712ea76d826a23ce020d68e132f17ef0ca07034fd0332aad715f6c710763396449b36f2a434760b7d2edf80ec1d93ed1bcb330aa98840504f26c5109ad2f265e12ec18632e238102fdd", 0xae, 0x7ff}, {&(0x7f0000000040), 0x0, 0x80000001}, {0x0}]) 11:48:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_vif\x00') read$midi(r0, 0x0, 0x0) [ 574.289445][T15801] loop4: detected capacity change from 0 to 264192 [ 574.375079][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 574.433527][ T8832] I/O error, dev loop4, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 574.505259][ T3688] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 574.514343][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.531094][ T3688] usb 4-1: config 0 descriptor?? [ 574.577104][ T3688] pwc: Philips PCA645VC USB webcam detected. [ 575.015106][ T3688] pwc: recv_control_msg error -71 req 02 val 2b00 [ 575.035152][ T3688] pwc: recv_control_msg error -71 req 02 val 2700 [ 575.055110][ T3688] pwc: recv_control_msg error -71 req 02 val 2c00 [ 575.075079][ T3688] pwc: recv_control_msg error -71 req 04 val 1000 [ 575.095383][ T3688] pwc: recv_control_msg error -71 req 04 val 1300 [ 575.115036][ T3688] pwc: recv_control_msg error -71 req 04 val 1400 [ 575.135116][ T3688] pwc: recv_control_msg error -71 req 02 val 2000 [ 575.156356][ T3688] pwc: recv_control_msg error -71 req 02 val 2100 [ 575.175099][ T3688] pwc: recv_control_msg error -71 req 04 val 1500 [ 575.195047][ T3688] pwc: recv_control_msg error -71 req 02 val 2500 [ 575.215042][ T3688] pwc: recv_control_msg error -71 req 02 val 2400 [ 575.235076][ T3688] pwc: recv_control_msg error -71 req 02 val 2600 [ 575.255077][ T3688] pwc: recv_control_msg error -71 req 02 val 2900 [ 575.275159][ T3688] pwc: recv_control_msg error -71 req 02 val 2800 [ 575.305029][ T3688] pwc: recv_control_msg error -71 req 04 val 1100 [ 575.325078][ T3688] pwc: recv_control_msg error -71 req 04 val 1200 [ 575.339767][ T3688] pwc: Registered as video71. [ 575.365056][ T3688] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 575.400126][ T3688] usb 4-1: USB disconnect, device number 31 11:48:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:24 executing program 2: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 11:48:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:24 executing program 5: syz_io_uring_setup(0x3c53, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x10c1, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 11:48:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(r3, &(0x7f0000002080)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:24 executing program 2: syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) 11:48:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r0, &(0x7f000000cd00)=[{{&(0x7f0000004580)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, 0x0, 0x0, &(0x7f0000004c80)=[{0x28, 0x0, 0x0, "200d47cd9dbc7677ce649390a4e0214e45"}], 0x28}}], 0x1, 0x0) 11:48:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:24 executing program 2: syz_io_uring_setup(0x532e, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 11:48:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 576.045038][ T3688] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 576.285090][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 576.425103][ T3688] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 576.439054][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.452125][ T3688] usb 4-1: config 0 descriptor?? [ 576.497406][ T3688] pwc: Philips PCA645VC USB webcam detected. [ 576.935145][ T3688] pwc: recv_control_msg error -71 req 02 val 2b00 [ 576.955093][ T3688] pwc: recv_control_msg error -71 req 02 val 2700 [ 576.975080][ T3688] pwc: recv_control_msg error -71 req 02 val 2c00 [ 576.995083][ T3688] pwc: recv_control_msg error -71 req 04 val 1000 [ 577.017199][ T3688] pwc: recv_control_msg error -71 req 04 val 1300 [ 577.037082][ T3688] pwc: recv_control_msg error -71 req 04 val 1400 [ 577.055045][ T3688] pwc: recv_control_msg error -71 req 02 val 2000 [ 577.077251][ T3688] pwc: recv_control_msg error -71 req 02 val 2100 [ 577.095053][ T3688] pwc: recv_control_msg error -71 req 04 val 1500 [ 577.115025][ T3688] pwc: recv_control_msg error -71 req 02 val 2500 [ 577.135103][ T3688] pwc: recv_control_msg error -71 req 02 val 2400 [ 577.155015][ T3688] pwc: recv_control_msg error -71 req 02 val 2600 [ 577.175091][ T3688] pwc: recv_control_msg error -71 req 02 val 2900 [ 577.195102][ T3688] pwc: recv_control_msg error -71 req 02 val 2800 [ 577.217873][ T3688] pwc: recv_control_msg error -71 req 04 val 1100 [ 577.237824][ T3688] pwc: recv_control_msg error -71 req 04 val 1200 [ 577.245811][ T3688] pwc: Registered as video71. [ 577.251221][ T3688] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 577.284443][ T3688] usb 4-1: USB disconnect, device number 32 11:48:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(r3, &(0x7f0000002080)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async) syz_open_procfs(r3, &(0x7f0000002080)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 11:48:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:26 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') 11:48:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 11:48:26 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000) 11:48:26 executing program 2: fsopen(&(0x7f0000000040)='sysv\x00', 0x0) 11:48:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) [ 577.848500][ T5160] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 578.125043][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 578.285342][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 578.294628][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.311007][ T5160] usb 4-1: config 0 descriptor?? [ 578.361974][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 578.785058][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 578.805187][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 578.825032][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 578.845067][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 578.865141][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 578.885060][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 578.905060][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 578.925082][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 578.945051][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 578.965114][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 578.987171][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 579.005048][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 579.025103][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 579.045049][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 579.065015][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 579.085042][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 579.102569][ T5160] pwc: Registered as video71. [ 579.109652][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 579.124422][ T5160] usb 4-1: USB disconnect, device number 33 11:48:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:28 executing program 2: bpf$MAP_CREATE(0x15, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 11:48:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async) r4 = syz_open_procfs(r3, &(0x7f0000002080)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:28 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11:48:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:28 executing program 2: connect$netrom(0xffffffffffffffff, 0x0, 0x0) 11:48:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x100000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 579.635197][ T5160] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 579.885029][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 580.005118][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 580.014463][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.025287][ T5160] usb 4-1: config 0 descriptor?? [ 580.067713][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 580.505136][ T5160] pwc: recv_control_msg error -71 req 02 val 2b00 [ 580.525126][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 580.545564][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 580.575040][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 580.597504][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 580.615074][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 580.643540][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 580.665112][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 580.695120][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 580.716445][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 580.735041][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 580.755245][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 580.775183][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 580.795147][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 580.815058][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 580.835015][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 580.842503][ T5160] pwc: Registered as video71. [ 580.848449][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 580.860440][ T5160] usb 4-1: USB disconnect, device number 34 11:48:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:29 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 11:48:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x100000, 0x100000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:29 executing program 2: syz_io_uring_setup(0x2e9e, &(0x7f0000000200), &(0x7f0000b53000/0x3000)=nil, &(0x7f00007fe000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 11:48:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:30 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="902d6bc5181662b246237f2776dc923e951fe6adb29b4cdec000", 0x1a, 0x3}, {&(0x7f0000000140)="ee5aa4dba8dbd609089ecdd145a77993f27f4108c347a198424b28a3f3a5ca4dbab2ebe7bc2944acf2021f3439595baa40ac10bd31c8bdcf1c508522ab25106f0ba188b7159485c2169cf4b302869380cff0fdf7aac0140873106452d61d60be057bf248407f2440fd3d83622444", 0x6e, 0x8970}, {&(0x7f0000000280)="e8c338eb371b646707661a2f54214874312a063cc4e90b660b7066aca9f1176e13479ad42de429272c2bc6faf541ea1bcc98cbf40712010cd66ca5bfb5e0cd1dce2cc4fcc1d66380473dfe38dea9f9a624c4e433d8de058a3983dc745c22fc156f873c2b3a0abccaede2b43bffe053f695e1abd0f44f2a7dd211ccd2c96390ba4c3c8bb566adc8ed44b6ecc778172772eb1c7176bd63db9a3df0234c61d351fee5ce3b8ee1eda1af86bfcf77", 0xac}, {&(0x7f0000000340)="35583aee904949e5054e4c5f8569ba1ae14e20700c036af75c696498c24da060daba63baf3d0d1b87d91c9b6cc352c3d182ed2f90af4c323b3795534453bc87b74bfb88ec07e8bd00613a1afdf1d45e58e06fefdbedf8b235bd0f456869cf9a8f407277bbcd65712a05a6ffa073cdfcc39", 0x71, 0x37}, {&(0x7f0000000440)="22448d47ce81612ea972ce6167b96097654e5c53a9b871fc9e62553a6c5921418041fa1614758e46166bb74e1865368b71f78596d8c5bc6a05350591c68193501d661e56ce7051d7b20d7b08d945c8e2e4a0d32df331b90b7712782e34c16037db79787170979e062315af99157c2cd9e80c166d26f7983a9c184cd7210c58c0c6830952a90fe54a34470a803a929f821ab86a1852fda4df4cf289e406", 0x9d, 0x5}, {&(0x7f0000000500), 0x0, 0x8001}], 0x8, &(0x7f0000000600)={[{')/@+!'