et$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x4e21, @private}}, 0x4, 0x7ffe}, &(0x7f0000000180)=0x88) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x2, 0xe51f, 0x0, 0x7, 0x1, 0x80000000, 0xfa4, 0x5, 0x1, 0x1000, 0xb8d8, 0x3, 0x1f}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{r3, 0x2, 0x80, 0x100000001, 0x7, 0x3, 0x0, 0x7ff, 0x1, 0x3, 0x2, 0x100, 0x3, 0x7, 0xffffffffffff8000}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$HDIO_GETGEO(r0, 0x401870cb, 0x0) [ 470.052524][ T28] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 470.332093][ T28] usb 2-1: device descriptor read/64, error 18 07:29:24 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0xc0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000280)={0x1, 0x6}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bd6e11", 0x1c, 0x3a, 0x0, @private1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x9]}, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @empty}}}}}}, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r2, &(0x7f0000000000), 0x10) accept4$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x58, 0x800) [ 470.721950][ T28] usb 2-1: device descriptor read/64, error 18 07:29:24 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r9, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r9, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000040)={r8}, &(0x7f0000000080)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="0e23eaef7fe1fc245e376643b658857353ebd93d7b811417186e1fbfac467d50c26a304323a08bec3fc3ac45355c8348061cdf594994ba908f761174e1375a02503dc9808daa5198cf873315b6c5c60946d0832360b34e261379704db58189f966c2bb4af439fc6a12ae286cad2e1698d8ff8bc72011556498a54d156617a1818002b8124f64895bae008b5abff8e4cb5b1d0e4c06406572bb44f32391d7191e9de9ff8e5182bb00db05100364c20644584fdc1b2d9a894f081a44d23fd2001fe8850d9f1b7a5d25d6ae452eab16170558c40239dc755d10f1222b2f33e98f320e0c3c89c40fa84b23c6f7179eb8fb66863233", 0xf3}, {&(0x7f0000000140)="b400d88ca3c3c24151a695a40b1bee5f3e7fb39000825bb0471534c64c95331a954aad9cc9f9", 0x26}, {&(0x7f0000000180)="4faf869be6cb73dd5496ccbcd6b111f82891d637b9b86f8ca79fef8c", 0x1c}, {&(0x7f00000001c0)="2f5c2a69861011184e68946d78162ac96a4a967da5403c6b8e990131b1d225d306d3eee44d0c8b83925202a5ee", 0x2d}, {&(0x7f0000000340)="d2e305", 0x3}, {&(0x7f0000000380)="8c1497f4dfc457332e46c1693cff691e78e0bb8d751df66139a8fe5e1619c598179c4ef91d83e6fe9913d725cb941435ce274082b72855cfc879af84dc76f48c0d07562aa40523627a27900e96f9da131b322b5b7e70", 0x56}], 0x6, 0x0, 0x0, 0x41}, {&(0x7f0000000440)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000480)="78325af0512baeae0f1aa8a2134407096a8347805cba2a7c8a28b1c0c7f5958ac106b5821475fe0259437b3a2155fcdf70e98082da5b6d1cc3c57a12f115e5384cb363db7219ff2ccc25171e484a2e69e81a9e5662f22d7ffe3edfa17ada7d91ba", 0x61}, {&(0x7f0000000500)="903e755c475e22b075df1f8fa4d3adbfa5a28a0fe84140b1bd796d816c2422388fecd16874682aaa475abfc721c88ea09aaac022659aea2653944d36e46bf61700d7b88b098d8fb28ec7851c59b2b233714a048791d89994aa4f9ce099534268341d8151999cc3601d1df54fb774e91c4d54fc27750a515173164697", 0x7c}, {&(0x7f0000000580)="0a7268d9cc71d19090c0690e22c1fb257197c400cc853e57ce8b97ff76a173b4a7d3e8871c475fe3fc41c46d0dad7e73c0620d70a2d2a0f2c1c1b12e0797bc05028038c03a7feeeab8051f4571a5eea13fd21d8f42d599157c5909db097e8b64dea7b00ab24a6edc91174ad9e8712928c0ec643c2a5bff0fa65157566af3ad2a47a186b824969df7da08010cb15f879ae77c69ca19200a9f73570b842bab9332ec3f58338a9144f188c6f240ba17a03eb8823c899b61b80946f9f7e05badec3c6cf431777c", 0xc5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="e4bd8a780234a29c0401fedf4c0f161da472ba8b8d1b61d3da6de927cffabfd5c88bc643d81e4f02955c557a919e843f4851ca03781b4dd475b1c7d74ab20abe14aa8c0fda54325d0c0b23c5c67eb806891b60b5d0262d3c019f5eef1a3c911c8e39cfa90f4ed1a23edc931942770d14c3b971effe593aedb67376a6670ec212d9842a7530f8ef5472eea0ddda58ec35bfd5945d2ce25c7c5d6bd16920db1e4944b452000d2dfd4657336973ee4afc809bd9a04f4115f2353594bdbe2ad2c60a32783d087faba50fff982b9fa968", 0xce}, {&(0x7f0000001780)="59d2878e3a8e27bc37b9d29660de1f633881d4f3a6a41f2095f125a1d5ee2e7ea5843188906601a378d1c05916c15d658277417be530d4c8cdeb90ce51ba85f1e3c661e3e14b979fa7606d7cb318df2e85eb6dc161050a8a0432088d66ddf8c41f42df613afbb584d0841012908b8a87d96875a8b45c2967f55a6a08", 0x7c}, {&(0x7f0000001800)="598af7621febf91fc54ed3a19837dfb7c569cec42b62b580635650a1bc9ca96dd2c9b3b6e66f03210cac4b3a8654ad0c0e7408fc5bafe931ca48c53a63dc89c07c9dd4af44f54324e41bf49caf84df1691f6d0886955b8c70c3c", 0x5a}, {&(0x7f0000001880)="8d265c74af73d777c44c448776c27d5a2bc1f690e7d5372c3104cd1588c3255cc25327f4ab1aba34a45e90d4d1383352bad5b15ccb188539871f398daa64418d82f18e3bbe517dd8834a94b1e034bf651a2413a044bdeb8b9d2cec45dd90e9eb3e605e11a2083a9ad18cef9beaae4e14e17de7f4a1eb1abd20b1a55ab567959e376522c35524bc2178852f5f80", 0x8d}, {&(0x7f0000001940)="576097356cc99bf70ac982c06183af1f1154a0492054abd03156696db641df235156cc17e302fa97c287fe20c42d20b1af", 0x31}, {&(0x7f0000001980)="7ff55be08c3690ee4d7d209c7c7272f9980c8bd53572987e6227ddd90b93f55ed9778018a8845ee291", 0x29}], 0xa, &(0x7f0000001a40)=[@sndinfo={0x1c, 0x84, 0x2, {0xb4b6, 0x0, 0x40, 0x65}}, @dstaddrv4={0x10, 0x84, 0x7, @multicast2}, @dstaddrv4={0x10, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x10, 0x84, 0x6, {0x2}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0xddf}}, @authinfo={0x10, 0x84, 0x6, {0x7}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x3, 0x1, 0xe8, 0x101, 0x9e80, 0x8a, 0x2}}, @sndrcv={0x2c, 0x84, 0x1, {0x1000, 0x5, 0x6, 0x1, 0xffffffff, 0x5, 0x30, 0x10000}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x2, 0x8008, 0x0, 0x80000000, 0x6, 0x7, 0x6bd}}], 0xf4, 0x40}, {&(0x7f0000001b40)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001b80)="26b211a3a404dbc566ebf7464ac56748390bef3b0994402d7df64d9478b9bb97380bd2eca3ae6c6d54faf0d87b11a92bcd44dac0ff4330a25782d060101124968610ac643c82b55c8a7be09d45e9c4092c2414972a2b5a9899d0c66a3004e857839d7b34e234e6f471ceed108f94952d840356ce4b2dfdada0e0106c73634bd4342d169ff2d826c0a6aa037bddfec84dfb302fb6dd0835c2a5edc59597c83d279d461a342b63ee60ec3ebecc36bf2b5b8bdd015bb54ac8ca81b93fe9ed3da3c2b5f0087cbbb9009cccda254c9524a74560d6262020a40a2d415e7aa0ac3cec7f416a1f7490209f097c64104f5c9936", 0xef}, {&(0x7f0000001c80)="8d92e492b7041b2f0ea05a93c6d7978349bd03ca2f3fc52939f7daf3220f973aa69cc4ded90d8eba893be1bdf7829281f919e23280c51cb213d387417c0df9286be601181a2705da11ac37f21b9944c909cb9d01843ff4402f9108bfe44bb892382fb248adc20c8da60465d8c7d73845b305d5cea505994f29d4bae2d994a0612937fcc627bf18dbe1c018deca27d6ae21031a36eaff5ee08caf0b443193", 0x9e}, {&(0x7f0000001d40)="226d5ec3455db07671a3588857e8a8756b482554d33bb4ec3173f4e495b144a3a3256d024a068d6ea18bdcffec45f0aa50478f6a120878bbf1c96840e1e2071133588a066a1cdcbd1fef1573e0681f913bf8f036a7814a24ee8bc1b2fd2e49093e0712acd454d14022ee23c2c735f444de42110b65586b7106119a6592f52585f2126025a53ca20fbf46610af604fe211f5265944a3fcec743f4c7b0244dd625696f9a6505b5bd52ed87b5394068f377276debd2b36cb501de21fc126a8f5c5b419ea7c555aa395c4f1949ae0bfec936dd338d0d14ad03d4f0c9cd2000e32880bd9a15fc23fbe7e4a28d757a12a0734ecce568337bba09", 0xf7}, {&(0x7f0000001e40)="c109986bb06f21474ad841812f419dc130dbb7a385d634a522ba4dc03e4ebb5a6761b57bfd40a097a2beeea3021e1c355c4c67332d7885d80c627419f39dfd35200983ef9bbef67e453c0af318e52e55143d740ef8a6030c7f4aad141f579a1eb7636e1098d66e432eb2dc9447e0bbb6c9e94f43497d35a2f5739913129d76e1197e4ea5364ff9280adb8d1f97545f44b45c1a83fda141ac13fdf17f62eea5e3eea76acd2b1e41c45d92d6a8b96f7480e146f18e6c4ab6890ea4e169c50daf86be63fadff5855cba24f0ede37b565b72e7d3", 0xd2}, {&(0x7f0000001f40)="195f0bcee68b7fe33137433c594646a466fabc0d9b9cce373fb5aec150b282dc4163f01ada18d50fba6be30a83743a0b594fe500903955cbb6eb4fee5a4e61757c0d23cb89cd82b1c04a5ca67c934adcb4897c53e5c6db6742b393223f9afb2f02156f3da7573ecdd6d8ff0ff0edc85c64754cffcc7b50fab4b6dc0047df32119fd82c69449beb7fc8f17286a816e6051b1362cfc4a85d8a91faf3a60f4c1686031e949801ee90817954b09a5f9b94e6eca3a2a540792681b32852e106c33e4f879788931ce405da891ec784953e219431facbb37d19cd3d81", 0xd9}, {&(0x7f0000002040)="ce0f8a5e661731fb041420cca8fb3532de753b98ab52c836e3f8b2a9e7fbd2488599ee23d4c86dc68a4859548167f5d77ac9cf73cc2cc03173222d8fa378984d325d4567c3b85f5157da6a967a347d5ee59d88a746b1", 0x56}, {&(0x7f00000020c0)="8fd628fc41211c4beb67b232c63ab7b4fdef56aad7e86258e9abbdb61ab4e8", 0x1f}], 0x7, &(0x7f0000002140)=[@dstaddrv4={0x10, 0x84, 0x7, @private=0xa010101}, @sndinfo={0x1c, 0x84, 0x2, {0x20, 0x4, 0x9, 0x4, r5}}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast1}], 0x48, 0x20000000}, {&(0x7f00000021c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002200)="533dc53d5c6ae7021e0706905c0bb4e8650f0420460c1279e8bf324db67e2342c71c98f089290b4d65506f80484fc0c9eafa82a1d049d32140292b2d5cec2267f40c8bb2a341749fab9f2274fcaeb3e10d35bcb13b82fc6c240431cb3217ee157a34292f1f91a751cd94e70169d20594be14c44eb4d2f85e04e0ba0f9c12804d1d11939b088fa036ee88b082ca528d95989114ccc457af08df891499751f8552c3059c449f10873f28dbd03e118eac12ff7f7547b49a1247d60f01b9806664cf19001332e8b519008d3d35887cbe4c7f7b17350f97220d96fff59c1944f2ed", 0xdf}, {&(0x7f0000002300)="e5953be1dbf9360a72edfd694256161fbb60146d18c2b463d17b341284669ebd00c4121d3264de79c8730565b8f715035a68de317bfd6a79c9b90673eb2474c788e5c26395dfc193ac03ab90ada8ffe606a7138fd2636222abbf615d0cb3d7a43ca638e1bbf4f443686a5107874429c914817416046cefb2933f06969c57ff3c", 0x80}, {&(0x7f0000002380)="a7eda23074823a76e081376ed46be859b82c0d0e82ec1ff1ee064470bf19d89e8c39e0119bd7002b019469167b811b0471ba63efa94e7bb93dab2b1f3f4b74985304f6024201b726f3e5ea1de7c274a5d357036d20779b433a674c03d5dfae96ebe3c037b4c4d1e5eae5fd629b42e59d34a8ebc895327f57ec5739600d7522a2d7c79d8e84e4150505d46eb31a5bbcdd9f5bb502e90ccd35db7715b2fa2d8d63d6fbfcf7921bcc42b3637fdd95dbfd3a45767993314649068dc7b1be1748381ea27c57e5941372e725838474dabe", 0xce}], 0x3, &(0x7f00000024c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x60f7, 0x202, 0xffffffff, 0x3f, r8}}], 0x1c, 0x10000}, {&(0x7f0000002500)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002540)="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", 0xfe}, {&(0x7f0000002640)="c4b688a65e278ce94019cbe614be30e889c499cb7a45ad1ab762445c1c9182364f94515ec9fd2322c5c84091c2b9e4f7609e5a6fd7e1a9fb078efe62d12b8f2ac139b9aa5733d53c454834191691af9c43f992386c8ba9cd7664a075", 0x5c}, {&(0x7f00000026c0)="106fd21eda4d21cb8afa618cad7fe2c8442a02c08fbb7a0786bdf66b368987d7968f41f65ae01c7ec7ae9cf06e46cfaeb4aac845e191a5d72cd47b8f9da3f75fc4df8a99bace1c480fd256bf9702de51c5a807decff447016c4eee87fb2376a729d1c30e4dd2e9d3d6b0e09c3b281acae32d4b8f5cec85bce738a7968e66568c9cba3fff1178bb53fb760afb75220ee40e1f5cb40edff0cef34f6461f3cb7cc24745f8df23aa8b67fafd24ca575619b09245d6fb5889d575", 0xb8}, {&(0x7f0000002780)="0c0ec47151ee190f78a77b11a7fa1c3a959843d2cd6d3cc9db2a3d06311228ac96e70e38c38825a814dbe799f62a394431268d93e41f73868058ee1afe8c4bfde292ec150faeaa39217d4c5b012121d9fa67de941c893b2f9aef0ad5c367564cbb8951097d3224601b67ef6a6ae1e415b86fb7f7ad80f8b3633c0ec2024d1b8b6f8cd8070796b3d6d77ed5f6d9bb1a77e6dc3d051c4d43230545a064414cb6dabd3bccd7691dc4daf14887b4d691da5758", 0xb1}, {&(0x7f0000002840)="550dec03ad91e414274dbf06e7337e30780d07f222615bb5f35b4405519088e7f8b6a161a027099aee724f6732fbd8a1b859d039504574c234618cd7f1148f09185c90696a220eb39042ce47e5a496e8ce37474603f9ed891e43764abaea8a425bbc295e02fc68ba55711d408f351b6dd07e348e7be6cab40357d3c413f7c7bfd29eeb9adcb72a227bcfc0c20789b42defa9d6fc2cde807b033fa617e4f6511cfe997244049cc2fa75b983663517f960cb6c1e8c8d64ed2ef8883096dd7d433600ded17ecff3499965726fe2778a9a46216eb9b15ebb6fe3fe48954fa4851e87a44b8f45", 0xe4}, {&(0x7f0000002940)="7ec34f1fbbec9154f616", 0xa}, {&(0x7f0000002980)="fe52676bee3cad42883d1e941b9420846aadc28e3b9487468ee2b4797ae54ee25e8ead62dcd6e9b0742d022ce523d64dd3b40732e1c7d7d4a3f588e7acd8403b1b6e4451a9c0c90efe35da2a676161af08458c762f824f13d3148b3732ea1f9fb7", 0x61}], 0x7, &(0x7f0000002a40)=[@dstaddrv4={0x10, 0x84, 0x7, @local}, @authinfo={0x10, 0x84, 0x6, {0x8000}}], 0x20, 0x76275f83609f773a}], 0x5, 0x40) [ 470.843939][ T28] usb usb2-port1: attempt power cycle 07:29:24 executing program 3: unshare(0x8000400) r0 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000001040)='system_u:object_r:dbusd_etc_t:s0\x00', 0x21, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc04c5611, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x70000, 0x1, {0x77359400}, {0x3, 0x8, 0x7, 0x2, 0x1, 0x88, "dc20b2eb"}, 0x60f1, 0x4, @fd=0xffffffffffffffff, 0x44e5}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ff60, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000100)) poll(&(0x7f00000000c0)=[{r0, 0xa0}, {r1, 0xc008}], 0x2, 0x9b) 07:29:24 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, r6, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000003c0)={0xa00000, 