}], [{@subj_role={'subj_role', 0x3d, '\x00'}}]}) 11:48:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x100000, 0x100000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) [ 581.343935][T15919] loop2: detected capacity change from 0 to 137 [ 581.360492][T15919] affs: Unrecognized mount option ")/@+!" or missing value [ 581.375212][ T3688] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 581.380366][T15919] affs: Error parsing options [ 581.515707][ T8832] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 581.654975][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 581.795120][ T3688] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 581.804304][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.815594][ T3688] usb 4-1: config 0 descriptor?? [ 581.867468][ T3688] pwc: Philips PCA645VC USB webcam detected. [ 582.305145][ T3688] pwc: recv_control_msg error -71 req 02 val 2b00 [ 582.325173][ T3688] pwc: recv_control_msg error -71 req 02 val 2700 [ 582.345025][ T3688] pwc: recv_control_msg error -71 req 02 val 2c00 [ 582.375489][ T3688] pwc: recv_control_msg error -71 req 04 val 1000 [ 582.395913][ T3688] pwc: recv_control_msg error -71 req 04 val 1300 [ 582.414995][ T3688] pwc: recv_control_msg error -71 req 04 val 1400 [ 582.435064][ T3688] pwc: recv_control_msg error -71 req 02 val 2000 [ 582.454997][ T3688] pwc: recv_control_msg error -71 req 02 val 2100 [ 582.475005][ T3688] pwc: recv_control_msg error -71 req 04 val 1500 [ 582.495410][ T3688] pwc: recv_control_msg error -71 req 02 val 2500 [ 582.515000][ T3688] pwc: recv_control_msg error -71 req 02 val 2400 [ 582.535085][ T3688] pwc: recv_control_msg error -71 req 02 val 2600 [ 582.555055][ T3688] pwc: recv_control_msg error -71 req 02 val 2900 [ 582.575005][ T3688] pwc: recv_control_msg error -71 req 02 val 2800 [ 582.595431][ T3688] pwc: recv_control_msg error -71 req 04 val 1100 [ 582.615909][ T3688] pwc: recv_control_msg error -71 req 04 val 1200 [ 582.623021][ T3688] pwc: Registered as video71. [ 582.633251][ T3688] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 582.651230][ T3688] usb 4-1: USB disconnect, device number 35 11:48:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:48:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:31 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:31 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 11:48:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x4, 0x0, 0x2000000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0xab, 0x8, 0x7, 0x4, 0x81, 0x7, 0x9, 0x68, 0x2, 0x80, 0x6, 0x2, 0x8001, 0x1000, 0x1, 0x3ff], 0x2000, 0x201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000002140)={'\x00', 0x1, 0x0, 0x70, 0x0, 0x2, 0x3000, 0x1000, '\x00', 0x100}) 11:48:31 executing program 2: socket$pppoe(0x18, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 11:48:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:31 executing program 2: syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x5a92, &(0x7f0000000300), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 11:48:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:31 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 583.296795][ T8615] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 583.564973][ T8615] usb 4-1: Using ep0 maxpacket: 8 [ 583.685136][ T8615] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 583.694301][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.707000][ T8615] usb 4-1: config 0 descriptor?? [ 583.759001][ T8615] pwc: Philips PCA645VC USB webcam detected. [ 584.185159][ T8615] pwc: recv_control_msg error -71 req 02 val 2b00 [ 584.206438][ T8615] pwc: recv_control_msg error -71 req 02 val 2700 [ 584.225555][ T8615] pwc: recv_control_msg error -71 req 02 val 2c00 [ 584.255058][ T8615] pwc: recv_control_msg error -71 req 04 val 1000 [ 584.275128][ T8615] pwc: recv_control_msg error -71 req 04 val 1300 [ 584.295824][ T8615] pwc: recv_control_msg error -71 req 04 val 1400 [ 584.325872][ T8615] pwc: recv_control_msg error -71 req 02 val 2000 [ 584.365084][ T8615] pwc: recv_control_msg error -71 req 02 val 2100 [ 584.385196][ T8615] pwc: recv_control_msg error -71 req 04 val 1500 [ 584.417418][ T8615] pwc: recv_control_msg error -71 req 02 val 2500 [ 584.446220][ T8615] pwc: recv_control_msg error -71 req 02 val 2400 [ 584.469611][ T8615] pwc: recv_control_msg error -71 req 02 val 2600 [ 584.495106][ T8615] pwc: recv_control_msg error -71 req 02 val 2900 [ 584.516026][ T8615] pwc: recv_control_msg error -71 req 02 val 2800 [ 584.535015][ T8615] pwc: recv_control_msg error -71 req 04 val 1100 [ 584.555733][ T8615] pwc: recv_control_msg error -71 req 04 val 1200 [ 584.562816][ T8615] pwc: Registered as video71. [ 584.569176][ T8615] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 584.595844][ T8615] usb 4-1: USB disconnect, device number 36 11:48:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:48:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x4, 0x0, 0x2000000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0xab, 0x8, 0x7, 0x4, 0x81, 0x7, 0x9, 0x68, 0x2, 0x80, 0x6, 0x2, 0x8001, 0x1000, 0x1, 0x3ff], 0x2000, 0x201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000002140)={'\x00', 0x1, 0x0, 0x70, 0x0, 0x2, 0x3000, 0x1000, '\x00', 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x4, 0x0, 0x2000000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0xab, 0x8, 0x7, 0x4, 0x81, 0x7, 0x9, 0x68, 0x2, 0x80, 0x6, 0x2, 0x8001, 0x1000, 0x1, 0x3ff], 0x2000, 0x201}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000002140)={'\x00', 0x1, 0x0, 0x70, 0x0, 0x2, 0x3000, 0x1000, '\x00', 0x100}) (async) 11:48:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:33 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11:48:33 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) read$hiddev(r0, 0x0, 0x0) 11:48:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:33 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11:48:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x2, &(0x7f00000000c0)='@\x00', 0x0, 0xffffffffffffff9c) 11:48:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:33 executing program 2: syz_io_uring_setup(0x169c, &(0x7f0000000000)={0x0, 0xf88b, 0x8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:48:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) [ 585.215062][ T8615] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 585.465139][ T8615] usb 4-1: Using ep0 maxpacket: 8 [ 585.585251][ T8615] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 585.594354][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.608925][ T8615] usb 4-1: config 0 descriptor?? [ 585.646545][ T8615] pwc: Philips PCA645VC USB webcam detected. [ 586.075083][ T8615] pwc: recv_control_msg error -71 req 02 val 2b00 [ 586.095955][ T8615] pwc: recv_control_msg error -71 req 02 val 2700 [ 586.115544][ T8615] pwc: recv_control_msg error -71 req 02 val 2c00 [ 586.135187][ T8615] pwc: recv_control_msg error -71 req 04 val 1000 [ 586.156491][ T8615] pwc: recv_control_msg error -71 req 04 val 1300 [ 586.175046][ T8615] pwc: recv_control_msg error -71 req 04 val 1400 [ 586.195083][ T8615] pwc: recv_control_msg error -71 req 02 val 2000 [ 586.215129][ T8615] pwc: recv_control_msg error -71 req 02 val 2100 [ 586.235221][ T8615] pwc: recv_control_msg error -71 req 04 val 1500 [ 586.255059][ T8615] pwc: recv_control_msg error -71 req 02 val 2500 [ 586.275032][ T8615] pwc: recv_control_msg error -71 req 02 val 2400 [ 586.295108][ T8615] pwc: recv_control_msg error -71 req 02 val 2600 [ 586.315887][ T8615] pwc: recv_control_msg error -71 req 02 val 2900 [ 586.335582][ T8615] pwc: recv_control_msg error -71 req 02 val 2800 [ 586.355008][ T8615] pwc: recv_control_msg error -71 req 04 val 1100 [ 586.375008][ T8615] pwc: recv_control_msg error -71 req 04 val 1200 [ 586.389423][ T8615] pwc: Registered as video71. [ 586.404219][ T8615] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 586.428129][ T8615] usb 4-1: USB disconnect, device number 37 11:48:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x4, 0x0, 0x2000000000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002080)={[0xab, 0x8, 0x7, 0x4, 0x81, 0x7, 0x9, 0x68, 0x2, 0x80, 0x6, 0x2, 0x8001, 0x1000, 0x1, 0x3ff], 0x2000, 0x201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000002140)={'\x00', 0x1, 0x0, 0x70, 0x0, 0x2, 0x3000, 0x1000, '\x00', 0x100}) 11:48:35 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') 11:48:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:35 executing program 2: r0 = epoll_create1(0x0) signalfd(r0, &(0x7f0000000d80), 0x8) 11:48:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:35 executing program 2: syz_open_dev$usbmon(&(0x7f0000000140), 0x1, 0x0) 11:48:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) [ 587.005076][ T8615] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 587.255019][ T8615] usb 4-1: Using ep0 maxpacket: 8 [ 587.375112][ T8615] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 587.384513][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.402325][ T8615] usb 4-1: config 0 descriptor?? [ 587.446491][ T8615] pwc: Philips PCA645VC USB webcam detected. [ 587.875099][ T8615] pwc: recv_control_msg error -71 req 02 val 2b00 [ 587.895807][ T8615] pwc: recv_control_msg error -71 req 02 val 2700 [ 587.915044][ T8615] pwc: recv_control_msg error -71 req 02 val 2c00 [ 587.935032][ T8615] pwc: recv_control_msg error -71 req 04 val 1000 [ 587.955076][ T8615] pwc: recv_control_msg error -71 req 04 val 1300 [ 587.975072][ T8615] pwc: recv_control_msg error -71 req 04 val 1400 [ 587.996384][ T8615] pwc: recv_control_msg error -71 req 02 val 2000 [ 588.015072][ T8615] pwc: recv_control_msg error -71 req 02 val 2100 [ 588.035077][ T8615] pwc: recv_control_msg error -71 req 04 val 1500 [ 588.055102][ T8615] pwc: recv_control_msg error -71 req 02 val 2500 [ 588.075074][ T8615] pwc: recv_control_msg error -71 req 02 val 2400 [ 588.095892][ T8615] pwc: recv_control_msg error -71 req 02 val 2600 [ 588.115554][ T8615] pwc: recv_control_msg error -71 req 02 val 2900 [ 588.135062][ T8615] pwc: recv_control_msg error -71 req 02 val 2800 [ 588.155051][ T8615] pwc: recv_control_msg error -71 req 04 val 1100 [ 588.175024][ T8615] pwc: recv_control_msg error -71 req 04 val 1200 [ 588.182208][ T8615] pwc: Registered as video71. [ 588.188330][ T8615] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 588.207912][ T8615] usb 4-1: USB disconnect, device number 38 11:48:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100), 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:37 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='@\x00', 0x0, 0xffffffffffffff9c) 11:48:37 executing program 2: socketpair(0x10, 0x3, 0x3, &(0x7f0000000380)) 11:48:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) [ 588.736434][ T5163] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 588.985047][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 589.106738][ T5163] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 589.115881][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.134793][ T5163] usb 4-1: config 0 descriptor?? [ 589.182748][ T5163] pwc: Philips PCA645VC USB webcam detected. [ 589.615081][ T5163] pwc: recv_control_msg error -71 req 02 val 2b00 [ 589.635048][ T5163] pwc: recv_control_msg error -71 req 02 val 2700 [ 589.655151][ T5163] pwc: recv_control_msg error -71 req 02 val 2c00 [ 589.685067][ T5163] pwc: recv_control_msg error -71 req 04 val 1000 [ 589.705018][ T5163] pwc: recv_control_msg error -71 req 04 val 1300 [ 589.724984][ T5163] pwc: recv_control_msg error -71 req 04 val 1400 [ 589.744997][ T5163] pwc: recv_control_msg error -71 req 02 val 2000 [ 589.765031][ T5163] pwc: recv_control_msg error -71 req 02 val 2100 [ 589.785011][ T5163] pwc: recv_control_msg error -71 req 04 val 1500 [ 589.805101][ T5163] pwc: recv_control_msg error -71 req 02 val 2500 [ 589.828226][ T5163] pwc: recv_control_msg error -71 req 02 val 2400 [ 589.844971][ T5163] pwc: recv_control_msg error -71 req 02 val 2600 [ 589.866267][ T5163] pwc: recv_control_msg error -71 req 02 val 2900 [ 589.885119][ T5163] pwc: recv_control_msg error -71 req 02 val 2800 [ 589.905126][ T5163] pwc: recv_control_msg error -71 req 04 val 1100 [ 589.925021][ T5163] pwc: recv_control_msg error -71 req 04 val 1200 [ 589.939257][ T5163] pwc: Registered as video71. [ 589.954181][ T5163] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 589.977489][ T5163] usb 4-1: USB disconnect, device number 39 11:48:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:38 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') 11:48:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:38 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:39 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:39 executing program 2: pipe2$9p(0x0, 0x86000) 11:48:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) [ 590.495158][ T5163] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 590.735006][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 590.855304][ T5163] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 590.864737][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.875195][ T5163] usb 4-1: config 0 descriptor?? [ 590.917483][ T5163] pwc: Philips PCA645VC USB webcam detected. [ 591.355058][ T5163] pwc: recv_control_msg error -71 req 02 val 2b00 [ 591.375131][ T5163] pwc: recv_control_msg error -71 req 02 val 2700 [ 591.395117][ T5163] pwc: recv_control_msg error -71 req 02 val 2c00 [ 591.415053][ T5163] pwc: recv_control_msg error -71 req 04 val 1000 [ 591.447593][ T5163] pwc: recv_control_msg error -71 req 04 val 1300 [ 591.465034][ T5163] pwc: recv_control_msg error -71 req 04 val 1400 [ 591.485108][ T5163] pwc: recv_control_msg error -71 req 02 val 2000 [ 591.505181][ T5163] pwc: recv_control_msg error -71 req 02 val 2100 [ 591.525060][ T5163] pwc: recv_control_msg error -71 req 04 val 1500 [ 591.545113][ T5163] pwc: recv_control_msg error -71 req 02 val 2500 [ 591.565019][ T5163] pwc: recv_control_msg error -71 req 02 val 2400 [ 591.585148][ T5163] pwc: recv_control_msg error -71 req 02 val 2600 [ 591.605131][ T5163] pwc: recv_control_msg error -71 req 02 val 2900 [ 591.629722][ T5163] pwc: recv_control_msg error -71 req 02 val 2800 [ 591.655011][ T5163] pwc: recv_control_msg error -71 req 04 val 1100 [ 591.674999][ T5163] pwc: recv_control_msg error -71 req 04 val 1200 [ 591.682189][ T5163] pwc: Registered as video71. [ 591.688385][ T5163] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 591.716074][ T5163] usb 4-1: USB disconnect, device number 40 11:48:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 11:48:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000002080)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:40 executing program 2: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:48:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:48:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:48:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 592.205451][ T5163] usb 4-1: new high-speed USB device number 41 using dummy_hcd 11:48:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 592.455177][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 592.575246][ T5163] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 592.584472][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.594234][ T5163] usb 4-1: config 0 descriptor?? [ 592.637377][ T5163] pwc: Philips PCA645VC USB webcam detected. [ 593.075061][ T5163] pwc: recv_control_msg error -71 req 02 val 2b00 [ 593.096373][ T5163] pwc: recv_control_msg error -71 req 02 val 2700 [ 593.115110][ T5163] pwc: recv_control_msg error -71 req 02 val 2c00 [ 593.135039][ T5163] pwc: recv_control_msg error -71 req 04 val 1000 [ 593.155171][ T5163] pwc: recv_control_msg error -71 req 04 val 1300 [ 593.179076][ T5163] pwc: recv_control_msg error -71 req 04 val 1400 [ 593.206308][ T5163] pwc: recv_control_msg error -71 req 02 val 2000 [ 593.225039][ T5163] pwc: recv_control_msg error -71 req 02 val 2100 [ 593.245119][ T5163] pwc: recv_control_msg error -71 req 04 val 1500 [ 593.268082][ T5163] pwc: recv_control_msg error -71 req 02 val 2500 [ 593.285101][ T5163] pwc: recv_control_msg error -71 req 02 val 2400 [ 593.305047][ T5163] pwc: recv_control_msg error -71 req 02 val 2600 [ 593.325019][ T5163] pwc: recv_control_msg error -71 req 02 val 2900 [ 593.345095][ T5163] pwc: recv_control_msg error -71 req 02 val 2800 [ 593.365015][ T5163] pwc: recv_control_msg error -71 req 04 val 1100 [ 593.385107][ T5163] pwc: recv_control_msg error -71 req 04 val 1200 [ 593.393592][ T5163] pwc: Registered as video71. [ 593.399201][ T5163] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 593.411791][ T5163] usb 4-1: USB disconnect, device number 41 11:48:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940), 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:48:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='\afd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0048f0893b372f3d7353060a93caebd4bb8b8e264189a474d2e2409e30afea82e13ea9459afae597c8340e3f3a5c1912a01b7322"]) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_INIT(r4, &(0x7f0000002080)={0x50, 0x0, r6, {0x7, 0x23, 0x3, 0x80200, 0x7ff, 0x400, 0x9, 0x2d10842c}}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:42 executing program 2: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)) 11:48:42 executing program 2: bpf$BPF_GET_MAP_INFO(0xd, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:48:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11:48:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:42 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) 11:48:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 593.995010][ T5163] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 594.244979][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 594.365233][ T5163] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 594.374291][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.390623][ T5163] usb 4-1: config 0 descriptor?? [ 594.436931][ T5163] pwc: Philips PCA645VC USB webcam detected. [ 595.095053][ T5163] pwc: recv_control_msg error -71 req 02 val 2700 [ 595.115057][ T5163] pwc: recv_control_msg error -71 req 02 val 2c00 [ 595.135048][ T5163] pwc: recv_control_msg error -71 req 04 val 1000 [ 595.155044][ T5163] pwc: recv_control_msg error -71 req 04 val 1300 [ 595.175015][ T5163] pwc: recv_control_msg error -71 req 04 val 1400 [ 595.196839][ T5163] pwc: recv_control_msg error -71 req 02 val 2000 [ 595.215058][ T5163] pwc: recv_control_msg error -71 req 02 val 2100 [ 595.235093][ T5163] pwc: recv_control_msg error -71 req 04 val 1500 [ 595.255118][ T5163] pwc: recv_control_msg error -71 req 02 val 2500 [ 595.275067][ T5163] pwc: recv_control_msg error -71 req 02 val 2400 [ 595.297510][ T5163] pwc: recv_control_msg error -71 req 02 val 2600 [ 595.325405][ T5163] pwc: recv_control_msg error -71 req 02 val 2900 [ 595.345047][ T5163] pwc: recv_control_msg error -71 req 02 val 2800 [ 595.365107][ T5163] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.385009][ T5163] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.392844][ T5163] pwc: Registered as video71. [ 595.418620][ T5163] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 595.456257][ T5163] usb 4-1: USB disconnect, device number 42 11:48:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940), 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='\afd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0048f0893b372f3d7353060a93caebd4bb8b8e264189a474d2e2409e30afea82e13ea9459afae597c8340e3f3a5c1912a01b7322"]) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000002080)={0x50, 0x0, r6, {0x7, 0x23, 0x3, 0x80200, 0x7ff, 0x400, 0x9, 0x2d10842c}}, 0x50) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:44 executing program 2: fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) 11:48:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11:48:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:44 executing program 5: socket$inet6(0xa, 0x0, 0x34dfbbff) 11:48:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) bpf$ITER_CREATE(0x21, 0x0, 0x0) 11:48:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:44 executing program 5: socket$inet6(0xa, 0x5, 0x6) 11:48:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r5}) [ 596.025094][ T5163] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 596.274983][ T5163] usb 4-1: Using ep0 maxpacket: 8 [ 596.396939][ T5163] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 596.406334][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.416011][ T5163] usb 4-1: config 0 descriptor?? [ 596.460883][ T5163] pwc: Philips PCA645VC USB webcam detected. [ 597.105136][ T5163] pwc: recv_control_msg error -71 req 02 val 2700 [ 597.125104][ T5163] pwc: recv_control_msg error -71 req 02 val 2c00 [ 597.145054][ T5163] pwc: recv_control_msg error -71 req 04 val 1000 [ 597.165243][ T5163] pwc: recv_control_msg error -71 req 04 val 1300 [ 597.185237][ T5163] pwc: recv_control_msg error -71 req 04 val 1400 [ 597.205015][ T5163] pwc: recv_control_msg error -71 req 02 val 2000 [ 597.226249][ T5163] pwc: recv_control_msg error -71 req 02 val 2100 [ 597.245058][ T5163] pwc: recv_control_msg error -71 req 04 val 1500 [ 597.269759][ T5163] pwc: recv_control_msg error -71 req 02 val 2500 [ 597.295333][ T5163] pwc: recv_control_msg error -71 req 02 val 2400 [ 597.315030][ T5163] pwc: recv_control_msg error -71 req 02 val 2600 [ 597.337289][ T5163] pwc: recv_control_msg error -71 req 02 val 2900 [ 597.355099][ T5163] pwc: recv_control_msg error -71 req 02 val 2800 [ 597.375065][ T5163] pwc: recv_control_msg error -71 req 04 val 1100 [ 597.394984][ T5163] pwc: recv_control_msg error -71 req 04 val 1200 [ 597.402081][ T5163] pwc: Registered as video71. [ 597.412437][ T5163] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 597.425227][ T5163] usb 4-1: USB disconnect, device number 43 11:48:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940), 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x3, 0x1}}) 11:48:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r4, 0x0, 0xc) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='\afd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0048f0893b372f3d7353060a93caebd4bb8b8e264189a474d2e2409e30afea82e13ea9459afae597c8340e3f3a5c1912a01b7322"]) (async) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x22, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000002080)={0x50, 0x0, r6, {0x7, 0x23, 0x3, 0x80200, 0x7ff, 0x400, 0x9, 0x2d10842c}}, 0x50) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:46 executing program 2: fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 11:48:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='comm\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 11:48:46 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32]) 11:48:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') 11:48:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 597.734713][T16189] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:46 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, 0x0, 0x0) 11:48:46 executing program 5: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) [ 597.965164][ T8615] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 598.225129][ T8615] usb 4-1: Using ep0 maxpacket: 8 [ 598.365173][ T8615] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 598.374389][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.392949][ T8615] usb 4-1: config 0 descriptor?? [ 598.453408][ T8615] pwc: Philips PCA645VC USB webcam detected. [ 599.105095][ T8615] pwc: recv_control_msg error -71 req 02 val 2700 [ 599.135156][ T8615] pwc: recv_control_msg error -71 req 02 val 2c00 [ 599.155020][ T8615] pwc: recv_control_msg error -71 req 04 val 1000 [ 599.177301][ T8615] pwc: recv_control_msg error -71 req 04 val 1300 [ 599.195058][ T8615] pwc: recv_control_msg error -71 req 04 val 1400 [ 599.215046][ T8615] pwc: recv_control_msg error -71 req 02 val 2000 [ 599.235086][ T8615] pwc: recv_control_msg error -71 req 02 val 2100 [ 599.255107][ T8615] pwc: recv_control_msg error -71 req 04 val 1500 [ 599.275014][ T8615] pwc: recv_control_msg error -71 req 02 val 2500 [ 599.295094][ T8615] pwc: recv_control_msg error -71 req 02 val 2400 [ 599.315068][ T8615] pwc: recv_control_msg error -71 req 02 val 2600 [ 599.339217][ T8615] pwc: recv_control_msg error -71 req 02 val 2900 [ 599.375234][ T8615] pwc: recv_control_msg error -71 req 02 val 2800 [ 599.397302][ T8615] pwc: recv_control_msg error -71 req 04 val 1100 [ 599.425051][ T8615] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.440283][ T8615] pwc: Registered as video71. [ 599.447192][ T8615] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 599.460699][ T8615] usb 4-1: USB disconnect, device number 44 11:48:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) 11:48:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002080)={'wg0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:48 executing program 5: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:48:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/prev\x00') inotify_add_watch(r0, 0x0, 0x14000880) 11:48:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'vxcan1\x00'}}, 0x1e) 11:48:48 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:48 executing program 2: r0 = fsopen(&(0x7f0000000140)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\'@*){\x00', &(0x7f0000000040)='@:\x00', 0x0) 11:48:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002080)={'wg0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:48 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 600.074979][ T8615] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 600.345048][ T8615] usb 4-1: Using ep0 maxpacket: 8 [ 600.475171][ T8615] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 600.484463][ T8615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.495164][ T8615] usb 4-1: config 0 descriptor?? [ 600.547544][ T8615] pwc: Philips PCA645VC USB webcam detected. [ 601.195125][ T8615] pwc: recv_control_msg error -71 req 02 val 2700 [ 601.217278][ T8615] pwc: recv_control_msg error -71 req 02 val 2c00 [ 601.245106][ T8615] pwc: recv_control_msg error -71 req 04 val 1000 [ 601.265075][ T8615] pwc: recv_control_msg error -71 req 04 val 1300 [ 601.285056][ T8615] pwc: recv_control_msg error -71 req 04 val 1400 [ 601.305033][ T8615] pwc: recv_control_msg error -71 req 02 val 2000 [ 601.326520][ T8615] pwc: recv_control_msg error -71 req 02 val 2100 [ 601.345394][ T8615] pwc: recv_control_msg error -71 req 04 val 1500 [ 601.365003][ T8615] pwc: recv_control_msg error -71 req 02 val 2500 [ 601.385017][ T8615] pwc: recv_control_msg error -71 req 02 val 2400 [ 601.405051][ T8615] pwc: recv_control_msg error -71 req 02 val 2600 [ 601.425716][ T8615] pwc: recv_control_msg error -71 req 02 val 2900 [ 601.445129][ T8615] pwc: recv_control_msg error -71 req 02 val 2800 [ 601.465024][ T8615] pwc: recv_control_msg error -71 req 04 val 1100 [ 601.485015][ T8615] pwc: recv_control_msg error -71 req 04 val 1200 [ 601.492103][ T8615] pwc: Registered as video71. [ 601.497760][ T8615] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 601.510909][ T8615] usb 4-1: USB disconnect, device number 45 11:48:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xa9, 0x8, 0x471, 0x302, 0x355e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa8, 0x44, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0}) 11:48:50 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) connect$tipc(r0, 0x0, 0x0) 11:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002080)={'wg0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:50 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 11:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:50 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, 0x0) 11:48:50 executing program 5: socketpair(0x28, 0x0, 0x0, &(0x7f0000000400)) 11:48:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x0, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:50 executing program 2: bpf$BPF_GET_MAP_INFO(0x1a, 0x0, 0x0) 11:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 602.055067][ T5160] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 602.305389][ T5160] usb 4-1: Using ep0 maxpacket: 8 [ 602.425207][ T5160] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=35.5e [ 602.434305][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.449121][ T5160] usb 4-1: config 0 descriptor?? [ 602.486751][ T5160] pwc: Philips PCA645VC USB webcam detected. [ 603.145091][ T5160] pwc: recv_control_msg error -71 req 02 val 2700 [ 603.165120][ T5160] pwc: recv_control_msg error -71 req 02 val 2c00 [ 603.185183][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 603.205094][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 603.235198][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 603.255240][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 603.275031][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 603.295097][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 603.315080][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 603.336373][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 603.355024][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 603.375037][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 603.395008][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 603.415039][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 603.435085][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 603.443283][ T5160] pwc: Registered as video71. [ 603.449118][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input58 [ 603.465884][ T5160] usb 4-1: USB disconnect, device number 46 11:48:52 executing program 5: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:48:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r3, 0x0, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="f20d2e09416d942b4dc221a8c87f127d81cb24eae5604692800900000000000000ab0aa0301ec151f6839bc8f386274e891b4b33bdadd79321749032fb497f402f20e0fe7d35c0bf0292a3fdf2407b6de207a9626037009c1ecb70fd58a5302f3077e6eb22ba49f76b99ea7dcc1a692fd474e78fdf8f1670af9e76cfaa7b492a94e007a912892da02520313e649f7a2f920555bb25f069d6d506636b3574a26624f81042ce00"/189, @ANYRES32=r2, @ANYBLOB="b4e272ef031cd77fe601c76786d4080038430000002e2f6627301ca58df11c64aeb249f8ae6b548e534fbaa51a"]) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002080), 0x2}, 0x6040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000020c0), 0x402082) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x0, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:52 executing program 2: fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) 11:48:52 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000280)='@\x00', 0x0, r0) 11:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:52 executing program 3: syz_mount_image$affs(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000080)=';', 0x1}, {&(0x7f0000000340)='w', 0x1, 0x7fffffff}], 0x0, 0x0) 11:48:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x0, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 603.832624][T16278] loop3: detected capacity change from 0 to 264192 11:48:52 executing program 3: bpf$MAP_CREATE(0xb, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:52 executing program 2: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 11:48:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r3, 0x0, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="f20d2e09416d942b4dc221a8c87f127d81cb24eae5604692800900000000000000ab0aa0301ec151f6839bc8f386274e891b4b33bdadd79321749032fb497f402f20e0fe7d35c0bf0292a3fdf2407b6de207a9626037009c1ecb70fd58a5302f3077e6eb22ba49f76b99ea7dcc1a692fd474e78fdf8f1670af9e76cfaa7b492a94e007a912892da02520313e649f7a2f920555bb25f069d6d506636b3574a26624f81042ce00"/189, @ANYRES32=r2, @ANYBLOB="b4e272ef031cd77fe601c76786d4080038430000002e2f6627301ca58df11c64aeb249f8ae6b548e534fbaa51a"]) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002080), 0x2}, 0x6040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000020c0), 0x402082) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r3, 0x0, 0xc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="f20d2e09416d942b4dc221a8c87f127d81cb24eae5604692800900000000000000ab0aa0301ec151f6839bc8f386274e891b4b33bdadd79321749032fb497f402f20e0fe7d35c0bf0292a3fdf2407b6de207a9626037009c1ecb70fd58a5302f3077e6eb22ba49f76b99ea7dcc1a692fd474e78fdf8f1670af9e76cfaa7b492a94e007a912892da02520313e649f7a2f920555bb25f069d6d506636b3574a26624f81042ce00"/189, @ANYRES32=r2, @ANYBLOB="b4e272ef031cd77fe601c76786d4080038430000002e2f6627301ca58df11c64aeb249f8ae6b548e534fbaa51a"]) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002080), 0x2}, 0x6040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000020c0), 0x402082) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:52 executing program 5: syz_io_uring_setup(0xfe, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 11:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 11:48:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x0, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 604.047316][ T8832] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 11:48:52 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000d80), 0x8) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000dc0)='!+\x00', 0x0, r0) 11:48:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:52 executing program 2: bpf$BPF_GET_MAP_INFO(0x19, 0x0, 0x0) 11:48:53 executing program 5: syz_io_uring_setup(0x532e, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:48:53 executing program 3: syz_mount_image$affs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x8, 0x0) 11:48:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x0, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:53 executing program 2: syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x8970}], 0x8, &(0x7f0000000600)) 11:48:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r3, 0x0, 0xc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002100)=ANY=[@ANYBLOB="f20d2e09416d942b4dc221a8c87f127d81cb24eae5604692800900000000000000ab0aa0301ec151f6839bc8f386274e891b4b33bdadd79321749032fb497f402f20e0fe7d35c0bf0292a3fdf2407b6de207a9626037009c1ecb70fd58a5302f3077e6eb22ba49f76b99ea7dcc1a692fd474e78fdf8f1670af9e76cfaa7b492a94e007a912892da02520313e649f7a2f920555bb25f069d6d506636b3574a26624f81042ce00"/189, @ANYRES32=r2, @ANYBLOB="b4e272ef031cd77fe601c76786d4080038430000002e2f6627301ca58df11c64aeb249f8ae6b548e534fbaa51a"]) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002080), 0x2}, 0x6040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000020c0), 0x402082) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:53 executing program 3: syz_io_uring_setup(0x3c57, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5417, &(0x7f0000000100), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x4425, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 11:48:53 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') [ 604.392140][T16327] loop2: detected capacity change from 0 to 137 11:48:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x0, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:53 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) [ 604.515060][T16327] affs: No valid root block on device loop2 11:48:53 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x240, 0x0, 0x10}, 0x18) 11:48:53 executing program 3: ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) 11:48:53 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xc0000}, 0x20) 11:48:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:53 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000002080)={0xffff88e5, 0x4, 0x0, 'queue1\x00', 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:53 executing program 2: syz_io_uring_setup(0x532e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x3da}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 11:48:53 executing program 5: syz_io_uring_setup(0x532e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3da}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 11:48:53 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) 11:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:53 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x20a080}, 0x18) 11:48:53 