0x8, 0x4, r5, 0x0, &(0x7f0000000340)={0x0, 0x100, [], @value64=0x100000001}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x6, 0x8, {{0x20, 0x4, 0x0, 0x1f, 0x80, 0x68, 0x0, 0x64, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 471.368125][ T29] audit: type=1400 audit(1598599764.758:16): avc: denied { relabelto } for pid=11326 comm="syz-executor.3" name="TIPC" dev="sockfs" ino=39143 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dbusd_etc_t:s0 tclass=socket permissive=1 [ 471.592900][ T28] usb 2-1: new high-speed USB device number 9 using dummy_hcd 07:29:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c000038000280050009000400000014000300fe"], 0x70}}, 0x0) 07:29:25 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r9, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r9, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000040)={r8}, &(0x7f0000000080)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="0e23eaef7fe1fc245e376643b658857353ebd93d7b811417186e1fbfac467d50c26a304323a08bec3fc3ac45355c8348061cdf594994ba908f761174e1375a02503dc9808daa5198cf873315b6c5c60946d0832360b34e261379704db58189f966c2bb4af439fc6a12ae286cad2e1698d8ff8bc72011556498a54d156617a1818002b8124f64895bae008b5abff8e4cb5b1d0e4c06406572bb44f32391d7191e9de9ff8e5182bb00db05100364c20644584fdc1b2d9a894f081a44d23fd2001fe8850d9f1b7a5d25d6ae452eab16170558c40239dc755d10f1222b2f33e98f320e0c3c89c40fa84b23c6f7179eb8fb66863233", 0xf3}, {&(0x7f0000000140)="b400d88ca3c3c24151a695a40b1bee5f3e7fb39000825bb0471534c64c95331a954aad9cc9f9", 0x26}, {&(0x7f0000000180)="4faf869be6cb73dd5496ccbcd6b111f82891d637b9b86f8ca79fef8c", 0x1c}, {&(0x7f00000001c0)="2f5c2a69861011184e68946d78162ac96a4a967da5403c6b8e990131b1d225d306d3eee44d0c8b83925202a5ee", 0x2d}, {&(0x7f0000000340)="d2e305", 0x3}, {&(0x7f0000000380)="8c1497f4dfc457332e46c1693cff691e78e0bb8d751df66139a8fe5e1619c598179c4ef91d83e6fe9913d725cb941435ce274082b72855cfc879af84dc76f48c0d07562aa40523627a27900e96f9da131b322b5b7e70", 0x56}], 0x6, 0x0, 0x0, 0x41}, {&(0x7f0000000440)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000480)="78325af0512baeae0f1aa8a2134407096a8347805cba2a7c8a28b1c0c7f5958ac106b5821475fe0259437b3a2155fcdf70e98082da5b6d1cc3c57a12f115e5384cb363db7219ff2ccc25171e484a2e69e81a9e5662f22d7ffe3edfa17ada7d91ba", 0x61}, {&(0x7f0000000500)="903e755c475e22b075df1f8fa4d3adbfa5a28a0fe84140b1bd796d816c2422388fecd16874682aaa475abfc721c88ea09aaac022659aea2653944d36e46bf61700d7b88b098d8fb28ec7851c59b2b233714a048791d89994aa4f9ce099534268341d8151999cc3601d1df54fb774e91c4d54fc27750a515173164697", 0x7c}, {&(0x7f0000000580)="0a7268d9cc71d19090c0690e22c1fb257197c400cc853e57ce8b97ff76a173b4a7d3e8871c475fe3fc41c46d0dad7e73c0620d70a2d2a0f2c1c1b12e0797bc05028038c03a7feeeab8051f4571a5eea13fd21d8f42d599157c5909db097e8b64dea7b00ab24a6edc91174ad9e8712928c0ec643c2a5bff0fa65157566af3ad2a47a186b824969df7da08010cb15f879ae77c69ca19200a9f73570b842bab9332ec3f58338a9144f188c6f240ba17a03eb8823c899b61b80946f9f7e05badec3c6cf431777c", 0xc5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="e4bd8a780234a29c0401fedf4c0f161da472ba8b8d1b61d3da6de927cffabfd5c88bc643d81e4f02955c557a919e843f4851ca03781b4dd475b1c7d74ab20abe14aa8c0fda54325d0c0b23c5c67eb806891b60b5d0262d3c019f5eef1a3c911c8e39cfa90f4ed1a23edc931942770d14c3b971effe593aedb67376a6670ec212d9842a7530f8ef5472eea0ddda58ec35bfd5945d2ce25c7c5d6bd16920db1e4944b452000d2dfd4657336973ee4afc809bd9a04f4115f2353594bdbe2ad2c60a32783d087faba50fff982b9fa968", 0xce}, {&(0x7f0000001780)="59d2878e3a8e27bc37b9d29660de1f633881d4f3a6a41f2095f125a1d5ee2e7ea5843188906601a378d1c05916c15d658277417be530d4c8cdeb90ce51ba85f1e3c661e3e14b979fa7606d7cb318df2e85eb6dc161050a8a0432088d66ddf8c41f42df613afbb584d0841012908b8a87d96875a8b45c2967f55a6a08", 0x7c}, {&(0x7f0000001800)="598af7621febf91fc54ed3a19837dfb7c569cec42b62b580635650a1bc9ca96dd2c9b3b6e66f03210cac4b3a8654ad0c0e7408fc5bafe931ca48c53a63dc89c07c9dd4af44f54324e41bf49caf84df1691f6d0886955b8c70c3c", 0x5a}, {&(0x7f0000001880)="8d265c74af73d777c44c448776c27d5a2bc1f690e7d5372c3104cd1588c3255cc25327f4ab1aba34a45e90d4d1383352bad5b15ccb188539871f398daa64418d82f18e3bbe517dd8834a94b1e034bf651a2413a044bdeb8b9d2cec45dd90e9eb3e605e11a2083a9ad18cef9beaae4e14e17de7f4a1eb1abd20b1a55ab567959e376522c35524bc2178852f5f80", 0x8d}, {&(0x7f0000001940)="576097356cc99bf70ac982c06183af1f1154a0492054abd03156696db641df235156cc17e302fa97c287fe20c42d20b1af", 0x31}, {&(0x7f0000001980)="7ff55be08c3690ee4d7d209c7c7272f9980c8bd53572987e6227ddd90b93f55ed9778018a8845ee291", 0x29}], 0xa, &(0x7f0000001a40)=[@sndinfo={0x1c, 0x84, 0x2, {0xb4b6, 0x0, 0x40, 0x65}}, @dstaddrv4={0x10, 0x84, 0x7, @multicast2}, @dstaddrv4={0x10, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x10, 0x84, 0x6, {0x2}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0xddf}}, @authinfo={0x10, 0x84, 0x6, {0x7}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x3, 0x1, 0xe8, 0x101, 0x9e80, 0x8a, 0x2}}, @sndrcv={0x2c, 0x84, 0x1, {0x1000, 0x5, 0x6, 0x1, 0xffffffff, 0x5, 0x30, 0x10000}}, @sndrcv={0x2c, 0x84, 0x1, {0x9, 0x2, 0x8008, 0x0, 0x80000000, 0x6, 0x7, 0x6bd}}], 0xf4, 0x40}, {&(0x7f0000001b40)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001b80)="26b211a3a404dbc566ebf7464ac56748390bef3b0994402d7df64d9478b9bb97380bd2eca3ae6c6d54faf0d87b11a92bcd44dac0ff4330a25782d060101124968610ac643c82b55c8a7be09d45e9c4092c2414972a2b5a9899d0c66a3004e857839d7b34e234e6f471ceed108f94952d840356ce4b2dfdada0e0106c73634bd4342d169ff2d826c0a6aa037bddfec84dfb302fb6dd0835c2a5edc59597c83d279d461a342b63ee60ec3ebecc36bf2b5b8bdd015bb54ac8ca81b93fe9ed3da3c2b5f0087cbbb9009cccda254c9524a74560d6262020a40a2d415e7aa0ac3cec7f416a1f7490209f097c64104f5c9936", 0xef}, {&(0x7f0000001c80)="8d92e492b7041b2f0ea05a93c6d7978349bd03ca2f3fc52939f7daf3220f973aa69cc4ded90d8eba893be1bdf7829281f919e23280c51cb213d387417c0df9286be601181a2705da11ac37f21b9944c909cb9d01843ff4402f9108bfe44bb892382fb248adc20c8da60465d8c7d73845b305d5cea505994f29d4bae2d994a0612937fcc627bf18dbe1c018deca27d6ae21031a36eaff5ee08caf0b443193", 0x9e}, {&(0x7f0000001d40)="226d5ec3455db07671a3588857e8a8756b482554d33bb4ec3173f4e495b144a3a3256d024a068d6ea18bdcffec45f0aa50478f6a120878bbf1c96840e1e2071133588a066a1cdcbd1fef1573e0681f913bf8f036a7814a24ee8bc1b2fd2e49093e0712acd454d14022ee23c2c735f444de42110b65586b7106119a6592f52585f2126025a53ca20fbf46610af604fe211f5265944a3fcec743f4c7b0244dd625696f9a6505b5bd52ed87b5394068f377276debd2b36cb501de21fc126a8f5c5b419ea7c555aa395c4f1949ae0bfec936dd338d0d14ad03d4f0c9cd2000e32880bd9a15fc23fbe7e4a28d757a12a0734ecce568337bba09", 0xf7}, {&(0x7f0000001e40)="c109986bb06f21474ad841812f419dc130dbb7a385d634a522ba4dc03e4ebb5a6761b57bfd40a097a2beeea3021e1c355c4c67332d7885d80c627419f39dfd35200983ef9bbef67e453c0af318e52e55143d740ef8a6030c7f4aad141f579a1eb7636e1098d66e432eb2dc9447e0bbb6c9e94f43497d35a2f5739913129d76e1197e4ea5364ff9280adb8d1f97545f44b45c1a83fda141ac13fdf17f62eea5e3eea76acd2b1e41c45d92d6a8b96f7480e146f18e6c4ab6890ea4e169c50daf86be63fadff5855cba24f0ede37b565b72e7d3", 0xd2}, {&(0x7f0000001f40)="195f0bcee68b7fe33137433c594646a466fabc0d9b9cce373fb5aec150b282dc4163f01ada18d50fba6be30a83743a0b594fe500903955cbb6eb4fee5a4e61757c0d23cb89cd82b1c04a5ca67c934adcb4897c53e5c6db6742b393223f9afb2f02156f3da7573ecdd6d8ff0ff0edc85c64754cffcc7b50fab4b6dc0047df32119fd82c69449beb7fc8f17286a816e6051b1362cfc4a85d8a91faf3a60f4c1686031e949801ee90817954b09a5f9b94e6eca3a2a540792681b32852e106c33e4f879788931ce405da891ec784953e219431facbb37d19cd3d81", 0xd9}, {&(0x7f0000002040)="ce0f8a5e661731fb041420cca8fb3532de753b98ab52c836e3f8b2a9e7fbd2488599ee23d4c86dc68a4859548167f5d77ac9cf73cc2cc03173222d8fa378984d325d4567c3b85f5157da6a967a347d5ee59d88a746b1", 0x56}, {&(0x7f00000020c0)="8fd628fc41211c4beb67b232c63ab7b4fdef56aad7e86258e9abbdb61ab4e8", 0x1f}], 0x7, &(0x7f0000002140)=[@dstaddrv4={0x10, 0x84, 0x7, @private=0xa010101}, @sndinfo={0x1c, 0x84, 0x2, {0x20, 0x4, 0x9, 0x4, r5}}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast1}], 0x48, 0x20000000}, {&(0x7f00000021c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002200)="533dc53d5c6ae7021e0706905c0bb4e8650f0420460c1279e8bf324db67e2342c71c98f089290b4d65506f80484fc0c9eafa82a1d049d32140292b2d5cec2267f40c8bb2a341749fab9f2274fcaeb3e10d35bcb13b82fc6c240431cb3217ee157a34292f1f91a751cd94e70169d20594be14c44eb4d2f85e04e0ba0f9c12804d1d11939b088fa036ee88b082ca528d95989114ccc457af08df891499751f8552c3059c449f10873f28dbd03e118eac12ff7f7547b49a1247d60f01b9806664cf19001332e8b519008d3d35887cbe4c7f7b17350f97220d96fff59c1944f2ed", 0xdf}, {&(0x7f0000002300)="e5953be1dbf9360a72edfd694256161fbb60146d18c2b463d17b341284669ebd00c4121d3264de79c8730565b8f715035a68de317bfd6a79c9b90673eb2474c788e5c26395dfc193ac03ab90ada8ffe606a7138fd2636222abbf615d0cb3d7a43ca638e1bbf4f443686a5107874429c914817416046cefb2933f06969c57ff3c", 0x80}, {&(0x7f0000002380)="a7eda23074823a76e081376ed46be859b82c0d0e82ec1ff1ee064470bf19d89e8c39e0119bd7002b019469167b811b0471ba63efa94e7bb93dab2b1f3f4b74985304f6024201b726f3e5ea1de7c274a5d357036d20779b433a674c03d5dfae96ebe3c037b4c4d1e5eae5fd629b42e59d34a8ebc895327f57ec5739600d7522a2d7c79d8e84e4150505d46eb31a5bbcdd9f5bb502e90ccd35db7715b2fa2d8d63d6fbfcf7921bcc42b3637fdd95dbfd3a45767993314649068dc7b1be1748381ea27c57e5941372e725838474dabe", 0xce}], 0x3, &(0x7f00000024c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x60f7, 0x202, 0xffffffff, 0x3f, r8}}], 0x1c, 0x10000}, {&(0x7f0000002500)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000002540)="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", 0xfe}, {&(0x7f0000002640)="c4b688a65e278ce94019cbe614be30e889c499cb7a45ad1ab762445c1c9182364f94515ec9fd2322c5c84091c2b9e4f7609e5a6fd7e1a9fb078efe62d12b8f2ac139b9aa5733d53c454834191691af9c43f992386c8ba9cd7664a075", 0x5c}, {&(0x7f00000026c0)="106fd21eda4d21cb8afa618cad7fe2c8442a02c08fbb7a0786bdf66b368987d7968f41f65ae01c7ec7ae9cf06e46cfaeb4aac845e191a5d72cd47b8f9da3f75fc4df8a99bace1c480fd256bf9702de51c5a807decff447016c4eee87fb2376a729d1c30e4dd2e9d3d6b0e09c3b281acae32d4b8f5cec85bce738a7968e66568c9cba3fff1178bb53fb760afb75220ee40e1f5cb40edff0cef34f6461f3cb7cc24745f8df23aa8b67fafd24ca575619b09245d6fb5889d575", 0xb8}, {&(0x7f0000002780)="0c0ec47151ee190f78a77b11a7fa1c3a959843d2cd6d3cc9db2a3d06311228ac96e70e38c38825a814dbe799f62a394431268d93e41f73868058ee1afe8c4bfde292ec150faeaa39217d4c5b012121d9fa67de941c893b2f9aef0ad5c367564cbb8951097d3224601b67ef6a6ae1e415b86fb7f7ad80f8b3633c0ec2024d1b8b6f8cd8070796b3d6d77ed5f6d9bb1a77e6dc3d051c4d43230545a064414cb6dabd3bccd7691dc4daf14887b4d691da5758", 0xb1}, {&(0x7f0000002840)="550dec03ad91e414274dbf06e7337e30780d07f222615bb5f35b4405519088e7f8b6a161a027099aee724f6732fbd8a1b859d039504574c234618cd7f1148f09185c90696a220eb39042ce47e5a496e8ce37474603f9ed891e43764abaea8a425bbc295e02fc68ba55711d408f351b6dd07e348e7be6cab40357d3c413f7c7bfd29eeb9adcb72a227bcfc0c20789b42defa9d6fc2cde807b033fa617e4f6511cfe997244049cc2fa75b983663517f960cb6c1e8c8d64ed2ef8883096dd7d433600ded17ecff3499965726fe2778a9a46216eb9b15ebb6fe3fe48954fa4851e87a44b8f45", 0xe4}, {&(0x7f0000002940)="7ec34f1fbbec9154f616", 0xa}, {&(0x7f0000002980)="fe52676bee3cad42883d1e941b9420846aadc28e3b9487468ee2b4797ae54ee25e8ead62dcd6e9b0742d022ce523d64dd3b40732e1c7d7d4a3f588e7acd8403b1b6e4451a9c0c90efe35da2a676161af08458c762f824f13d3148b3732ea1f9fb7", 0x61}], 0x7, &(0x7f0000002a40)=[@dstaddrv4={0x10, 0x84, 0x7, @local}, @authinfo={0x10, 0x84, 0x6, {0x8000}}], 0x20, 0x76275f83609f773a}], 0x5, 0x40) [ 471.713417][ T28] usb 2-1: device descriptor read/8, error -71 07:29:25 executing program 3: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000540)="1019a942307165c81b9502047cd4ed7f5f3fc83c04358cac7656a172c9a31063a9e592a0af3aebc700517afce34cfef6ec1ae77b885d521ba09599a974b630b0b437023cc9c9e995d9f9a8ca3a6c6cc776a47f8ba9444a775bbe55bbf0c88311f191cfcda4d10908b052216c39221f602990bfad0cfc3094d273b6d8d4917e273a04000000f24a8e67e30da8ca589ef52f33e2f41f10d8749396618bf313cb783695c4b5", 0xa4, 0x3}, {&(0x7f00000001c0)="ef7a229a5e8d9e10e08d78ec21bb225b6cc7200660548dd5b7b7d0f2a5cc2504344e6161e9f7ca43afd30b68e6c11b401005b33008a86920deb9cbbf2214763d702d7c6acb985758dbda81a9b96e8cf3d6a58822cd896c360b2caf8d8493ff31b677889524003287261639a1a1ba9a2cbb55bfdc59851be9eceb2ee31b80f802eac43ce5c0c1acfe79f5acf163d46d7b7da69c81657158794ae572e82e33e8e9f9d91b6db405fa1e938c1dc367596c7e8e3a08becaf2d43b7d754d62ef584dfe34d39f2f9084a71c88f489c2b6bf1a48d2dfd75f354d15419fdda436d34fc1971a", 0xe1}, {&(0x7f00000002c0)="6977d8c8cd267868a79c8f137b66229e5cc12ae0ce8f02306f9f68325e6fbe9c5ac0bdd3d6119f7063b7d8a1b4c88777190298c13379ff57845314cb5d1fecad5ccf6ff72217ef4e82d46386651972e46bbc7d6e8a6281c506d9cbeb4f4ae23221d8747bda611f20ca45f7af6675e3e745bf5aef6626990a406b564d703506ede5d6d2d22d2dcee2581a6fc9d60c8c023d62d693840ed1601ea2cf90ff1e735044677e5d266b3314b3fb1581abc23e5c71b595f897d7437a639889c34e4e3b94b5af2ca559cd94fa23", 