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000013c0)=[{&(0x7f0000000280)="d5ac60d603041d8b194e45bce27c46285d2d46bdd212dff46d1e5ac4321440e4605f61eba9d1a30ff0408c9574467e3c550a20ef8aba576cb46b5064796a97072b124a5e658e51abfa36407f276d3983faecf89d1cff4212547bc91addc17c032241b5ea58a0bc9bbcc5d9842ea15a1265092896a4fa5a8b7c8269a7690693e98efc2c98508e630a3ca8105282bdb70aaec5dd681ce4a6db5c72981c9f69a2acbe78b3ab9b34800f457aa0fc71703de459842f32fbd9a2c6ec626003ee28376c29123be7ca3c88c791ac9ab9b58ecc523bcc501be05bd484d85e6a6468ae7e461f78783688ecfeebba49b5e0fd8569b697777fe375680ce2b498aa63f17247c2aafb2a2da40df7b9db9b8f5f7cb2a2728a02d6fa173bdcd1ed88f7d5aacd63b679d105594f328d0888caa63349d51a816d25d61905ba9d2123de6b6a7755f114f70159fe17b65f60f85ee69df5bbec20d95ccc784a9c3d44bbbb4ad6e9115ee3c62206ef2faddc0ab85005683339e9189750c99cdfefa730e666479c5b9d3bb20a45a20ceac3ec07a8e7accfeccd6e47180ff01d4850fc1c75564250fe1baec68b6118e0ce436e2223a616a897fc12f58b9dd5e1ab6fc74922a9cdb12a9e59b853f2bea7b5683eff13cdf9bc91e942d21444c266a0094dbd29dec04c278a4cf0b6babe129cc0893c8dd14859bcbf2ecd93378cdc2874322bfc10db", 0x1fb, 0x5}]) 11:48:53 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) bind(r0, 0x0, 0x0) 11:48:53 executing program 2: r0 = syz_io_uring_setup(0x200c, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x14a, 0x0, 0x0, 0x0, 0x0) 11:48:53 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000002080)={0xffff88e5, 0x4, 0x0, 'queue1\x00', 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 605.083066][T16380] loop3: detected capacity change from 0 to 1 11:48:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 605.160101][ T2971] Dev loop3: unable to read RDB block 1 [ 605.174482][ T2971] loop3: unable to read partition table 11:48:53 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') [ 605.201576][ T2971] loop3: partition table beyond EOD, truncated [ 605.242734][ T2971] Dev loop3: unable to read RDB block 1 11:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 605.285001][ T2971] loop3: unable to read partition table [ 605.313272][ T2971] loop3: partition table beyond EOD, truncated 11:48:54 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000002080)={0xffff88e5, 0x4, 0x0, 'queue1\x00', 0x1}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:54 executing program 5: fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') [ 605.355390][T16380] Dev loop3: unable to read RDB block 1 [ 605.372601][T16380] loop3: unable to read partition table [ 605.408573][T16380] loop3: partition table beyond EOD, truncated [ 605.444829][T16380] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) 11:48:54 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x3) 11:48:54 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:54 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 11:48:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002080)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002140)) r7 = syz_open_procfs(r5, &(0x7f0000002100)='attr/sockcreate\x00') read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:54 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 11:48:54 executing program 3: syz_read_part_table(0x0, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="c77e7efadb982cf6fce1d3a1464d43299dd11ea274f298854a64733deab992cefc641885352343a470dec20ea5d416bcd84379e6756c87b969921c61265e0e54e44b97b577cbfd09b6d22b44f291624c927710d8d6621af66b50c22d4576b2312bb93e23abb904d6a1420cbfcebe04d2936f856b4cfa02084136c68561dfe98b2380f12f1dd5448bdad977649e6d8484755ce4fd0ed7d5fde844c999f861a8f5f4f5114c9ffb91945fcf178e9f02ce9524650994384b5dc31a72b3a490f0f31ebaf7b08e39117ca4bffa6674bac2f961193ec56c64fdb70b94", 0xd9, 0x8}, {&(0x7f0000000200)="89806bf67da34470740b18a459d7cab03a06781c5574d8401195fde811c25b69c00e7192ab17fbd0f63194d3740190718a68b0da01938af0269623531b6982855c4154a96fadd356a73de9c80534027f8356e7cb82e13f92545449d7998ee42f32a0a822d5e1eec83935ebff765ec98ac4999bed0201c7cc3e458ffe6a56b8aecf708f63b91a83778db92cecd1089a2855d97e853834a12142cb831ee5d04ab123261acdd25c1512dd1c52a6a6e0bcf011f5e7fdcf3c79ade3b951cc13ed934dbe3b1be5e83607eda6311082139c448ab6149c475527966fe6fdec5fc0ff51a12449cf28c5d4a8d05b19", 0xea, 0x7}, {&(0x7f0000000000)="92d1af69572b613a89408ff389c333370a6d5a4a0185d9131cede98ccc0bf1f8f6d917e8ff0bec8b2f3757eebb6656d4b4e810c1", 0x34}, {0x0, 0x0, 0x7ff}, {&(0x7f0000000040)="a1cf2ff558", 0x5, 0x80000001}]) 11:48:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{}, {}]}) [ 606.212168][T16430] loop3: detected capacity change from 0 to 264192 11:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002080)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002140)) r7 = syz_open_procfs(r5, &(0x7f0000002100)='attr/sockcreate\x00') read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async) getpid() (async) sched_setscheduler(r4, 0x5, &(0x7f0000000380)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002080)) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002140)) (async) syz_open_procfs(r5, &(0x7f0000002100)='attr/sockcreate\x00') (async) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:55 executing program 2: bpf$BPF_GET_MAP_INFO(0xa, 0x0, 0x0) 11:48:55 executing program 3: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000240)={0x4}, &(0x7f0000000280)) 11:48:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:55 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xf) 11:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) [ 606.519728][ T8832] I/O error, dev loop3, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 11:48:55 executing program 5: socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 11:48:55 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000100)={'batadv0\x00', @ifru_hwaddr=@local}) 11:48:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:55 executing program 2: syz_mount_image$affs(&(0x7f0000000080), 0x0, 0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000100)="90", 0x1}], 0x0, &(0x7f0000000600)) 11:48:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) (async) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002080)=0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002140)) r7 = syz_open_procfs(r5, &(0x7f0000002100)='attr/sockcreate\x00') read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:55 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 11:48:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x100) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001140)={{}, "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"}) 11:48:55 executing program 3: syz_read_part_table(0x7, 0x3, &(0x7f0000000480)=[{0x0}, {}, {0x0, 0x0, 0x80000001}]) 11:48:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:55 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x8f4, &(0x7f0000000480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 11:48:55 executing program 2: r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='%@,\x00', &(0x7f00000003c0)='@&\'b$^!)%^(\x00', 0x0) [ 607.122618][T16480] loop3: detected capacity change from 0 to 264192 11:48:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:56 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f00000013c0)=[{0x0, 0x0, 0x6ec0}, {&(0x7f0000000280)="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", 0xbfc, 0x5}]) 11:48:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 11:48:56 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x0) 11:48:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 607.373198][T16496] loop3: detected capacity change from 0 to 110 11:48:56 executing program 5: bpf$MAP_CREATE(0x10, &(0x7f0000000200)=@bloom_filter, 0x48) 11:48:56 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x900, &(0x7f0000000080)={0x0, 0x0, 0x130000}, 0x20) 11:48:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:56 executing program 3: setfsuid(0xee01) syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) 11:48:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:56 executing program 5: syz_mount_image$affs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x0, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:56 executing program 2: fsopen(&(0x7f0000000000)='autofs\x00', 0x0) 11:48:56 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 11:48:56 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000240)) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x0, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:56 executing program 2: bpf$BPF_GET_MAP_INFO(0x7, 0x0, 0x0) 11:48:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xfffffdef}, 0x1, 0x10}, 0x0) 11:48:56 executing program 3: socketpair(0x10, 0x0, 0x0, &(0x7f0000000380)) 11:48:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x4b0800, 0x1}, 0x48) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2) 11:48:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x0, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:56 executing program 2: bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) 11:48:56 executing program 3: r0 = fsopen(&(0x7f0000000040)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='posixacl\x00', 0x0, 0x0) 11:48:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0x0, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:57 executing program 3: syz_mount_image$affs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003500)=[{&(0x7f0000002340)="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", 0xcc1}], 0x0, 0x0) 11:48:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2bb98205) 11:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0x0, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 608.342719][T16568] loop3: detected capacity change from 0 to 6 [ 608.637434][ T8832] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 11:48:57 executing program 3: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0xffffffffffffff22) 11:48:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x40b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r4}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r5, r4}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="480000001400e70f30044b415740ce0202095f9f95274b0a000284ebff3fff00000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d9000000000000", 0x48}], 0x1}, 0x0) sendmsg(r7, &(0x7f0000000700)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x1ff, @local}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)="1ae53d73c4f339ac79602d0f030a8b1aca4567b9123b94138bfe39b1c2c73e27bf89069f10cdf4a50f9ec8", 0x2b}, {&(0x7f0000000580)="b4ccb95abd4bda7d66f17d8665faac297dc8dd386002268769dcbf3a57d48e4623dcbeb074dcdb6adad3cdb8d041facf67", 0x31}, {&(0x7f00000005c0)="78873a72a55f420af6d652a2a455814c8b85d8ef1b73ad7b", 0x18}, {&(0x7f0000000600)="c2954a5fcc3139cb08e82e7b68b3e186c44b6835b678cb41fa72841cf8bd76ffff1fa4ef640cf7f87a244e48307172e87ed438358a71a912319b7654ba9a1088884a217c33b26f521f92235a8fc3c1268b1e4b2387fcc0319b07aa5bf9a646e886a95c8067607ed966253da71f5d9b775188dbed2202f109789f692e7b14f2117d73be2be30b3f388eca016739d250cbf237da4a00473f46145a758bd955a288e26d546090e2f8b2831b7ca1a06e3bede79cebac6cd1de01fc5a533346e8a66ecb2acc", 0xc3}, {&(0x7f00000007c0)="7ded3a55f9b1381ea99cfe6f517a68c7620147a8749b55a2fec861513f48a1712fb6d766a1e9721bfd8d0b265895ecf09582c83406607ec4f4d2146912df3a6b6d4b2a69794e686417659dce617da47e9716aa11bc60961b363cc9d28527ea9665c431d0888d50083ee63f5c5f8f4e3e63b026044c26bca5988b0f0717e2eda0289c7598dc3fea2bb14b4277c696683d975b8a778c88b910d651af2338a729b4e7fabfbf9e7c1d5d1649fe28a250", 0xae}], 0x5, &(0x7f0000000a80)=[{0x10, 0x11, 0xffff}, {0x40, 0x10f, 0xe1, "9bc772cf9f049e405e91030d4d14597808d678d5568646561c92f83a306488646d737917b8e8465819acef74e18dd793"}, {0x100, 0x117, 0x3, "20f5f5e26c44db9739945d1569a317065d5e89854ddf60a07e125b428390342c80953665fedc13915f721e8fc042133045792cc819cd2cf7240f4dc99aeefe9122cb418a5cb833fa2d8bddb32d389d4ff11ea7dfce47aa846537b09f056cfaaf3127ef6add5a2ad09c379be42a186991ba8035c66df202263e2592c8211d73897ef723a1b0b07ffb2b6bee8876a9dcab68a80d0787c88b920e5f11c561b7df51b3798cfdbdcba18a8dcf2a95505227201b1a737f40abcd1f1f5dff0fb034e014613fa8ecc7f4222699b6330ccd9fee32a7cb7e493641ee105b5b1f0f34a6a945699d5941095de6c51b10640ca442"}, {0xc0, 