0xc9, 0x6}, {&(0x7f00000003c0)="9212eda4d5bf6782159f54b200fb643904990b50666b2d3b7e9413686c94b930c8ff4b2a3580622bac7cc56900e5880109a02f1e33b69bbf8d06012ab696a3bb5e427081930792e42f1e410e9e24ab6d15b77feb9bbf578541613137ff0241c7a4f786888428330ca986d639cb4588348316332c94a72fd72c15d13b05fe5aec594e19fe5e06259819da7359b698fb66047c94f20221c40db819a54322e40f989cbc9cf4f635420f9bede0563c0485c475beab7bab898206d16172b6a2fd0abda4b5c8789e53320231b97c59c1a04f3cd648cbbd549f", 0xd6, 0x7}, {&(0x7f00000004c0)="683f51091027a1729da8a4413066e01a021b1937f35e4e6623cb191fecbb564cba8546c1643db03959ff4a72ab4c108ce645efeccbb38e5e6f", 0x39, 0x3b6be001}], 0x201081, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000200fc101229010040000102030109024a000101000000090400004302060000052406000005240000000d240f0100000000000000000006240700000009058103ff03000000090582020004000000090503020002"], 0x0) [ 471.932573][ T28] usb 2-1: device descriptor read/8, error -71 07:29:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x30, r1, 0x42b, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0xa, '\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20002800}, 0x20000000) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r5, &(0x7f0000000000), 0x10) bind$pptp(r5, &(0x7f0000000100)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450a, 0x0, 0x1, 0x0, 0x0) [ 472.017594][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 472.027318][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 472.148446][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 472.158048][T11351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e9080000000000000064516012857d445602af835297c84c211911e5fadece87db5a8894f36a19f7ba231dacc61ef4b8524330461a0db46abb795fdcd89a50852f130a289058c679d9b7b4a8d431960180e4c751345f328c02a8ba6c2a", @ANYRESOCT], 0x200}}, 0x20004084) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803", 0xe, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) creat(&(0x7f0000000200)='./file0\x00', 0x4) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r5, 0x8}, &(0x7f00000001c0)=0x8) r6 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r6, 0x3, 0x13, &(0x7f0000000080)=""/11) r7 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) socket$xdp(0x2c, 0x3, 0x0) [ 472.449806][T11358] tipc: Enabling of bearer rejected, illegal name [ 472.599165][T11360] tipc: Enabling of bearer rejected, illegal name 07:29:26 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r9, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r9, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000040)={r8}, &(0x7f0000000080)=0x10) [ 472.753015][ T3219] usb 4-1: new high-speed USB device number 4 using dummy_hcd 07:29:26 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) sendto$netrom(r3, &(0x7f0000000100)="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", 0xfd, 0x4, &(0x7f0000000240)={{0x3, @default, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 472.997295][ T3219] usb 4-1: Using ep0 maxpacket: 16 [ 473.134527][ T3219] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 473.145651][ T3219] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.156864][ T3219] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 473.167104][ T3219] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 67 07:29:26 executing program 2: ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0x5802, 0x294, 0xcc, 0x294, 0x1b0, 0x378, 0x378, 0x1b0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc, 0x52020000}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x10}}}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x7]}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xfffffe29) 07:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100005070000fa00000000000000001a", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c00010076657468"], 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fea6c92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3516a5ca}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x48885) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x82802, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x23) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xfffeffff, @empty, 0x524}}}, &(0x7f0000000180)=0x88) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES32=r0], 0x44}}, 0x88a4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r9}}, 0x20}}, 0x0) 07:29:27 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r8, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r8, 0x1) [ 473.563053][ T3219] usb 4-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.40 [ 473.572353][ T3219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.580527][ T3219] usb 4-1: Product: syz [ 473.585010][ T3219] usb 4-1: Manufacturer: syz [ 473.589742][ T3219] usb 4-1: SerialNumber: syz 07:29:27 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12222}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3b3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040020}, 0x40) [ 473.759371][T11357] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.771224][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.030676][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.127006][ T3219] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 474.134680][ T3219] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 474.147439][ T3219] cdc_acm 4-1:1.0: ttyACM0: USB ACM device 07:29:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) syz_emit_ethernet(0x114, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000086dd66d86e6400de1100fe880000000000000000000000000101fe80000000000000000000000000001233008058670000004e1d4e2300d690782088fe99fb47452addb0cd94f450870fa5867dbc52a8a4862a7e142a13fc8ee4d92b4cd8a593d0336d65f4f286177c522c122857a3fb942e949a72ba59e6ce75cb8b9cfed771e1f579e6a403b322e4233867a08b9fa4f5e092527df6437a7de32175b066a08fb3f610def67c4ac694215059f1290eba39ddea4abac2f7094dedc16457f3eb7dd324ee5377ff4519425164bb9d7f55380d3fe9b6b073b149b2852ee6e9b44465ac4ea9f60ace969eb30ff1127ffb028e51a68ffdb7294a3898362a92bd8ec2b7cc45f7aab7e2b56837b035e495e6fd759d293093c6f8"], 0x0) 07:29:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) openat$cgroup_int(r1, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 474.441479][ T3219] usb 4-1: USB disconnect, device number 4 07:29:27 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r8, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 07:29:28 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x620481, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000100)=0x3) 07:29:28 executing program 3: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008000}, 0x20004000) sendmmsg$alg(r1, &(0x7f0000000140), 0xffffffffffffff68, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x9, 0x3}}) [ 475.089326][T11461] IPVS: ftp: loaded support on port[0] = 21 07:29:28 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f00000000c0)={0x2ab4, 0x0, 0x400, 0x3e4551d593bf57fb}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x1998, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1968, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x431}, @TCA_FLOW_ACT={0x1130, 0x9, 0x0, 0x1, [@m_ipt={0x112c, 0x11, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1098, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x57, 0x6, {0x5, 'security\x00', 0xfd, 0x7, "353486991cedddfeea76b857f97c2efd8ab24f09fa97b8896440bfa048b088a746239bf06eec992fb6b5ed2a23"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2dd}, @TCA_IPT_INDEX={0x8, 0x3, 0x49}, @TCA_IPT_TARG={0x102a, 0x6, {0x400, 'nat\x00', 0xe0, 0x1, "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"}}]}, {0x6f, 0x6, "5743228d3658ee609ec716ffb4df811572a076e2acb658505cfb19e9afc6a1fa1b17a160fe5ece17e953dc1718895dff1f831ee43edfecc28613f665ce448c7a51208f1fc89ca6790e527404d7a9c2008f215142ea30ec939f4812eb4596207420dca32e61d64ee3c4e950"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_POLICE={0x814, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x5, 0x8, 0x7, 0xffffffff, 0x2, 0x9, 0x8000, 0x9, 0xf33, 0x5, 0x5, 0xd65, 0x1, 0x7f, 0x6e87, 0x0, 0x7, 0x1635, 0x2, 0xffffff16, 0x1, 0x0, 0x5, 0x101, 0x20, 0xfffffff9, 0x4f3, 0x9, 0x72da, 0x3, 0x10000, 0x1, 0x2, 0x3ea, 0x4, 0x200, 0x6, 0x8001, 0x5, 0x7fff, 0x80000, 0x37, 0x0, 0x2c, 0x4, 0x40, 0x5, 0x0, 0x6, 0xd268, 0x7ff, 0x1, 0x8, 0x9, 0x81, 0x1, 0x3f, 0x800, 0xd0ba, 0x5ac5, 0x2, 0x401, 0x2f59361c, 0x9, 0x993, 0xdc, 0x3ff, 0x432, 0x4, 0x2, 0x7fffffff, 0x7, 0x3, 0x1, 0x25, 0x1cd, 0x4, 0x3f, 0x8, 0x5, 0x50, 0x5, 0x4, 0x123d7826, 0x3f, 0x8, 0x5, 0x1, 0x3, 0xffffffff, 0x20, 0x401, 0x9243, 0x7fffffff, 0x7, 0x2, 0x1, 0x2, 0x7, 0xfffffffd, 0x0, 0x9, 0x8000, 0x8e, 0x1, 0x4, 0x48228714, 0x1, 0x8, 0x8d, 0x2c4, 0x0, 0x0, 0x8, 0x3, 0x6, 0x7ff, 0x1, 0x0, 0x800, 0x6, 0x80000000, 0x1, 0x3, 0x1, 0x6, 0x1, 0x8, 0x800, 0x8, 0x6, 0x20, 0x3, 0x9, 0x4, 0x80000001, 0x3f, 0x0, 0x1, 0x1ff, 0x20, 0x1, 0x1, 0x101, 0xffff, 0x7f, 0x1ff, 0x20, 0x1, 0x0, 0x101, 0x3f, 0x8, 0x8, 0x0, 0x3226, 0x1, 0x8001, 0x1, 0x7, 0xc2d7, 0xf77d39b9, 0x5, 0xfffffffc, 0xfffff357, 0x7, 0x9, 0xa761, 0x7, 0xfff, 0xca74, 0x4, 0xffff7fff, 0x70, 0x9, 0x1000, 0x7fff, 0x2, 0x5, 0x8, 0x0, 0x81, 0x7, 0x2, 0x7, 0x4, 0x7fff, 0xdf44, 0x7fffffff, 0xef0, 0x101, 0x9, 0x800, 0xffffff69, 0x5, 0x7f, 0x4, 0x10000, 0x81, 0x53, 0x10000, 0x3, 0x10000, 0x5, 0xac04, 0x3, 0x7, 0x800, 0x4, 0xc00000, 0x6, 0x2, 0x276131cc, 0x9, 0x20, 0x5, 0x2b5, 0x5689, 0x100, 0x0, 0x0, 0xef9, 0x5, 0x401, 0x0, 0x3, 0x6, 0x5, 0xfff, 0x73e6d6e1, 0x3, 0x3, 0x1, 0x40, 0x6, 0x7f, 0xfffffffe, 0x0, 0x10001, 0x40, 0x3ff, 0x4, 0x7, 0x3, 0x6, 0x0, 0x0, 0x9, 0x3, 0x51fc, 0x2, 0x10001, 0x10000, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x6ac7, 0x9f0, 0xfffffff7, 0x5, 0x40, 0x10000, 0x7fff, 0x0, 0x8, 0x2ffa, 0x4, 0x4, 0xa65, 0x1ff, 0xb, 0x8000, 0x3ff, 0x1ff, 0x1, 0x3f, 0x8, 0x9, 0x7, 0x0, 0x4, 0x7fffffff, 0x81, 0x3, 0x3ff, 0x5, 0x3, 0x1, 0x9, 0x1, 0xc2, 0x4, 0x5, 0x1f, 0x9, 0x7, 0x6, 0x800, 0x8, 0xfffffbff, 0x5, 0x81, 0xffffffff, 0x7, 0x8990, 0x81, 0x7, 0xfff, 0x0, 0x3ff, 0x35800, 0xc11, 0x40, 0x8, 0x14c, 0x7, 0xa6, 0xf1, 0x3f000, 0x19c8, 0x1000, 0x7f, 0x3ff, 0x9, 0x8001, 0x200, 0x1, 0x81, 0x3, 0x800, 0xfa, 0x5, 0x80000001, 0xfffffff8, 0x4, 0xff, 0x3, 0x8, 0x6, 0x6, 0xffff, 0x80000000, 0x1, 0x9, 0xff, 0x6, 0x1, 0x3, 0x32a, 0x40, 0x2, 0x3, 0x7f, 0x3, 0xff, 0x8, 0x2, 0x8, 0xb3a, 0x4, 0x4, 0x8, 0x4, 0x7, 0x0, 0x9, 0x4, 0xfff, 0x0, 0x3, 0x1, 0x10, 0xfa, 0x2, 0x25b86d33, 0x401, 0x1ef4, 0x3, 0x1000, 0x10040, 0x3, 0x1, 0x3f, 0x8, 0x6, 0x200, 0x5, 0x3, 0x44c3, 0xf49, 0x218b, 0x5, 0x7, 0x23, 0xb8, 0x8, 0x9, 0x1, 0x4, 0x9, 0x6, 0xfffffffb, 0x21, 0x1ef, 0x2, 0xffffffff, 0x3, 0xa0c8, 0x0, 0x3f, 0x9, 0x9, 0x3f9d, 0x0, 0x56b3, 0xfffffe00, 0x17, 0x54fa, 0x1590000, 0x800, 0x6, 0x200, 0x101, 0x7, 0x3, 0x7, 0x2, 0x4, 0x1, 0x1, 0xf5ee, 0x0, 0x100, 0x28218, 0x40004000, 0x5a, 0x8, 0xfff, 0x5, 0x81, 0x7f, 0x7f, 0x7f, 0x0, 0x8, 0x8, 0x9, 0x8, 0x4, 0x400, 0xafe, 0x100, 0x1, 0x5, 0x0, 0x10001, 0x9, 0x401, 0x24000000, 0x400, 0x1, 0x5, 0x3, 0x8, 0x5, 0x1000, 0x81, 0x7fffffff, 0x2, 0x0, 0x0, 0x7, 0x0, 0xdcc, 0x10000, 0x3, 0x1000, 0x0, 0x80000000, 0x0, 0xb3, 0x55, 0x0, 0x6, 0x9, 0x93a6, 0x0, 0x7fff, 0x7, 0x3, 0x28fec6e1, 0x7, 0x3, 0x80000000, 0xbbd2, 0x40, 0x1, 0x4, 0x4, 0x4f6a4570, 0x401, 0x80000000, 0x80000000, 0x80000000, 0x1, 0x6, 0x7, 0x80, 0x17119bcd, 0xa92e]}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}]}, 0x1998}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x100000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x214, 0x24, 0x1, 0x0, 0x0, "", [@nested={0x203, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="09865288490784bf6eb5cfd9176af023960304b9df2770a00822cd5fe8732add791325df2db12df40c6569d19403f7c76507b4e57e3ee404586347fcaaff5cdf59746fce11fba193e2f10d378be4a5279367dcc222dd8a0d219c9ebcc9f9fe6237245ea6ad4230dfa8ea0d5b4d049c2ae271b62c332293392f755c57b98443a9526fbce82593ee98e259a4dc227ae381bc53c6e2c7b73fa997455dc4f9b2aecdeaf0fe010b50e128cd87df7315a9004a3b614dc660398cf0aed09a2a", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4}, @generic="701e24ca28253573ba650140cb79029df1d83509bea5372c7ac61288d16303bb4a227e6e2fd457397dfbb06795f04c9124091e11d75d5345a4ad8af68d3c5314d6ffd724dfe2d5b36f7b7bb7e154dc0c1db9853141059f717b72f87f0739d72252f88bb02e067fc9775e3f691632486f7edc7141737d48", @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x7, 0x0, 0x0, 0x0, @str='*s\x00'}, @typed={0x99, 0x0, 0x0, 0x0, @binary="c43f40af0f385ee56d193ab4ae5d050faf488fd98cf9f6292f0b79e9d630e020ee370e67c86abed154792b932d9bc1ed3ed4bc31540eca2b6d549252f561a10705a370a85922c4cc3068b5ed65495d84ef34ad013b40ddcc1c869a7fb3c233500a604c208f3e2375f9901e64c85c4675a7945e66063db62702f6d5e3f820e425218771d67912f65524820f372d4012f558d1511fa5"}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x214}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:29:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) openat$cgroup_int(r1, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 475.490840][T11488] IPVS: ftp: loaded support on port[0] = 21 [ 475.688361][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.785546][T11495] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:29 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet_sctp(0x2, 0x800000000000001, 0x84) 07:29:29 executing program 3: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000540)="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", 0xffa, 0x6}], 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='\\id=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,grpquota,discard,resize,\x00']) unshare(0x0) [ 476.288302][T11526] IPVS: ftp: loaded support on port[0] = 21 07:29:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = syz_open_dev$vcsu(&(0x7f0000000380)='/dev/vcsu#\x00', 0x6, 0xc040) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x120, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x14}, 0x54000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dd070000000000000000300000000c0000007063690011fcffffffffffffff30303a31302e3000000000"], 0x30}, 0x1, 0x60}, 0x0) 07:29:30 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 477.003630][ T1627] tipc: TX() has been purged, node left! [ 477.033740][T11552] jfs: Unrecognized mount option "\id=0x0000000000000000" or missing value 07:29:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) openat$cgroup_int(r1, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 477.163656][T11552] jfs: Unrecognized mount option "\id=0x0000000000000000" or missing value 07:29:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg0\x00', r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@bridge_delvlan={0x48, 0x71, 0x400, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x9}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x14, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}]}, 0x48}}, 0x4008080) 07:29:30 executing program 2: openat$ttynull(0xffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x4000, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000002440)=[{&(0x7f0000000100)="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", 0x1fb, 0x5}, {&(0x7f0000001100)="6268e39aba024c35480bae36fe917edd", 0x10, 0x6}], 0x8800, &(0x7f0000000000)) 07:29:31 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) socket$inet(0x2, 0x80001, 0x84) [ 477.934211][T11579] IPVS: ftp: loaded support on port[0] = 21 07:29:31 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r1, &(0x7f0000000000), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r3, 0x7, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r3, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x4010}, 0x4004004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000700)={r4, 0xed, "e3adf7aae2b9653e612da207b57512ec0a6a5f67f5acf9180dd0960ad3e91fdea0fbff7e857cdfbba0bd56a2d366d25c44a6fc8615da5b6c48fefbb7b49a02e275c0e064005568f6ce912d6e3fa0bb3569edb6d02a4f52b71e6685bbdc4d788bc7cdb9ea3997c8dcc993a3cc845e627821097c47de4926382b129c8679e4c396b83e27f14bbb7ae5c385a1c741a462cff68738bb6d49532324582c7474376b25499bbc90a4ab04257b4c09d7e4fd3b84cf823cf7cec5453e4fb4e8e0580f7aab8717f0aac96edc6c8e6bde458e1ce760fae9433b873e8a1ae248888ff633ae2f7fde51c143f96f2385c10edfed"}, &(0x7f0000000800)=0xf5) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r6, &(0x7f0000000000), 0x10) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000480)={{0xfffffffe, 0x3}, 0x8}, 0x10) read(r0, 0x0, 0x0) r7 = creat(&(0x7f00000004c0)='./file1\x00', 0x52) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r3, @ANYBLOB="200027bd7000fbdbdf25170000002c000980080002000800000008000100020000000800010001000000080002000000ffff0800010001000000340007800c00040002000000000000000800020000000000000c000300ff070000000000004000058007000100696200001c000280080002005900000008000200050000000800040009000000080001006574680008000100756470000800010065746800"/174], 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) uselib(&(0x7f0000000440)='./file0\x00') 07:29:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000380)={0x6, 0x8, [0x0, 0x4, 0x0, 0x3f], 0xdbef}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000014002101000000000000000002010000", @ANYRES32=r4, @ANYBLOB="08000200e000000208000400ff"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000015000100000000000000000002000000131e55b38dc1f2515f037095ba6e2a3312ea4fd911b798708883a776fcdf186f1490f2c8a2cbffa5ed2224ab49fb8052c1a67872352223d2a10c2395b5de892311e96a399429d18ca743f76e9dd9d7037c726c2729ce37183e1798eae8", @ANYRES32=r4], 0x18}}, 0x0) openat$userio(0xffffff9c, &(0x7f00000003c0)='/dev/userio\x00', 0x400001, 0x0) 07:29:32 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x10) [ 479.041397][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.217146][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r1, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000180)=0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000002c0), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), 0x8) openat$cgroup_int(r1, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) socket(0x0, 0x800000003, 0xfffffffc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x407, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 07:29:32 executing program 3: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) getsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280), &(0x7f0000000040)=0x17) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x6b, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', 'keyring\x00'}, &(0x7f0000000200)=""/11, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r6, 0x0, 0x6}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={r6, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0xff, 0x6}, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000140)={0x5, 0x21, "d55db0eadc23712ed4511b92723119f9b2bca3da17b716e1ad4b43f0cc05bf68d5"}) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVe#:De', 0x0) 07:29:33 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0005000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 07:29:33 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) 07:29:33 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$minix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setreuid(r1, r2) socket(0x0, 0x0, 0x0) setreuid(0x0, r1) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) [ 480.145938][T11643] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 480.277911][T11642] IPVS: ftp: loaded support on port[0] = 21 07:29:34 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40801) syz_emit_ethernet(0xa66, &(0x7f0000000a80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'k^\x00', 0xa30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @remote, @loopback, [{0x2, 0x1c, "4af5ed2889818240dc00f9586dec836b24d9e09ba7e0fb6e4c019b4732fd79632c80bb666d8f5a808608b246fc603f877c685a675cb034a0ddb7eb3c38c032cd3ffb476625604425fcf538f900fe1e8620324a7bca06bff4240845a2a973ce2730239a4500fad8463ea3d15488ee45084422fdf2866cb0b6558965b498dad3dd1a5432899f0fabb29cba922f36f764b00cd3f01e326df76472497507404bfcbedc42a2ca950d30761a714b7aae774a9be298555b1515212289cf6ac35e7ea841c678a08c2734ef8978954ce5834d50ebc2a996fe612ecce8e3f13004a125a762ec04cafda5"}, {0x0, 0xc, "fec66e9673c146e28aadb1944f860641e8d1066a616aa6ea66d4e5a32a217c9e5b38d9a18e306363928312d03e4f56052d089037ab233aaf7985a5de3e1facc57a2cb994808c029227bd864b9be08c87b6af8095282104684c0ff2e40a8a"}, {0x0, 0x15, "4b4ccace0e2cd3e600b445f3d7d11a992e1cc9e9b220204daf71bfd2e65f462acc3205007c20bfbc2a3786e9115397d5d81b16c23c236454b22b3543ee787e0251976e87856d133c39f2273ada1a5b2cc8bdd362e5fe928dc28352c4af70fb0105000000d62eb2cd6ef02ca0e2b3e9ee4d4fe282d3b43e40211446c00866b139735ac95a41ef8a7a2735cc79a07484341b33f849c6b96c4db62f2c0e12cc438b5c29144c48371df6d55e"}, {0x0, 0x2000000000000055, "c21fbfd4293c4c2362ea4b3038efb9eaa2ea539cfbf1927a6e247af06611cb36074337fb4c22f15998978255d62a2b2ea7667b07ebfd0737df7f6a8c4b961c3cf16160929035fa424ed50b84b7c6ac6a7d68bc3a7e753e7568713d51ae8a8e16f4303dcd3e083eef3a56ae9d61c45586bd08fd6591921b4dedae300b7b404232e9cde672931e5141757d1eec5804316917717baeab4b424cded5ade5b239382f2a213bd839e14dfa084e2debbe87b2cb2f73dfa41346a0cc4900"/195}, {0x0, 0x2, "12c28128d032a47e8cc46a551f41f9f132704dd5"}, {0x0, 0xe7, "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"}]}}}}}}, 0x0) 07:29:34 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 07:29:34 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendto$rose(0xffffffffffffffff, &(0x7f00000002c0)="f9581d9a7705c41688164ea00a0233920a0002e607d265f12e9ef8645f8f2132c7a491fdb9ee54da3bc3289097eddee38c0fc0489d0b027fa445fd30e715108c8b4f06462f9325941eaf9f042d088fd977168549a688dcbc7fe00af5d9ad4c83212fb3356e0a1a2271dc7fca8ee08f2ae5ad7df16366118874c9b881e14a419617df93f4b00379be93f90cfb55f9f51b6dbaa6c7aeb003efd524d18d246836b019305b237c2bdae5e33e26ef311f7d5574fad66bc837bbaf5a6c3a535bffd7e457b212c029b2bc9c65f4525bfe7a6e17327eab67c88b87fdc9f6fd311cb2080c8a312f3e99b9a512c68c8651bfc4461f16211d66898be3773c0833", 0xfb, 0x10, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) 07:29:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x4045045) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x6161b0c2afca1577, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 07:29:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT=r0], 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200480, 0x40, 0x14}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4004240b, &(0x7f0000000100)={0x3, 0x70, 0x8, 0x9, 0x9, 0x7, 0x0, 0x5, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x100a9, 0x1000, 0x1, 0x7, 0x81, 0xf5be, 0xa72}) 07:29:35 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet_sctp(0x2, 0x800000000000001, 0x84) 07:29:35 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) dup3(r2, r1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 482.832471][ T8704] usb 3-1: new high-speed USB device number 12 using dummy_hcd 07:29:36 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 07:29:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x80300, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) [ 483.123150][ T8704] usb 3-1: device descriptor read/64, error 18 [ 483.195528][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:36 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$inet(0x2, 0x80001, 0x84) [ 483.459567][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.543302][ T8704] usb 3-1: device descriptor read/64, error 18 07:29:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syncfs(0xffffffffffffffff) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x458, 0x5019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0xff, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x7, 0x20, 0x1, {0x22, 0x234}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x140, 0xbc, 0x37, 0x3, 0x40, 0x49}, 0x20, &(0x7f00000000c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c39fdd8034ccd7372b48c92ba2b40973"}]}, 0x1, [{0x25, &(0x7f0000000100)=@string={0x25, 0x3, "fbfc42dc7a0e3ba4945f778ab9d7022067f18ec38746e875e1f31b0b0127f621acb91e"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "8f795022"}]}}, 0x0}, 0x0) [ 483.823118][ T8704] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 484.017567][T11654] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 484.112718][ T8704] usb 3-1: device descriptor read/64, error 18 [ 484.187268][ T1627] tipc: TX() has been purged, node left! [ 484.233524][ T1627] tipc: TX() has been purged, node left! [ 484.262461][ T8701] usb 2-1: new high-speed USB device number 11 using dummy_hcd 07:29:37 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000040)=0x78, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000080)={0x0, 0x80000001, 0x3, [], &(0x7f0000000000)=0x5a}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab56a6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 07:29:37 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 484.522368][ T8704] usb 3-1: device descriptor read/64, error 18 [ 484.633640][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.644796][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.652506][ T8704] usb usb3-port1: attempt power cycle [ 484.654920][ T8701] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 484.669455][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:29:38 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 484.868294][ T8701] usb 2-1: config 0 descriptor?? 