0x88, 0x3, "bc30128c42420a7c115fb8b3b20019891071d7606d2240438586ba27b2f4d12c9f777a9d71c8336644c00fb08a99051c46169d6b4a9a7322cca831abfdda1bfdbd11bd610687d97c6ddcd5b740a555e607fa60fdecd39627450ac6014afa34515744d5dcdccf8904e1fc4739f73e5449f629e5099fa77be6d2648a5529b41f8c66a3aebc7c26ac736c6307df98d453514d7ca135a32b447f9a6d4c3179b137c5f158efcaa65e397c79"}, {0xb8, 0x116, 0x3ff, "b87dfa1353e614f58685d3fe01681c53bd641b2d18a2e5f4474239396b98f1ee95e3e1e9caeb8b3fbe8788e8259e8d2b36ca3327e111343920eb42198945d16a00d1af4d020f81e436eaedc7afe04915c570c06832eb11ce71f5f1eedce823b67e383a83f6d1f4baed3706fe59db0bf756592b503430bda385c8b1cb413b3dbd956636d1f022af3e51ced0d3fee09545c0ea94433234aaac869eeede1aa11e767d197133"}, {0x100, 0x1, 0x200, "324526916ee5b4593e7ff3d6e6636a81941858dfd25b526c689ad4d3fc7b08c989323d467efe85326efe9057f1ed982c20adc5cb77609a453c23a1bc664bdbf8a8eaacac6550cf0c1c0343ae2b9a21c12060b470345f7bfce10fcc9d173d271095d724e4f01eafdab09e3d8fbbe9511a2a571e5356c878bc6960adc3ea90158f469360e5f55779c8353065948d469b32be92bfb9f07045ff82a2216b3cbf5e68be9c50d890deab79873d14e7cbfabd94051c8d87514910dd212ad1033e28cca3462d5da98f8827c6bad7f43100a689408c9b1a60908cddb2b96f5a10aad896fe9fc31c970b32134af5101496"}], 0x3c8}, 0x4000) perf_event_open$cgroup(&(0x7f0000000740)={0x3, 0x80, 0x1, 0x7, 0x7, 0x4, 0x0, 0x2, 0x82000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x4be}, 0x10001, 0x4, 0x4, 0x2, 0x63a, 0x1, 0x8da0}, r5, 0x4, r6, 0x14) openat$cgroup_ro(r6, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000700000000000000000000030000000000000000127e92607bc07b515c7c97d4cfa2c750bbb190a11f48ed3d1f9cf8e7754a3feade505b3aa66ff0fcb27b997cfacab1dc8318f17b322cebe3f2c670"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', r3, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x0, 0x5}, 0x10}, 0x80) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x6, @remote, 0x3}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="59a5603751d4ce6d5dccc6c5df5a1a48c5c0322f71b0e8fa0871526b475ae965c23e74fe2f5f78d3686903b51219fcbbf38455d05887e35944c5eb7d389749e4ea79d67731ae0f90919fd878d4bcd45812d0b83913cdd0f401ef859d915275f2f23f88b72fce9960c82717ceea54d9999dd743d748e3717069a751229342401ed618d890c2d0be9ef3668148e783daa3862713ca528ae16bb978417281f77f81ce91142d22fb92466a04077025b0bc556f8f15c1b0edc8670e38125bfc2e2306b7502db39b515d2ae37be5dc235390592670e214bab86643ab18227a00e9448872e77b", 0xe3}, {&(0x7f0000000080)="93", 0x1}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188120f80ecdb4cb9cca7480cf43b000000e3bd6efb440e09000e000a00100000000280f0001201", 0x2e}], 0x1}, 0x0) 11:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0x0, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readahead(r1, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002080)={0xff, 0x3, 0x93, 0x0, 0x7, 0x89, 0x4, 0x0, 0x8, 0x8, 0x80, 0x4, 0x0, 0x1, 0x7, 0x6b, 0x8, 0x1f, 0x2, '\x00', 0x20, 0x10001}) 11:48:57 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000c80)='GPL\x00', 0x5, 0x91, &(0x7f0000000cc0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:48:57 executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f00000005c0)="441619c96ae7f5aeba2e40cb3c01d70d8ba1f006d8d4a0aced125cfbed8ccb2b633d8aaa142c824f972405b53bb4a8adff469aef45ccc10c59298a2180083c79459b90151a014ee58db5072c84e4525c51c83455a5d22a7bc84eff61a8cad0a6b316500602692b499f4532e733a9dcfb978e02c91d87efeff04064e092a30385b32b9a837080a06a554e022d9f39f5b014f2af9600b91e6979c1c7f086440cbb3f0535226037c908ef961e42170c8a4bf063bd5a9b2de4a6779721f524d131fc3ad5610207f5c71a7884250a1eddc8e171064a4fb907bbd9a931401ea4af8e8c1e86ed68a41d0a4557a904c83027576a090000000000000063c6e523142ecdf17a184a92c24b6837b1ea90f492c506fd10e5ac60ac63926ece3405535b4c13a54f8d357951c7ad24c0a08a5fa38621a4e2ec914ace0ea5f7d09d94e72a8724cf42db703d7d0033b822a09df7b6fda3401419e4066f4b3da2", &(0x7f0000000100)=""/30, &(0x7f0000000200)="06aba77df61c0a14c2a9d9d2f0306559a3f09062c71fe7c78d1c1985edc47de610ab5166c43fd9f07621ee7044fb36654de11648217f40adf834a470752ee6b8b39d29f7223633fd60242b3bc3c7ae123ca41c8c22e15e432ce87504140bf92b452600a03328c3805a38e9a290a887ebd6d1dc806addf3627dabdebd5f776e0216c45fd4ff2b62f711bfdc5d6ca75046fc65b49b3b88f49eb99516276655aeaf68e8d66066ea5fdda12a85e223dd9b8868e42b0afb2779", &(0x7f0000000480)="eb841101002f7a8b67f7d180b5a6124d8d2c495317ca48a34211d8cd315bb6d586e999acd9c38ba472e1cca9b048126cf2f5a016d778975907a953a35ec8db1380b1f03793dc468463dcaeabe2dd5f6af931304f0727843230c07d4645cb4726ffa516c61c501a4b079e6d5e94d3be2f350d67cd6f7e80ce97bb73ada0c38d13e094692e8eb826e784ee6494c4132c0ef8496426c135ca88983c95e649f885cf5e4fee3e56eb9b8d232549bc4f0d000000000000196cb8757f5ed454dd7a592ada4ec61403e9cfd447d212855904dc413ceb7d7ddabb300b0e312519160341e1a627e5620370a2309b11a88fb6181608492f525dffd54f7f327dd96078000000000000000000", 0x20000006, 0xffffffffffffffff, 0x4}, 0x9a) 11:48:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x7fffece6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x300}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c2a9adb2281546c6c55985df4f4bbf661925a4d25a", 0x15}, {&(0x7f0000000200)="68e196d80317", 0x6}], 0x2}, 0x0) 11:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 608.934149][T16584] validate_nla: 11 callbacks suppressed [ 608.934167][T16584] netlink: 'syz-executor.5': attribute type 10 has an invalid length. 11:48:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.bfq.io_service_time\x00', 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x3508020000000005) [ 609.018589][T16584] team0: Device ipvlan1 failed to register rx_handler 11:48:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:58 executing program 5: bpf$LINK_DETACH(0x22, 0x0, 0x0) 11:48:58 executing program 2: bpf$BPF_PROG_DETACH(0x17, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x19}, 0x10) 11:48:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readahead(r1, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002080)={0xff, 0x3, 0x93, 0x0, 0x7, 0x89, 0x4, 0x0, 0x8, 0x8, 0x80, 0x4, 0x0, 0x1, 0x7, 0x6b, 0x8, 0x1f, 0x2, '\x00', 0x20, 0x10001}) 11:48:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 609.179192][ T25] audit: type=1804 audit(1643197737.961:6037): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir140807165/syzkaller.5irnZS/529/memory.events" dev="sda1" ino=1184 res=1 errno=0 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:58 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f000001cd00)={0x0, 0x0, 0x0}, 0x40850) [ 609.320541][ T25] audit: type=1804 audit(1643197738.101:6038): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir140807165/syzkaller.5irnZS/529/memory.events" dev="sda1" ino=1184 res=1 errno=0 11:48:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:58 executing program 5: bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x19}, 0x10) 11:48:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x300}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c2a9adb2281546c6c55985df4f4bbf661925a4d25a", 0x15}, {&(0x7f0000000200)="68e196d80317", 0x6}], 0x2}, 0x0) 11:48:58 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, &(0x7f0000001580)=""/123, 0x7b}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="97fc7f66b4c847905f80cd86d2f6b550be40f62740df68d58cc506496de937f5cf4b06f24caa183f117d5343aeb38a566741b9e6ad6bab0d11eeec90909923fafa2839d1f3ad7ba82cfe17764698d31338404245", 0x54}], 0x1}, 0x0) close(r1) 11:48:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readahead(r1, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002080)={0xff, 0x3, 0x93, 0x0, 0x7, 0x89, 0x4, 0x0, 0x8, 0x8, 0x80, 0x4, 0x0, 0x1, 0x7, 0x6b, 0x8, 0x1f, 0x2, '\x00', 0x20, 0x10001}) 11:48:58 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x7, 0x99, &(0x7f00000001c0)=""/153, 0x0, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:58 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 609.728001][T16628] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:58 executing program 5: socketpair(0x0, 0x0, 0x20, &(0x7f0000000200)) 11:48:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='L', 0x1}], 0x2}, 0x0) [ 609.777727][T16630] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:48:58 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:48:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:58 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 11:48:58 executing program 2: bpf$MAP_CREATE(0x1c, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 11:48:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x10000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:48:58 executing program 5: perf_event_open$cgroup(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000003080)=@bloom_filter={0x1e, 0x10000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x48) 11:48:58 executing program 2: bpf$BPF_PROG_DETACH(0x1b, 0x0, 0x0) 11:48:58 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) 11:48:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8d, 0x2, 0x49, 0x0, 0x8, 0xb3220, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x40220, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x4f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x80, 0x4, 0x6, 0x2, 0x2, 0x0, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb24, 0x4, @perf_bp={&(0x7f0000000280), 0xf}, 0x0, 0x9, 0x1, 0x1, 0x1, 0x40, 0x7414, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0x7, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='&@[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x13000) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="183bf0fcfecbb083dfe2fbf5438ce6412613fa0000030000000000000000000000006112000000000000950000000000000001c45b8e3db5a97c4e82398b62124cbcb940b717965ba2a355c002417d00010000000000001230ffeca5e920476889907c721691d4cbb259ff9c85859225980b0e6ca6079eb0bc90731b61d2bf80074ef14bc66cf2186ab34b112bb231f27c126e35545750ce83ba2e2273662f04adc9823f0f27c9d58273c844b1ecc4dce7a6c26293872a23ff4a3b3dd14198fe6ff7bbb2f517353c076741503ce218c4c94199008fb042ce41d3dff8c20062d07cd4b26b98d8229ab66a4ac5e3a6711d8305a7a03a9db9638ed69ee6220779ae61ab9b95ceca0d82e62d4831c6b7e1771c2f8a9d9a149c640f42d3632a24bf6cbae101c55618262b9fdcbe31c251498ac51ce53f84a412ac67da919e960849bda2609a0ed7a2a47dde9dc597361813bb8d5cb55f36eecc638a000067823866595c0b2ca0d7bf313c6c79440fca908badb74154"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x59, 0x10, 0x0, 0x0, 0x0, r3}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r2, 0x2}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000440)=0x5) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 11:48:59 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 11:48:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x10000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x10000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 11:48:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c2a9ad", 0x3}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000680)) 11:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {0x0}], 0x2, &(0x7f0000001e40)=[@mark={{0x14}}], 0x18}, 0x0) 11:48:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:59 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, &(0x7f0000001580)=""/123, 0x7b}, 0x0) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)='a', 0x1}], 0x1}, 0x0) 11:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000020000000f9], 0x10000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 610.807056][T16708] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 610.828417][T16710] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 11:48:59 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, &(0x7f0000001580)=""/123, 0x7b}, 0x0) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="97fc7f66", 0x4}], 0x1}, 0x0) close(r1) 11:48:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000003080)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xa}, 0x48) 11:48:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:48:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 11:48:59 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='3', &(0x7f0000000140)}, 0x48) 11:48:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xd3, 0x6, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x20ea5855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x18, 0x20, 0xfc, 0x0, 0x0, 0x3f, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002080), 0xc}, 0x9, 0x9, 0x4, 0x9, 0x3b, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, r5, 0x8, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002180)={0xffffffffffffffff, 0x5, 0xb}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) [ 611.209469][ T3639] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 11:49:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) [ 611.284046][ T3639] CPU: 0 PID: 3639 Comm: syz-executor.3 Not tainted 5.17.0-rc1-next-20220124-syzkaller #0 [ 611.294009][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.304079][ T3639] Call Trace: [ 611.307379][ T3639] [ 611.310326][ T3639] dump_stack_lvl+0xcd/0x134 [ 611.314950][ T3639] dump_header+0x106/0x624 [ 611.319532][ T3639] oom_kill_process.cold+0x10/0x15 [ 611.324678][ T3639] out_of_memory+0x358/0x14b0 [ 611.329471][ T3639] ? find_held_lock+0x2d/0x110 [ 611.334248][ T3639] ? oom_killer_disable+0x270/0x270 [ 611.339458][ T3639] ? find_held_lock+0x2d/0x110 [ 611.344237][ T3639] mem_cgroup_out_of_memory+0x206/0x270 [ 611.349862][ T3639] ? mem_cgroup_margin+0x130/0x130 [ 611.354988][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 611.359862][ T3639] try_charge_memcg+0xd79/0x10f0 [ 611.364807][ T3639] ? mem_cgroup_oom_trylock+0x220/0x220 [ 611.370356][ T3639] ? get_mem_cgroup_from_objcg+0x9f/0x170 [ 611.376086][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 611.380963][ T3639] obj_cgroup_charge_pages+0x1e/0x90 [ 611.386251][ T3639] obj_cgroup_charge+0xf3/0x280 [ 611.391128][ T3639] ? __alloc_file+0x21/0x280 [ 611.395724][ T3639] kmem_cache_alloc+0x92/0x3a0 [ 611.400487][ T3639] ? stack_trace_save+0x8c/0xc0 [ 611.405349][ T3639] __alloc_file+0x21/0x280 [ 611.409768][ T3639] alloc_empty_file+0x6d/0x170 [ 611.414538][ T3639] path_openat+0xe4/0x2940 [ 611.418963][ T3639] ? __lock_acquire+0x1655/0x5470 [ 611.424002][ T3639] ? path_lookupat+0x860/0x860 [ 611.428766][ T3639] ? mark_lock+0xef/0x17b0 [ 611.433191][ T3639] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 611.439189][ T3639] do_filp_open+0x1aa/0x400 [ 611.443699][ T3639] ? may_open_dev+0xf0/0xf0 [ 611.448213][ T3639] ? alloc_fd+0x2f0/0x670 [ 611.452550][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 611.457414][ T3639] ? rwlock_bug.part.0+0x90/0x90 [ 611.462365][ T3639] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 611.468622][ T3639] ? _find_next_bit+0x1e3/0x260 [ 611.473491][ T3639] ? _raw_spin_unlock+0x24/0x40 [ 611.478355][ T3639] ? alloc_fd+0x2f0/0x670 [ 611.482702][ T3639] do_sys_openat2+0x16d/0x4d0 [ 611.487395][ T3639] ? build_open_flags+0x6f0/0x6f0 [ 611.492436][ T3639] ? __context_tracking_exit+0xb8/0xe0 [ 611.497906][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 611.502777][ T3639] __x64_sys_openat+0x13f/0x1f0 [ 611.507639][ T3639] ? __ia32_sys_open+0x1c0/0x1c0 [ 611.512590][ T3639] ? syscall_enter_from_user_mode+0x21/0x70 [ 611.518507][ T3639] do_syscall_64+0x35/0xb0 [ 611.522933][ T3639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 611.528835][ T3639] RIP: 0033:0x7f2844b30b98 [ 611.533257][ T3639] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 611.552868][ T3639] RSP: 002b:00007ffc50066500 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 611.561282][ T3639] RAX: ffffffffffffffda RBX: 00000000000006ed RCX: 00007f2844b30b98 [ 611.569255][ T3639] RDX: 0000000000090800 RSI: 00007ffc500676f0 RDI: 00000000ffffff9c [ 611.577226][ T3639] RBP: 00007ffc500676cc R08: 0000000000090800 R09: 00007ffc500676f0 11:49:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 611.585195][ T3639] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f2844b8a1ea [ 611.593167][ T3639] R13: 00007ffc500676f0 R14: 0000000000000014 R15: 00007ffc50067730 [ 611.601154][ T3639] 11:49:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) perf_event_open$cgroup(0x0, r0, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) 11:49:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000003080)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) 11:49:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:49:00 executing program 5: bpf$MAP_CREATE(0x3, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 611.824666][ T3639] memory: usage 2344kB, limit 32kB, failcnt 19 [ 611.841881][ T3639] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 611.853599][ T3639] Memory cgroup stats for /syz3: [ 611.854586][ T3639] anon 61440 [ 611.854586][ T3639] file 217088 [ 611.854586][ T3639] kernel_stack 0 [ 611.854586][ T3639] pagetables 8192 [ 611.854586][ T3639] percpu 0 [ 611.854586][ T3639] sock 0 [ 611.854586][ T3639] vmalloc 0 [ 611.854586][ T3639] shmem 204800 [ 611.854586][ T3639] file_mapped 204800 [ 611.854586][ T3639] file_dirty 8192 [ 611.854586][ T3639] file_writeback 0 [ 611.854586][ T3639] swapcached 0 [ 611.854586][ T3639] anon_thp 0 [ 611.854586][ T3639] file_thp 0 [ 611.854586][ T3639] shmem_thp 0 [ 611.854586][ T3639] inactive_anon 135168 [ 611.854586][ T3639] active_anon 131072 [ 611.854586][ T3639] inactive_file 0 [ 611.854586][ T3639] active_file 12288 [ 611.854586][ T3639] unevictable 0 [ 611.854586][ T3639] slab_reclaimable 726512 [ 611.854586][ T3639] slab_unreclaimable 1374568 [ 611.854586][ T3639] slab 2101080 [ 611.854586][ T3639] workingset_refault_anon 0 [ 611.854586][ T3639] workingset_refault_file 0 [ 611.854586][ T3639] workingset_activate_anon 0 [ 611.970998][ T3639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3639,uid=0 [ 612.000089][ T3639] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:577 [ 612.010112][ T3639] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3639, name: syz-executor.3 [ 612.019578][ T3639] preempt_count: 1, expected: 0 [ 612.024441][ T3639] RCU nest depth: 0, expected: 0 [ 612.029485][ T3639] 3 locks held by syz-executor.3/3639: [ 612.035044][ T3639] #0: ffffffff8bce23c0 (memcg_oom_lock#2){+.+.}-{0:0}, at: try_charge_memcg+0xafd/0x10f0 [ 612.045140][ T3639] #1: ffffffff8bc645a8 (oom_lock){+.+.}-{3:3}, at: mem_cgroup_out_of_memory+0x8d/0x270 [ 612.055016][ T3639] #2: ffff8880187d26a0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 [ 612.065105][ T3639] Preemption disabled at: [ 612.065117][ T3639] [<0000000000000000>] 0x0 [ 612.073883][ T3639] CPU: 0 PID: 3639 Comm: syz-executor.3 Not tainted 5.17.0-rc1-next-20220124-syzkaller #0 [ 612.083788][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.093859][ T3639] Call Trace: [ 612.097156][ T3639] [ 612.100097][ T3639] dump_stack_lvl+0xcd/0x134 [ 612.104758][ T3639] __might_resched.cold+0x222/0x26b [ 612.109993][ T3639] __mutex_lock+0x9f/0x12f0 [ 612.114534][ T3639] ? futex_exit_release+0x26/0x220 [ 612.119686][ T3639] ? mutex_lock_io_nested+0x1150/0x1150 [ 612.125276][ T3639] ? find_held_lock+0x2d/0x110 [ 612.130081][ T3639] ? __oom_kill_process+0x33f/0xf90 [ 612.135299][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.140177][ T3639] ? mark_held_locks+0x9f/0xe0 [ 612.144976][ T3639] futex_exit_release+0x26/0x220 [ 612.149937][ T3639] __oom_kill_process+0x373/0xf90 [ 612.154990][ T3639] ? mem_cgroup_get_oom_group+0x12f/0x420 [ 612.160730][ T3639] oom_kill_process+0xd7/0x5b0 [ 612.165570][ T3639] out_of_memory+0x358/0x14b0 [ 612.170274][ T3639] ? find_held_lock+0x2d/0x110 [ 612.175149][ T3639] ? oom_killer_disable+0x270/0x270 [ 612.180388][ T3639] ? find_held_lock+0x2d/0x110 [ 612.185198][ T3639] mem_cgroup_out_of_memory+0x206/0x270 [ 612.190784][ T3639] ? mem_cgroup_margin+0x130/0x130 [ 612.195927][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.200865][ T3639] try_charge_memcg+0xd79/0x10f0 [ 612.205835][ T3639] ? mem_cgroup_oom_trylock+0x220/0x220 [ 612.211407][ T3639] ? get_mem_cgroup_from_objcg+0x9f/0x170 [ 612.217160][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.222067][ T3639] obj_cgroup_charge_pages+0x1e/0x90 [ 612.227380][ T3639] obj_cgroup_charge+0xf3/0x280 [ 612.232259][ T3639] ? __alloc_file+0x21/0x280 [ 612.236874][ T3639] kmem_cache_alloc+0x92/0x3a0 [ 612.241665][ T3639] ? stack_trace_save+0x8c/0xc0 [ 612.246651][ T3639] __alloc_file+0x21/0x280 [ 612.251100][ T3639] alloc_empty_file+0x6d/0x170 [ 612.255888][ T3639] path_openat+0xe4/0x2940 [ 612.260338][ T3639] ? __lock_acquire+0x1655/0x5470 [ 612.265465][ T3639] ? path_lookupat+0x860/0x860 [ 612.270258][ T3639] ? mark_lock+0xef/0x17b0 [ 612.274705][ T3639] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 612.280724][ T3639] do_filp_open+0x1aa/0x400 [ 612.285250][ T3639] ? may_open_dev+0xf0/0xf0 [ 612.289782][ T3639] ? alloc_fd+0x2f0/0x670 [ 612.294133][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.299008][ T3639] ? rwlock_bug.part.0+0x90/0x90 [ 612.303970][ T3639] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 612.310237][ T3639] ? _find_next_bit+0x1e3/0x260 [ 612.315128][ T3639] ? _raw_spin_unlock+0x24/0x40 [ 612.320007][ T3639] ? alloc_fd+0x2f0/0x670 [ 612.324374][ T3639] do_sys_openat2+0x16d/0x4d0 [ 612.329083][ T3639] ? build_open_flags+0x6f0/0x6f0 [ 612.334182][ T3639] ? __context_tracking_exit+0xb8/0xe0 [ 612.339687][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.344581][ T3639] __x64_sys_openat+0x13f/0x1f0 [ 612.349459][ T3639] ? __ia32_sys_open+0x1c0/0x1c0 [ 612.354424][ T3639] ? syscall_enter_from_user_mode+0x21/0x70 [ 612.360348][ T3639] do_syscall_64+0x35/0xb0 [ 612.364785][ T3639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 612.370699][ T3639] RIP: 0033:0x7f2844b30b98 [ 612.375130][ T3639] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 612.394758][ T3639] RSP: 002b:00007ffc50066500 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 612.403188][ T3639] RAX: ffffffffffffffda RBX: 00000000000006ed RCX: 00007f2844b30b98 [ 612.411174][ T3639] RDX: 0000000000090800 RSI: 00007ffc500676f0 RDI: 00000000ffffff9c [ 612.419165][ T3639] RBP: 00007ffc500676cc R08: 0000000000090800 R09: 00007ffc500676f0 [ 612.427145][ T3639] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f2844b8a1ea [ 612.435127][ T3639] R13: 00007ffc500676f0 R14: 0000000000000014 R15: 00007ffc50067730 [ 612.443133][ T3639] [ 612.446931][ T3639] [ 612.449267][ T3639] ============================= [ 612.454100][ T3639] [ BUG: Invalid wait context ] [ 612.458941][ T3639] 5.17.0-rc1-next-20220124-syzkaller #0 Tainted: G W [ 612.466940][ T3639] ----------------------------- [ 612.471776][ T3639] syz-executor.3/3639 is trying to lock: [ 612.477400][ T3639] ffff8880187d30c0 (&tsk->futex_exit_mutex){+.+.}-{3:3}, at: futex_exit_release+0x26/0x220 [ 612.487408][ T3639] other info that might help us debug this: [ 612.493287][ T3639] context-{4:4} [ 612.496731][ T3639] 3 locks held by syz-executor.3/3639: [ 612.502181][ T3639] #0: ffffffff8bce23c0 (memcg_oom_lock#2){+.+.}-{0:0}, at: try_charge_memcg+0xafd/0x10f0 [ 612.512540][ T3639] #1: ffffffff8bc645a8 (oom_lock){+.+.}-{3:3}, at: mem_cgroup_out_of_memory+0x8d/0x270 [ 612.522292][ T3639] #2: ffff8880187d26a0 (&p->alloc_lock){+.+.