07:29:38 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000100)={"19b7b47ef9958446acb23281d3596609", 0x0, 0x0, {0x5, 0x9}, {0x5, 0x1}, 0x9, [0x3f, 0x2, 0x6, 0xfffffffffffff000, 0x8, 0xffffffffffffffdd, 0x8606, 0x6, 0xfea6, 0x6, 0x9, 0x9, 0x9, 0x3, 0x0, 0x401]}) [ 485.212828][ T8701] usbhid 2-1:0.0: can't add hid device: -71 [ 485.219249][ T8701] usbhid: probe of 2-1:0.0 failed with error -71 [ 485.297576][ T8701] usb 2-1: USB disconnect, device number 11 [ 485.382727][ T8704] usb 3-1: new high-speed USB device number 14 using dummy_hcd 07:29:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="25bca2740a0000002734fa0095e0612687ecb86a548802a908000000030000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6ce33fb681e76b75d1472a7b10aabbf4084ec8b22133716d03913fe773bff9a8032cba32731e5498e4c059ba7996c68f543207dc9298c7accc3abf482614972a099cf535e044f4f7d55c5ac24637ffe5f95175727b348a872d2864816118d1efe9d800f44852c679ccc5c69c6ca9aba7eb268f323fa7b237de3beb6c5ba0429cedd5dda2ae"]) ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f00000000c0)=0x1000) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x2, 0x4, 0x1, "325b4cbc57723c21f599e4cda97a05cb150fe90e193c988be075db43ddf265aaf0c17ec557ea68ed75f913121587a31f1a825ed206bb51f044a8b2d1b34bd8", 0x2a}, 0x58) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 485.652535][ T8704] usb 3-1: device descriptor read/8, error -71 07:29:39 executing program 0: r0 = syz_io_uring_setup(0x633, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000100)=0x5, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000140)={0x556, 0x800, 0x1e0, 0x30, 0x600, 0x8, 0x0, 0x2, {0xd0, 0x6, 0x1}, {0x6, 0x4c0}, {0x1000, 0x2}, {0x2, 0x4, 0x1}, 0x0, 0x0, 0x4, 0x801, 0x1, 0x9, 0x100, 0x800000, 0x9, 0x5, 0x80000001, 0x5e, 0x4, 0x4, 0x2, 0x2}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 485.772406][ T8701] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 485.862398][ T8704] usb 3-1: device descriptor read/8, error -71 [ 486.132827][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.144108][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.154629][ T8701] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 486.163908][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.307333][T11785] EXT4-fs (loop2): Unsupported filesystem blocksize 262144 (8 log_block_size) 07:29:39 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 486.515491][T11785] EXT4-fs (loop2): Unsupported filesystem blocksize 262144 (8 log_block_size) 07:29:40 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000040)=0x78, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000080)={0x0, 0x80000001, 0x3, [], &(0x7f0000000000)=0x5a}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab56a6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 486.568821][ T8701] usb 2-1: config 0 descriptor?? 07:29:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x800007}, 0x800}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'vlan0\x00', {0x40000000}, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r0, 0x0, r1, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r0, 0x4, 0x101}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000040)={r0, 0x3bf7, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r0, 0xffffffffffff7fff, 0xfffffff6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r0, 0x1, 0xffffffffffffffff, 0x9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)=r0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xd9b, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000100)="ce0de002777d36557782baac00d1e24c94a497126ac5ac2c541da2733ba1e2296501ae67917f19a3ee1194cee87b816635bad8ae51c622099542a6292f9fbb45ab88c837e17967780d2c9d26c971870d753e1ed23c2bd8766f78172f53f707d7a03ad2c22e9c9181f5048a7cb4965db18011b015ced099e5b5439cbc905bc5a21dc1dadc04c7a6b3f6db006be75a6d066b417defd34dcf408c65b8daa4462a5f876a37ce2fa845f4a89daa2cb0756d14f5e76514330296242dacf2f3129a67a90d7215b7abc1dda94c1442b2a67414303c808f89613480cde4f84d97de9d610ea03f", 0xe2, 0x1d}, {&(0x7f0000000480)="bd26e5879f1d13d1b49715febd08d3180c6b8752743fe70ae0a0b3ba08b1f2af774c7702c59abff1097e09b5cb60da41389dce6cfeed331a0fa114fa2b54b804ee2fda999c02234c1b1b580ee09cc0caea5764acb803f9c720876d2585e014521a67261e3173a97b20f12542a2277167e0cefcff4047723d9a421bf7f1d298d6a0190bc5c0ced0a119c170d8df10095684e6967b2b62f8b157b70d0c3d160de3a28e6b10673307081f7fd898135a9298f445bb4ba35ee20014b128b46cd6c05bb90196419e70335c7df063bf93d0d79491", 0xd1, 0x1000}], 0x300c024, &(0x7f0000000300)=ANY=[]) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0xb9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x1000000, @loopback}, 0x1c) close(r3) [ 486.815791][T11733] udc-core: couldn't find an available UDC or it's busy [ 486.823617][T11733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:29:40 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 487.237147][ T8701] usbhid 2-1:0.0: can't add hid device: -71 [ 487.264765][ T8701] usbhid: probe of 2-1:0.0 failed with error -71 [ 487.334954][ T8701] usb 2-1: USB disconnect, device number 12 07:29:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x254, 0x5802, 0x294, 0x0, 0x294, 0x338, 0x378, 0x378, 0x338, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x98, 0x0, 0xd, 0x0, 0x6c], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0x22c, 0x254, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x4000000, 0x0, 0x1000000, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x45c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/7, 0x7}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000600)=""/49, 0x31}], 0x4, &(0x7f0000000680)=""/3, 0x3}, 0x40}], 0x1, 0x40000040, &(0x7f0000000700)={0x77359400}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x254, 0x5802, 0x294, 0x0, 0x294, 0x338, 0x378, 0x378, 0x338, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={[0x98, 0x0, 0xd, 0x0, 0x6c], [], @dev}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, [], [], 'macvtap0\x00', 'vlan1\x00'}, 0x0, 0x22c, 0x254, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'gre0\x00', {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'ip6erspan0\x00', 'sit0\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x45c) [ 488.052169][ T8701] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 488.114962][T11833] xt_hashlimit: size too large, truncated to 1048576 [ 488.413955][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.425282][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.435559][ T8701] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 488.444970][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.683890][ T8701] usb 2-1: config 0 descriptor?? [ 488.806658][T11833] Cannot find add_set index 0 as target [ 488.806856][T11835] Cannot find add_set index 0 as target 07:29:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b40600000000000071116c00000000008510000002000000850000000000000095004c00000000009500001200c95fc70bc2d47ad6fd68fb187a77aa96b3944931c3af9e47dd1cc5c1e4a5a3151778bdc90f9f564dd8909afa21f6c2befd7f4ae6d9937edd760a4faedf96c34e36980b7a7c6780b010258363f7994da6e24ff1be5ca46d0b7d9256d6e757b0acc0a40d062ca041d1df8e8ba24a5d6270ceee291d9d5b89d7ad584ec60425e257c56c69c8e6e28972719deafdf4022b5c5e7e99e1"], &(0x7f0000000000)='GPL\x00', 0x7, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, [0x0, 0x0, 0xff], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 07:29:42 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:42 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000006110770000000000a60000000000008095000000000000001047a886f7d7d0f648c4388c85081b36885397064f198d67454d1e07decf79b30448974c23036a1f666c2341695519936966b49bbfa04d95200e4022c3efa7ff64a06c4de3919159008691f0cc0aecde9d648a812691253b852bc1d800fcb58be96967a64c0b0f85dddc20110f7ccdd72367b0f32ba73d2a6badbc34b4463f85c456fe263ae01a8c4c5f236a3ffc0bdef17674d6266909c68d7c209cd089b2c43738f28cfe4671abaa47255ba072755209260c4d94fcd4a608"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 488.892249][ T8701] usb 2-1: can't set config #0, error -71 [ 488.921189][ T8701] usb 2-1: USB disconnect, device number 13 [ 488.992957][T11840] Cannot find add_set index 0 as target 07:29:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) 07:29:42 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mlock(&(0x7f000056a000/0x1000)=nil, 0x1000) read(r0, &(0x7f0000000000)=""/41, 0x29) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x10000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0x3f}}, 0x10) r6 = syz_io_uring_setup(0x8a, &(0x7f0000000080), &(0x7f0000ffa000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r6, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:43 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ff60, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x5, 0x7fff, 0x0, 0x101}) 07:29:43 executing program 2: socket$kcm(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f00000004c0)=@generic={0x1, "828ed0058f2232db46266cb0d89a8dc5854b633f7b649416ae6280e61e9f535119e15342efcfa58b0e63262aafe86afa5300845752f9693100b17a9d90e14b4a8128e90d18c525fb744d0d0fab652399f8557da03fb5e4df5ca3985dcadeb0bfc655cb8c37133017e725f796f725b23bb49382ab3d1204dde7b04320328e"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000340)="5875dc223ab3732c71926a679cc6fa33d345bdf52e9d50a82eb76d71", 0x1c}, {&(0x7f00000000c0)="eb6f8be16ff17c055ab0bf7ee09b9312f88bd4b47d6239f3300441048150a516d2ad2ef8da36ebcb58c03d16dbbc3b5975f6120a4bfd0b62", 0x38}, {&(0x7f0000000540)="9e213d9b9f8bbdbd3a1b5063ec94418bf315524f8ca336d74dd7b82b16a7bf6331711b79485c0b08fe000000f424550d9d118efda5d570129c6a29f9613066bd9c7bfe2722aa705ca8ccd87c94bfd6a0f759e238a7a2c790308260cde792d296afea93a89b7c7e2f10e85f23bde0a2e81834afc56b0e459269e15e73ad832fe15f62344aa327d51b37af18b9937c20cc97eb1f42d091317d98c25104ddcd9eefbe3f333f95899ae912134f", 0xd}, {&(0x7f00000003c0)="ce648dd4b5e59d27973e4f3484f6a9f5b9d2269b5b45f49b6b83caedacdc067e9fb1b4f672d85b915e3b651e13527ca47c87dc1ff68c4878c807176dfd2bdc61ecb61f80131dca4b350cfbfd83e32d29e5ce41e4963528da2408577fc93f7d2263010547371897a9b6893c8232d4ef3560", 0x71}, {&(0x7f0000000700)="721f84777c5e14356b42a26650043dcc4cef7ff1f8c07e973bbf2ad4be7766ac336a67a39f280ab93cb47a24bd2593e21f6e8f0ab79aefd11e4c56deae67062c5d7aa0d8b623164d20ca0cb7444a99bdfd1797255110935b140af1a6cd96609afda9925823196663e3e7b740c9f3a04ec4e0969d72bfa4b4eddadd760cc2db4db7627dd899bac71e85cd1634a8d7aa", 0x8f}, {&(0x7f0000000600)="dd0f8d33997491816b04625405ee6e586f8c1cb590872740c4963d3fd7053a37f1ae3538bc0c4f3561750fd9527a241190856ca64540cad5589b5dc97d26d49d271912443a3ebfc0415f93e5fb9bf2d70649878d952963db2b59802aa9849403874f2df515c1dedcb47a0cd2b88187b832443daa7b6ce17215d19c70d8ef00f44517709a35ba300b53f02e8e164e1cf4dbdbb407fc9affa4b38d9eb747430af2f6b0108ccb9dcc416aebdc66abb7dad3da03a6a3d178a08e5d8e1059eb50903ac5f362e5305b11aa334aff883cd9a0a0646fa8a82188afd00e62a91d975b7fad782fcc2092572b2b7b3c69e8f964", 0xee}], 0x6, &(0x7f0000000b80)=ANY=[@ANYRES16=r0], 0x3bc}, 0x4000044) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x593}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000240)='.)&/##\x00'}, 0x30) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x313, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00390340d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x11}) 07:29:43 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 490.332892][ T8699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 490.612381][ T8699] usb 2-1: device descriptor read/64, error 18 [ 490.699173][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.707799][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.716755][T11887] device bridge0 entered promiscuous mode 07:29:44 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 491.003062][ T8699] usb 2-1: device descriptor read/64, error 18 [ 491.302657][ T8699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 491.542286][T11892] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.552489][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.559831][T11892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.567989][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.575505][T11892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.583926][T11892] device bridge0 left promiscuous mode [ 491.602574][ T8699] usb 2-1: device descriptor read/64, error 18 07:29:45 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 492.002458][ T8699] usb 2-1: device descriptor read/64, error 18 [ 492.130441][ T8699] usb usb2-port1: attempt power cycle [ 492.164783][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.172597][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.180313][T11894] device bridge0 entered promiscuous mode 07:29:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x200, 0x71, 0x11, 0x5e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x74) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000040)={r0, 0x7, 0x80000000, 0x3cc8b339}) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000004c0)={0xb8b, "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"}) 07:29:45 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 492.560675][T11899] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.570647][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.578161][T11899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.586353][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.593771][T11899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.602507][T11899] device bridge0 left promiscuous mode [ 492.614126][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.842153][ T8699] usb 2-1: new high-speed USB device number 16 using dummy_hcd 07:29:46 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) socketpair(0x23, 0xa, 0x8000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x4008000}, 0x20020000) copy_file_range(r1, &(0x7f0000000000)=0x62937d4b, r0, &(0x7f0000000040)=0x9, 0x86, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x118, 0x3e020000, 0x0, 0x118, 0x15c, 0x1d0, 0x1d0, 0x15c, 0x1d0, 0x3, 0x0, {[{{@ip={@multicast1=0xe0005100, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) 07:29:46 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000000)) r0 = openat$uinput(0xffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000240)={0xf, 0x4, 0x3f}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000280)=""/136, &(0x7f0000000340)=0x88) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000380)) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000003c0)=0x10000, &(0x7f0000000400)=0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000440)={0x1}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480)=0x401, 0x4) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000004c0)=0x3, 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000500)='threaded\x00', 0x9) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040080) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000640)=0x3ff) r2 = openat$vsock(0xffffff9c, &(0x7f0000000680)='/dev/vsock\x00', 0x408000, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffdc}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20088c0}, 0x24000890) r3 = syz_open_dev$vcsn(&(0x7f0000000840)='/dev/vcs#\x00', 0x1, 0x80100) r4 = syz_open_dev$vcsu(&(0x7f0000000880)='/dev/vcsu#\x00', 0x5, 0x400000) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc04c5611, &(0x7f00000008c0)={0x3, 0x1, 0x4, 0x100, 0x100, {}, {0x3, 0x8, 0x4, 0x3f, 0x3f, 0x2, "bb9b9302"}, 0x10000, 0x1, @userptr=0xcc7, 0x7ff, 0x0, r4}) 07:29:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0xae) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270000000000"], 0x3c}}, 0x0) 07:29:46 executing program 1: [ 493.212975][ T8699] usb 2-1: device descriptor read/8, error -71 07:29:46 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 493.432853][ T8699] usb 2-1: device descriptor read/8, error -71 [ 493.585263][T11934] xt_connbytes: Forcing CT accounting to be enabled [ 493.592128][T11934] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 493.602309][T11934] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 493.730522][T11943] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 07:29:47 executing program 2: 07:29:47 executing program 1: 07:29:47 executing program 3: 07:29:47 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:47 executing program 2: 07:29:48 executing program 3: 07:29:48 executing program 1: 07:29:48 executing program 4: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 496.226707][T11955] IPVS: ftp: loaded support on port[0] = 21 [ 496.777866][T11955] chnl_net:caif_netlink_parms(): no params data found [ 496.945834][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.953250][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.962052][T11955] device bridge_slave_0 entered promiscuous mode [ 497.025766][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.033285][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.093125][T11955] device bridge_slave_1 entered promiscuous mode [ 497.157588][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.286105][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.560850][T11955] team0: Port device team_slave_0 added [ 497.673626][T11955] team0: Port device team_slave_1 added [ 497.919143][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.927583][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.954531][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.111975][ T3219] Bluetooth: hci5: command 0x0409 tx timeout [ 498.121610][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.129547][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.155571][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.386767][T11955] device hsr_slave_0 entered promiscuous mode [ 498.424714][T11955] device hsr_slave_1 entered promiscuous mode [ 498.465240][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.472935][T11955] Cannot create hsr debugfs directory [ 498.934776][T11955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.981446][T11955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 499.012999][T11955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.054478][T11955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.406531][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.438527][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.449305][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.469817][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.494326][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.504517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.514141][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.521421][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.534435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.564692][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.574811][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.584513][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.591755][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.616083][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.643413][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.667404][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.677431][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.694016][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.709795][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 499.720621][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.747759][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 499.757313][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.788013][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 499.797262][ T8701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 499.816284][T11955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.861466][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.869380][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.903781][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.039815][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.050852][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.106004][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.115246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.138034][T11955] device veth0_vlan entered promiscuous mode [ 500.149991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.161255][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.190270][T11955] device veth1_vlan entered promiscuous mode [ 500.196143][ T0] NOHZ: local_softirq_pending 08 [ 500.210879][ T3219] Bluetooth: hci5: command 0x041b tx timeout [ 500.272873][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 500.282662][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 500.292371][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 500.301512][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 500.318923][T11955] device veth0_macvtap entered promiscuous mode [ 500.345359][T11955] device veth1_macvtap entered promiscuous mode [ 500.394516][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.405051][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.415174][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.425820][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.436067][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.447218][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.457357][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.467957][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.478024][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 500.488664][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.502195][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.513475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 500.523362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 500.533046][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.542702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.571403][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.582101][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.592642][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.603309][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.613404][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.624057][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.634099][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.644659][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.654710][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 500.665276][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.679843][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.694689][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.705449][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:29:54 executing program 5: 07:29:54 executing program 2: 07:29:54 executing program 1: 07:29:54 executing program 3: 07:29:54 executing program 4: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:54 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000100)=0x8) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000380)={r3, 0x2}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000200)={r3, 0x1}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000140)={r3, 0x1}) 07:29:54 executing program 2: 07:29:54 executing program 3: 07:29:54 executing program 1: 07:29:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:55 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a45322, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x89, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:55 executing program 5: 07:29:55 executing program 1: 07:29:55 executing program 3: 07:29:55 executing program 2: [ 502.284244][ T5] Bluetooth: hci5: command 0x040f tx timeout 07:29:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:56 executing program 5: 07:29:56 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000240)={0x90, 0x0, r4, {0x3, 0x2, 0x1, 0xffffffff, 0xa5, 0x82, {0x0, 0xffffffff, 0x81, 0x100, 0x80000000, 0x7, 0x1f, 0x3ef9be16, 0x4000000, 0x1000, 0x1, 0xee01, r5, 0xfff, 0x3}}}, 0x90) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:56 executing program 1: 07:29:56 executing program 2: 07:29:56 executing program 3: 07:29:56 executing program 5: 07:29:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x401, 0xffff, 0x9, 0x200, 0x73], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x80087, &(0x7f0000000080)={0x0, 0x156b, 0x2, 0x0, 0x4, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:57 executing program 1: 07:29:57 executing program 2: 07:29:57 executing program 3: 07:29:57 executing program 5: 07:29:57 executing program 1: 07:29:57 executing program 2: 07:29:57 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={'veth1_to_team\x00', 0x101, 0x7}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 504.354347][ T9137] Bluetooth: hci5: command 0x0419 tx timeout 07:29:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:57 executing program 3: 07:29:58 executing program 5: 07:29:58 executing program 1: 07:29:58 executing program 2: 07:29:58 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') 07:29:58 executing program 3: 07:29:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:58 