}-{2:2}, at: find_lock_task_mm+0xe3/0x2b0 [ 612.531952][ T3639] stack backtrace: [ 612.535658][ T3639] CPU: 0 PID: 3639 Comm: syz-executor.3 Tainted: G W 5.17.0-rc1-next-20220124-syzkaller #0 [ 612.546931][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.556977][ T3639] Call Trace: [ 612.560254][ T3639] [ 612.563187][ T3639] dump_stack_lvl+0xcd/0x134 [ 612.567781][ T3639] __lock_acquire.cold+0x213/0x3ab [ 612.572902][ T3639] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 612.578896][ T3639] lock_acquire+0x1ab/0x510 [ 612.583406][ T3639] ? futex_exit_release+0x26/0x220 [ 612.588519][ T3639] ? lock_release+0x720/0x720 [ 612.593215][ T3639] ? dump_stack_lvl+0x120/0x134 [ 612.598069][ T3639] ? dump_stack_lvl+0x12a/0x134 [ 612.602924][ T3639] ? dump_stack_lvl+0x12c/0x134 [ 612.607808][ T3639] __mutex_lock+0x12f/0x12f0 [ 612.612406][ T3639] ? futex_exit_release+0x26/0x220 [ 612.617527][ T3639] ? futex_exit_release+0x26/0x220 [ 612.622641][ T3639] ? mutex_lock_io_nested+0x1150/0x1150 [ 612.628190][ T3639] ? find_held_lock+0x2d/0x110 [ 612.632956][ T3639] ? __oom_kill_process+0x33f/0xf90 [ 612.638159][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.643015][ T3639] ? mark_held_locks+0x9f/0xe0 [ 612.647788][ T3639] futex_exit_release+0x26/0x220 [ 612.652725][ T3639] __oom_kill_process+0x373/0xf90 [ 612.657793][ T3639] ? mem_cgroup_get_oom_group+0x12f/0x420 [ 612.663602][ T3639] oom_kill_process+0xd7/0x5b0 [ 612.668371][ T3639] out_of_memory+0x358/0x14b0 [ 612.673047][ T3639] ? find_held_lock+0x2d/0x110 [ 612.677819][ T3639] ? oom_killer_disable+0x270/0x270 [ 612.683027][ T3639] ? find_held_lock+0x2d/0x110 [ 612.687795][ T3639] mem_cgroup_out_of_memory+0x206/0x270 [ 612.693351][ T3639] ? mem_cgroup_margin+0x130/0x130 [ 612.698467][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.703340][ T3639] try_charge_memcg+0xd79/0x10f0 [ 612.708279][ T3639] ? mem_cgroup_oom_trylock+0x220/0x220 [ 612.713839][ T3639] ? get_mem_cgroup_from_objcg+0x9f/0x170 [ 612.719567][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.724430][ T3639] obj_cgroup_charge_pages+0x1e/0x90 [ 612.729714][ T3639] obj_cgroup_charge+0xf3/0x280 [ 612.734567][ T3639] ? __alloc_file+0x21/0x280 [ 612.739155][ T3639] kmem_cache_alloc+0x92/0x3a0 [ 612.743915][ T3639] ? stack_trace_save+0x8c/0xc0 [ 612.748772][ T3639] __alloc_file+0x21/0x280 [ 612.753187][ T3639] alloc_empty_file+0x6d/0x170 [ 612.757951][ T3639] path_openat+0xe4/0x2940 [ 612.762368][ T3639] ? __lock_acquire+0x1655/0x5470 [ 612.767401][ T3639] ? path_lookupat+0x860/0x860 [ 612.772163][ T3639] ? mark_lock+0xef/0x17b0 [ 612.776584][ T3639] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 612.782573][ T3639] do_filp_open+0x1aa/0x400 [ 612.787075][ T3639] ? may_open_dev+0xf0/0xf0 [ 612.791585][ T3639] ? alloc_fd+0x2f0/0x670 [ 612.795922][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.800803][ T3639] ? rwlock_bug.part.0+0x90/0x90 [ 612.805749][ T3639] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 612.811999][ T3639] ? _find_next_bit+0x1e3/0x260 [ 612.816945][ T3639] ? _raw_spin_unlock+0x24/0x40 [ 612.821804][ T3639] ? alloc_fd+0x2f0/0x670 [ 612.826148][ T3639] do_sys_openat2+0x16d/0x4d0 [ 612.830831][ T3639] ? build_open_flags+0x6f0/0x6f0 [ 612.835876][ T3639] ? __context_tracking_exit+0xb8/0xe0 [ 612.841343][ T3639] ? lock_downgrade+0x6e0/0x6e0 [ 612.846202][ T3639] __x64_sys_openat+0x13f/0x1f0 [ 612.851058][ T3639] ? __ia32_sys_open+0x1c0/0x1c0 [ 612.856003][ T3639] ? syscall_enter_from_user_mode+0x21/0x70 [ 612.861912][ T3639] do_syscall_64+0x35/0xb0 [ 612.866328][ T3639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 612.872221][ T3639] RIP: 0033:0x7f2844b30b98 [ 612.876637][ T3639] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 612.896237][ T3639] RSP: 002b:00007ffc50066500 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 612.904737][ T3639] RAX: ffffffffffffffda RBX: 00000000000006ed RCX: 00007f2844b30b98 [ 612.912703][ T3639] RDX: 0000000000090800 RSI: 00007ffc500676f0 RDI: 00000000ffffff9c [ 612.920668][ T3639] RBP: 00007ffc500676cc R08: 0000000000090800 R09: 00007ffc500676f0 [ 612.928633][ T3639] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f2844b8a1ea [ 612.936610][ T3639] R13: 00007ffc500676f0 R14: 0000000000000014 R15: 00007ffc50067730 [ 612.944588][ T3639] [ 612.947760][ T3639] Memory cgroup out of memory: Killed process 3639 (syz-executor.3) total-vm:56676kB, anon-rss:404kB, file-rss:15280kB, shmem-rss:4kB, UID:0 pgtables:84kB oom_score_adj:0 [ 612.969647][ T27] oom_reaper: reaped process 3639 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 613.008767][T11636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:49:01 executing program 3: socketpair(0x28, 0x0, 0x8001, &(0x7f00000009c0)) 11:49:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:49:01 executing program 5: bpf$BPF_PROG_DETACH(0x16, &(0x7f0000000500)={@map=0x1}, 0x10) 11:49:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:49:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c2a9adb2281546c6c55985df4f4bbf661925a4d25a", 0x15}, {&(0x7f0000000200)="68e196d80317", 0x6}], 0x2}, 0x0) 11:49:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xd3, 0x6, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x20ea5855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x18, 0x20, 0xfc, 0x0, 0x0, 0x3f, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002080), 0xc}, 0x9, 0x9, 0x4, 0x9, 0x3b, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, r5, 0x8, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002180)={0xffffffffffffffff, 0x5, 0xb}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r1, 0x0, 0xc) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xd3, 0x6, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x20ea5855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x18, 0x20, 0xfc, 0x0, 0x0, 0x3f, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002080), 0xc}, 0x9, 0x9, 0x4, 0x9, 0x3b, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, r5, 0x8, 0xffffffffffffffff, 0x3) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002180)={0xffffffffffffffff, 0x5, 0xb}) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) 11:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x5, r0}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:49:02 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 11:49:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:49:02 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) [ 613.200732][T11636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:49:02 executing program 5: bpf$BPF_PROG_DETACH(0x1e, &(0x7f0000000500)={@map=0x1}, 0x10) [ 613.273671][T11636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:49:02 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 11:49:02 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x26}, 0x10) 11:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:49:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) [ 613.386690][T11636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 11:49:02 executing program 5: r0 = eventfd2(0x3, 0x80800) write$eventfd(r0, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) 11:49:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xd3, 0x6, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x20ea5855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x18, 0x20, 0xfc, 0x0, 0x0, 0x3f, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002080), 0xc}, 0x9, 0x9, 0x4, 0x9, 0x3b, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, r5, 0x8, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r6, 0x0, 0xc) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002180)={0xffffffffffffffff, 0x5, 0xb}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r1, 0x0, 0xc) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xd3, 0x6, 0x0, 0x0, 0x10000020000000f9, 0x0, 0x0, 0x20ea5855, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x100000}) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) perf_event_open(&(0x7f00000020c0)={0x2, 0x80, 0x18, 0x20, 0xfc, 0x0, 0x0, 0x3f, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000002080), 0xc}, 0x9, 0x9, 0x4, 0x9, 0x3b, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, r5, 0x8, 0xffffffffffffffff, 0x3) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') (async) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r6, 0x0, 0xc) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000002180)={0xffffffffffffffff, 0x5, 0xb}) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) 11:49:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b80)='oom_score_adj\x00') write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) 11:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) 11:49:02 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) 11:49:02 executing program 2: mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='\x00', &(0x7f00000003c0), 0x0, 0x0) 11:49:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0x2000}, {0x80000006, 0x2, 0x0, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x9, 0x0, 0x0, 0x7d, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) 11:49:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x7, 0xd7, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) [ 614.297865][T11636] device hsr_slave_0 left promiscuous mode [ 614.305886][T11636] device hsr_slave_1 left promiscuous mode [ 614.325950][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.333491][T11636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.358580][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.374948][T11636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.395911][T11636] device bridge_slave_1 left promiscuous mode [ 614.402107][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.425757][T11636] device bridge_slave_0 left promiscuous mode [ 614.432065][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.444320][T11636] device veth1_macvtap left promiscuous mode [ 614.450394][T11636] device veth0_macvtap left promiscuous mode [ 614.458843][T11636] device veth1_vlan left promiscuous mode [ 614.464642][T11636] device veth0_vlan left promiscuous mode [ 614.560419][T11636] team0 (unregistering): Port device bridge3 removed [ 614.607203][T11636] team0 (unregistering): Port device bridge2 removed [ 614.666128][T11636] team0 (unregistering): Port device bridge1 removed [ 614.739465][T11636] team0 (unregistering): Port device team_slave_1 removed [ 614.751385][T11636] team0 (unregistering): Port device team_slave_0 removed [ 614.762285][T11636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.773721][T11636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.809841][T11636] bond0 (unregistering): Released all slaves [ 618.864938][ T3658] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 621.597951][ T3660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 621.605138][ T3660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 621.612238][ T3660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 621.619680][ T3660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.627129][ T3660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 621.634651][ T3660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 621.683477][T17005] chnl_net:caif_netlink_parms(): no params data found [ 621.717977][T17005] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.725154][T17005] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.732728][T17005] device bridge_slave_0 entered promiscuous mode [ 621.740691][T17005] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.748169][T17005] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.755793][T17005] device bridge_slave_1 entered promiscuous mode [ 621.771921][T17005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.782326][T17005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.800268][T17005] team0: Port device team_slave_0 added [ 621.808465][T17005] team0: Port device team_slave_1 added [ 621.821638][T17005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.828636][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.854672][T17005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.867446][T17005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.874389][T17005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.900710][T17005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.921076][T17005] device hsr_slave_0 entered promiscuous mode [ 621.928807][T17005] device hsr_slave_1 entered promiscuous mode [ 621.935370][T17005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.942905][T17005] Cannot create hsr debugfs directory