executing program 5: 07:29:58 executing program 2: 07:29:58 executing program 1: 07:29:59 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000100)={0x0, 0x40d2, 0x0, 0x3, 0x80000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1e0, r3, 0x300, 0x70bd25, 0x4, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x788}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc9}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x541}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x8804) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x8) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:29:59 executing program 3: 07:29:59 executing program 2: 07:29:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:29:59 executing program 1: 07:29:59 executing program 5: [ 506.523068][T12312] new mount options do not match the existing superblock, will be ignored 07:30:00 executing program 3: [ 506.673277][T12312] new mount options do not match the existing superblock, will be ignored 07:30:00 executing program 2: 07:30:00 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) sendto$rose(r3, &(0x7f0000000140)="ae24f0d66aea711f37984f269fb7be9e174c698185111a9366bc7b0a06d71a7f1d6fe241e8c81862836085b1639f2699b136a16afa8646623ee8de5ca689af72965644d3d8667909ec0f058a3d5eeea275d5d3d4da63feebadc215cd3e68c3261db52f1df1348b7d33212665e58159472ad27be20b537228ea26820f89b0e50157a14f970932826d0e", 0x89, 0x1, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:00 executing program 1: 07:30:00 executing program 5: 07:30:00 executing program 3: 07:30:01 executing program 2: 07:30:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:01 executing program 1: 07:30:01 executing program 0: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3, 0x400, {"bddaf9413975fe717a7f4e3937f36a3b"}, 0x1f, 0x6, 0x7}}}, 0x90) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x4, 0x0, 0x395}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x7, {0x6, 0x6}}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x20, &(0x7f00000002c0)={0x25, 0x8, 0x7fffffff}, 0x0) 07:30:01 executing program 5: 07:30:01 executing program 3: 07:30:01 executing program 1: 07:30:01 executing program 2: 07:30:01 executing program 0: r0 = syz_io_uring_setup(0x89, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:01 executing program 5: 07:30:02 executing program 3: 07:30:02 executing program 1: 07:30:02 executing program 2: 07:30:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:02 executing program 5: 07:30:02 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0xfffffffc}, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:02 executing program 3: 07:30:02 executing program 1: 07:30:02 executing program 2: 07:30:03 executing program 5: 07:30:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:03 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x7], 0x1, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000180)={r3}) 07:30:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002808100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) wait4(0x0, 0x0, 0x0, 0x0) 07:30:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00d\x00\'\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=r6], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB=',\x00\x00\x00f\x00\'\x00'/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\v'], 0x2c}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 07:30:03 executing program 2: 07:30:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:03 executing program 5: 07:30:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xfffffecc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000020000000a000000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ff"], 0x40}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[0x0, 0x2], [], @local}}]}, 0x40}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="80060000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="08f33800", @ANYRES32=r7, @ANYBLOB="1400020077673100000000000000000000000000080005000100000008000500010000002406088080000080200004000a004e220000007f20010000000000000000000000000001060000001400040002004e24ac1414aa00000000000000002400020006c590cda3043e994ffc980b4ce1b32ff990b41f7773c74f413bfcc362a3abb12400020070f11006b8361154d3c2f5f721d3f1d8ec6830079cef74e8acb993b14513927724000080200004000a004e2100000a8c000000000000000000000000000000000100000038000080080003000a000000240002004d7075c3dfadce68937b35a973b6e9a4616de5592a1e544086b2aaf276f75df008000a0001000000cc040080280109801c000080060001000200000008000200ac1414aa0500030002000000ac000080060001000200000008000200e00000020500030003000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ac1e00010500030003000000060001000a00000014000200fe8000000000000000000000000000100500030000000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e00000020500030003000000340000800600010002000000080002007f0000010500030000000000060001000200000008000200ac1414aa050003000000000028000080060001000a00000014000200ff02000000000000000000000000000105000300010000001400040002004e22ac1e00010000000000000000080003000700000006000500080000007403098028000080060001000a00000014000200fc000000000000000000000000000001050003000100000058000080060001000a0000001400020000000000000000000000ffff000000000500030000000000060001000200000008000200e0000002050003000000000006000100020000000800020064010102050003000200000058000080060001000200000008000200ac14142b0500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa05000300030000000c010080060001000200000008000200e00000010500030003000000060001000200000008000200ac1414bb0500030002000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200200100000000000000000000000000010500030001000000060001000200000008000200640101020500030000000000060001000200000008000200ac1e01010500030003000000ac000080060001000a000000140002000000000000000000000000000000000105000300030000000600010002000000080002007f0000010500030000000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000640000800600010002000000080002000a01010005000300010000000600010002000000080002007f00000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200ffffffff05000300020000007c000080060001000200000008000200000000000500030003000000060001000200000008000200e00000010500030003000000060001000200000008000200ac1e000105000300020000000600010002000000080002000a0101010500030003000000060001000200000008000200ac141428050003000200000006000500290b000060000080200004000a004e2400000001fc000000000000000000000000000000260f0000060005000000000008000a000100000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922180000801400040002004e24ac14144400000000000000001400020077673100"/1628], 0x680}, 0x1, 0x0, 0x0, 0x4000}, 0xc081) r8 = openat$nvram(0xffffff9c, &(0x7f00000008c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) r9 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r9, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 510.696330][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:30:04 executing program 2: [ 510.856283][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:30:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:04 executing program 3: 07:30:04 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80003, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x338, 0x4c, 0x274, 0x0, 0x0, 0x338, 0x318, 0x318, 0x338, 0x318, 0x3, 0x0, {[{{@uncond=[0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7], 0x0, 0x1d8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:30:04 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 07:30:04 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_batadv\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="12"]}) 07:30:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:05 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x700a2100, 0x0, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 07:30:05 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 511.777445][T12436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.992929][T12438] overlayfs: maximum fs stacking depth exceeded [ 512.034638][T12436] overlayfs: filesystem on './bus' not supported as upperdir 07:30:05 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) dup3(r0, r1, 0x0) 07:30:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:05 executing program 0: getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 512.299945][T12445] IPVS: ftp: loaded support on port[0] = 21 07:30:05 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 512.847761][T11671] tipc: TX() has been purged, node left! [ 512.887688][T12447] IPVS: ftp: loaded support on port[0] = 21 07:30:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x80000000) r3 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x5, 0x8) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20020008) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r4, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2, "b7"}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x8, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/214, 0xd6, 0x41, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) 07:30:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 513.163378][ T3219] Bluetooth: hci0: command 0x0406 tx timeout [ 513.449675][T12516] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 513.690987][T12529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 07:30:07 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x285, 0x0, r0}, &(0x7f0000010000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ff60, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000100)={0x1, 0x5, [@dev={[], 0x26}, @broadcast, @dev={[], 0xd}, @random="04f161b1a0c5", @empty]}) r6 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000011000/0x1000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_UNLOCK(r6, 0xc) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a4050000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="c400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000020003000b00000008000400f8ffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="44010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="640202803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c000400040001200500000001000806090000001f0009060900000006000feeff03000008005004f7ffffff0400047f03000000fcffe6001a0000000300087f000000003f0040066e03000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400cb02000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400190f00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x5a4}}, 0x840) 07:30:07 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 07:30:07 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1003869, 0x0) [ 513.942594][T12529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. 07:30:09 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000340)=""/157, 0x200003dd) 07:30:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x700a2100, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 07:30:09 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 07:30:09 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000100)={0x7ff, 0x2, 0xf9}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 515.911305][T12586] IPVS: ftp: loaded support on port[0] = 21 [ 515.973938][T12588] IPVS: ftp: loaded support on port[0] = 21 [ 516.015047][T12589] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 07:30:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:09 executing program 0: r0 = syz_io_uring_setup(0x22f0, &(0x7f0000000080)={0x0, 0x66f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}, 0x6}, &(0x7f00000001c0)=0x88) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 516.339674][ T1627] tipc: TX() has been purged, node left! 07:30:09 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 07:30:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) set_mempolicy(0x0, &(0x7f0000000280), 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x805000, 0x0) 07:30:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_batadv\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='7\x00\x00\x00']}) 07:30:10 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x1, 0x1, 0x13, 0x6, 0x1f3, &(0x7f0000000240)}) r3 = dup3(r0, r0, 0x80000) r4 = openat$nvram(0xffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x20002, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e22, @empty}}) r5 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r5) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x18, 0x0, 0x38}) 07:30:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:10 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 07:30:11 executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) syslog(0x2, &(0x7f0000000240)=""/89, 0x59) stat(0x0, 0x0) 07:30:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 07:30:11 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:11 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 07:30:12 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:12 executing program 0: syz_io_uring_setup(0x85, &(0x7f0000000080)={0x0, 0xa9ea, 0x2, 0x0, 0x125}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r2, &(0x7f0000000000), 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c09008110d2", @ANYRES16=0x0, @ANYBLOB="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"], 0x39c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000100)=""/58) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ff60, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x2, 0x0, 0x0) r5 = openat$nvram(0xffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x101000, 0x0) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000280)="9c91801daad90d6aa39f3e6469a6bd55c8c418e13f8d1446fcef90c89f5f63478778519b76137ff2765724f4f1c71b1041f264a522791ec66741ea3815317efa476e037600ea70763452510eb562aebae7b59cc5182859274bf71403a841b0678e14e4fea04d51281066df88c982fb0f394c7e81350341b2542b5f0266480cb0f5da087ad277a523bd67c8948864598070578266e3080dac748e5ba3968ceff7a4f69cbe410dd69b2b559cef275dfa91", 0xb0}, {&(0x7f0000000380)="84b6e09cc1f5363206e3587df8ce949eaf489bb6756dd3c42c7278ebeb745b33ab17efd579591b5d620754add1eab7bf6519a82de1e512236c176dcd2d25a0428f0483b518f1c700b90db95b87d0db7327c27910f037a98cc63d54dc21cbc177541f5df2a5f2e0c98a9a10b84fd0eb5ec53f3d6f33182f", 0x77}, {&(0x7f0000000400)="f37290010030572ff01275536911718ad49904b84986aca2373caec78b7b02b0b087c247c62aa4d8b0c5c1ce89eb1f5d318cc4eaedd65aea3ab96367e38135fe731782d7d57a082cb28b7c81df3f9007da1e4a5d789b6957ca322191fcb31ed9f402a48417e82a632abf9e68a1a9c1a9070776ec9c16219559ad4e0c73de9be198bc2bd9b4b4d9bd4dd753e262cd18db5f7f54657aaa0ff61c83afd52aefe39f2f70f02b8e120e1d0a82ba9fcbc712dc6316187363b6955d7b5da028a44ebc39ffa2d94d122a8b1b814b6cc6f59ffe9b762ef138b54c5f7d76d635eeed", 0xdd}, {&(0x7f0000000500)="0ba948b702ab650d6578d1c94ea09d4cbc0176dc37a194d4b08b71bd1dd285a14d09b7de0800cc3aeefff9792bb1e5259028129bcd368129b3b916483bb9af48d0ddb501667d801510ab331696fe3e7a81612353c7e3d47de61b68600dee54c51a86558903ce16e8ff81b653f8ab219462bb9ffb2871f01caba501d3a6d3315823ea603cc11dbee3769099637b35c9", 0x8f}, {&(0x7f00000019c0)="4912878ee915d3a1f4f0bab05e2357c1ef2b88622e4aee80f846207687dc92ff4b3fbdb354260e76e7bac1ea969bd66fb8a0e4fbe01337ced7db342d562babdf65cb3408e486c22d3f2168604f7636e48770f5c99a9e6b28d22f8347e44929f647cfe9d06c99f11c77c163e5c75c960741cab03903401a38cc6b20f3b7340c0377dd55b2f400c4dae5a48e7a121637a875d10fe3b883a929e48d1b80d9d94e1ef46e9e6e197568cfe50b9d97c853f3bd4db3de5d3b04dfcbabde49f4c668a458ad90748e40fa2600e3dda25d3b9256a22ce5cb1b0332708b0d492a9788657e6a5740e7c80d5358329ae5edbf891406", 0xef}, {&(0x7f0000001ac0)="2b7fa0e12e21f86be4175e05f127a2a9c36ebff520245824de7de57ad61a360f3c2c6799db94707ddcd90e8fb01cacdc02e34c690352e8dbc75575fbf414d620bac5e006b18bf8c7fa52f271ba21cc313c4e52aa45595fd48f52064b2d4f637db45f6c0e456196e1cb2a09567eacd02486165ef34bb934450e1e297c0554d0fc83c38eba7145fed98f7bc027dcea6dbb74bf2f1fc4c90df65b0393e6a5fd2f", 0x9f}], 0x7, 0xffff, 0x6, 0x20) [ 519.230618][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.248594][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.256527][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.357661][T12731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.376621][T12731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.386582][T12731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:30:12 executing program 2: openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x20, 0x7, 0x0, 0x0, 0x0, 0x5, 0x2430, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x40, 0x2}, 0x100, 0x0, 0xa87, 0x3, 0xffffffffffffffff}, 0x0, 0x8, r0, 0xa) fadvise64(r2, 0xd64, 0x5, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="af9a6a48e6b083c820edff8000730f64c2f05bd4074271c94acfcadb8bdf62657a3e616eb37274afe160ffb268d6b2a68b418f713e565c7e5d262db9c32f73d28b4e66b91237ea7e"], 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 519.666156][T12735] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 07:30:13 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 07:30:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:13 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$CHAR_RAW_REPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000100)={0x6, 0x2, 0x0, [{0x7ff, 0x80000001, 0x9, 0x7, 0x4, 0x9}, {0x1, 0x6, 0x301, 0x5, 0x83, 0x64, 0x7f}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:13 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x3e) close(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioprio_get$pid(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:30:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x80b, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 520.841517][ T1627] tipc: TX() has been purged, node left! 07:30:14 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) [ 521.135018][T12787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.154745][T12787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.165007][T12787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:30:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:14 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40044149, &(0x7f0000000140)=0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x4508, 0x0, 0x0, 0x0, 0x0) 07:30:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r4, 0x0, 0x7fffefff) 07:30:15 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 07:30:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:15 executing program 5: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000001e80)='./file1\x00', &(0x7f0000001ec0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 07:30:15 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000100), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:16 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) 07:30:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:16 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.231062][T12853] overlayfs: failed to resolve './file0': -2 07:30:16 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = syz_io_uring_complete(r1) io_uring_enter(r0, 0x70a6, 0x21f9, 0x0, 0x0, 0x0) read$qrtrtun(r3, &(0x7f0000000100)=""/145, 0x91) [ 523.317402][T12854] overlayfs: overlapping lowerdir path [ 523.393930][ T8699] Bluetooth: hci1: command 0x0406 tx timeout [ 523.412229][T12853] overlayfs: failed to resolve './file0': -2 07:30:17 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) 07:30:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:17 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:17 executing program 0: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80086004}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xe0c, 0x1, 0x5, 0x3, 0x0, 0x0, {0xc, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0xa2}, 0x9, 0x3f, 0x401, 0x1, 0x28, 'syz0\x00', "68c898a685df1cc8f97872d65562a8fcb22a00503634f6136e90479efff6d984", "9cc8dc9b85fad317bfa12606b7abb488906ebd7847ed286115a1c554bb0a2113", [{0x400, 0x2, {0x1, 0x93}}, {0x2, 0x2b, {0x1, 0x6}}, {0x9, 0x1000, {0x3, 0x8000}}, {0x8, 0x0, {0x0, 0x7fff}}, {0x101, 0x8d3a, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0x6}}, {0xf9d0, 0x1, {0x3, 0xffff}}, {0x1000, 0x1, {0x1, 0xfffffffe}}, {0xfff, 0x7, {0x1, 0x9}}, {0xff, 0xff00, {0x1, 0x5}}, {0x7, 0x2, {0x2, 0x81}}, {0x6, 0x100, {0x3, 0x1}}, {0x7fff, 0x5, {0x0, 0x4d}}, {0xec, 0xa0d6}, {0x9d, 0x8, {0x3, 0x10001}}, {0x3f, 0x2, {0x0, 0x8000}}, {0x8, 0x524a, {0x2, 0xe12}}, {0x0, 0x6, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0xb3}}, {0x1, 0x400, {0x1}}, {0x5c34, 0x3ff, {0x0, 0x4b609526}}, {0x9, 0x4, {0x2, 0x10001}}, {0x9, 0xef1, {0x2, 0x7fff}}, {0x9, 0x3, {0x1, 0x1000}}, {0x5, 0x1, {0x3, 0x8}}, {0x1, 0xff2d, {0x1, 0xfff}}, {0x5, 0x2, {0x3, 0x10001}}, {0x3ff, 0x0, {0x2, 0x2}}, {0x1, 0x3, {0x2, 0x93}}, {0x4, 0x5, {0x3, 0xe1}}, {0x80, 0x1, {0x0, 0x7}}, {0x3ff, 0x21, {0x2, 0x8}}, {0x5581, 0x200, {0x2, 0x6}}, {0xfff, 0x2, {0x2, 0x9}}, {0x400, 0xfe, {0x0, 0x2}}, {0x3, 0x38b8, {0x0, 0x5}}, {0x1, 0xfa, {0x3, 0x30e}}, {0x3f, 0x3f, {0x1, 0x10000}}, {0x3, 0x7, {0x1, 0xe5a}}, {0x8, 0x2, {0x0, 0x40}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x9, 0x4, 0x8, 0x1, 'syz1\x00', "f1c388a2454c3acc0dae277edb5e484efa21e3ba07ae1470f0e1703bd1297559", "79d9e94d7ed60f513a63d0509869c3a1bbf0081f30bec4a68579d2534600f0ad", [{0x6f0f, 0x100, {0x1, 0x4}}, {0x9, 0x4, {0x3, 0x5}}, {0x1, 0x1000, {0x3, 0x866}}, {0xf7af, 0x0, {0x2}}, {0x6, 0x1b0, {0x1, 0xe2}}, {0x6, 0x3, {0x3, 0xffffffff}}, {0x401, 0x5, {0x1, 0x1}}, {0x7f, 0x1, {0x3, 0xa2}}, {0x7, 0x100, {0x2, 0x7}}, {0x0, 0x800, {0x0, 0x3}}, {0x80, 0x7fff, {0x2, 0x1}}, {0xfff, 0x8, {0x0, 0x2}}, {0x28f7, 0x3, {0x2, 0x101}}, {0x6f, 0x8, {0x3, 0xffffff00}}, {0x400, 0x6, {0x3, 0x7}}, {0x5, 0x9, {0x3, 0x2}}, {0x6, 0x8, {0x3, 0xffffffff}}, {0x2def, 0x3, {0x0, 0x2}}, {0x1, 0x2, {0x3, 0x1}}, {0x20, 0xcd, {0x1, 0x9}}, {0xd7, 0x7, {0x3}}, {0x0, 0x24, {0x3, 0x80000000}}, {0xbe, 0x1, {0x3, 0x9}}, {0x5, 0xc2, {0x0, 0x81}}, {0x41, 0x6, {0x4, 0x4}}, {0x8, 0x6a, {0x362ea024ab84784, 0x3}}, {0x1, 0x7, {0x1, 0x10000}}, {0x0, 0x926, {0x3, 0x5}}, {0x7fff, 0x0, {0x1, 0x200}}, {0x0, 0xdf7a, {0x3, 0x8}}, {0x9, 0x9, {0x1, 0x5}}, {0x101, 0x4, {0x1, 0x4}}, {0x2, 0x8, {0x0, 0x3}}, {0x5, 0xff, {0x3, 0x92}}, {0x400, 0xffff, {0x1, 0x10001}}, {0xffff, 0x9, {0x0, 0x1f}}, {0x405, 0x6f, {0x1}}, {0x8001, 0xc42f, {0x2, 0x5}}, {0x80, 0x9, {0x1, 0x62a}}, {0x4, 0x7fff, {0x0, 0xfa87}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x0, 0x5f, 0xb7, 0x81, 0x18, 'syz0\x00', "35860b4e912cfd8d2ab1bee97f98785b336ef319ee7375f148e5650abbc28800", "1ab436f7c9aea6bdd356757838400225f2e4f85046f57303b6aa983de184f2a7", [{0x1900, 0x1, {0x0, 0xffffffff}}, {0x2, 0x4, {0x3, 0xfff}}, {0x0, 0x7, {0x3, 0x8}}, {0xfc01, 0xfff}, {0x0, 0xfff8, {0x1, 0x7}}, {0x0, 0x3, {0x0, 0x1}}, {0x1000, 0x3, {0x2, 0x62ec}}, {0x5, 0x1, {0x3, 0x1000}}, {0x5, 0x8}, {0x17ba, 0x29f2, {0x3, 0x2}}, {0x5, 0xb7, {0x1, 0x200}}, {0x1f, 0x3ff, {0x1, 0x1}}, {0x3, 0x7ff, {0x3, 0x7fff}}, {0x400, 0x1, {0x3, 0x6}}, {0x7f, 0x400, {0x3, 0x5}}, {0x81, 0x8001, {0x1, 0x8f}}, {0x0, 0x7ff, {0x6, 0x1}}, {0x7, 0x8, {0x2, 0x1000}}, {0x3, 0x2, {0x0, 0xfffffbb9}}, {0x39, 0x2, {0x1, 0x1af}}, {0x7, 0xfa5, {0x1, 0x2a}}, {0x9, 0x200, {0x2, 0x6}}, {0x9, 0x7, {0x2, 0x4}}, {0x1, 0xff, {0x2}}, {0x5, 0x0, {0x1, 0x800}}, {0x8001, 0x1, {0x1, 0xfffffffe}}, {0xe8a3, 0x1ffc, {0x0, 0x8}}, {0x2, 0x101, {0x2, 0x1f}}, {0xfff, 0x70, {0x0, 0x7ff}}, {0x2c, 0x0, {0x0, 0x3}}, {0x9, 0x40, {0x3, 0x3}}, {0x5, 0xe7, {0x2}}, {0x81, 0xff, {0x3, 0x7}}, {0x401, 0x3f, {0x1, 0x80000000}}, {0xd471, 0x3, {0x3, 0xba}}, {0xff, 0x8ee8, {0x2, 0x4}}, {0x4, 0x6, {0x3, 0x80000001}}, {0x9, 0x0, {0x3, 0x9}}, {0x8, 0x9, {0x8bdb65f9e925feb6, 0xfaf9978e}}, {0xfb0f, 0x2}]}}}, {{0x254, 0x1, {{0x2, 0xfffffff8}, 0x80, 0xc, 0x5, 0x400, 0x1d, 'syz1\x00', "0c5a265cd8b06b6a3fd7667d5cafe60f7d0536a430cd6e27be69a94445376704", "27129fc0d81ec430a5998d77f819639d2bc8b528e8e50ee26d68ca0119a5458e", [{0x8, 0x2, {0x3, 0x2}}, {0x8, 0x2, {0x1, 0x8}}, {0x80, 0x800, {0x0, 0xfff}}, {0x100, 0x1, {0x3, 0x5f}}, {0x4, 0x111c, {0x1, 0x1ff}}, {0xb7, 0x3, {0x1, 0x7}}, {0xc94b, 0x47}, {0xd15, 0x2, {0x2, 0x7fffffff}}, {0x7f, 0x1, {0x1, 0xf51}}, {0x1000, 0x1, {0x0, 0xfffffffb}}, {0x1, 0x6, {0x1, 0x6}}, {0x9, 0x9, {0x2, 0x1}}, {0x9, 0x80, {0x1, 0x9}}, {0x42bd, 0x44ff, {0x2, 0x9}}, {0x3, 0x2, {0x1}}, {0x8, 0x8, {0x2, 0x8000}}, {0x3f, 0x2, {0x1, 0x7f}}, {0x8, 0x2, {0x2, 0x1}}, {0xfffc, 0x5c, {0x1, 0xffffffff}}, {0x81, 0x5, {0x0, 0x7}}, {0x9, 0x8, {0x3, 0x2}}, {0x28, 0xfffa, {0x2, 0xfffffffe}}, {0x9, 0x8000, {0x2}}, {0x7b90, 0x3, {0x1}}, {0x592, 0xfff, {0x1, 0x3}}, {0x3, 0x4, {0x1, 0x4}}, {0xb3, 0x9, {0x0, 0x8}}, {0x1, 0x9, {0x2, 0xffff}}, {0xb1d6, 0x1ff, {0x1}}, {0x3, 0x4, {0x1, 0x879}}, {0x4, 0x8, {0x1, 0x8000}}, {0xab, 0x4, {0x0, 0x400}}, {0xffc, 0x2, {0x2, 0x2}}, {0x8, 0x1, {0x2, 0x8}}, {0x0, 0x8d, {0x1, 0xfff}}, {0xbae, 0x6, {0x2, 0x9}}, {0x2, 0x5, {0x0, 0x1ff}}, {0x7, 0x6, {0x2, 0x1}}, {0x65, 0x8000, {0x0, 0x9}}, {0x1, 0x5, {0x2, 0xff}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x0, 0x86, 0xaa90, 0x40, 0x13, 'syz1\x00', "d4ca56e6b49030049aca30da90e3ff152063243d452d31d77be10e414cc92c93", "6a63d847511a093a1cc2cf4fb9218b74298f452805a05fd343f4a36b90865a18", [{0x48, 0x8, {0x0, 0x3}}, {0x81, 0x1, {0x3, 0x4}}, {0x6, 0x40}, {0x101, 0x1, {0x3, 0x5}}, {0xfff8, 0x0, {0x1, 0x3ff}}, {0x1f, 0x5, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0xfffffe00}}, {0x4, 0x4, {0x3, 0x81}}, {0x0, 0x8000, {0x0, 0x3ff}}, {0x837, 0x2, {0x2, 0x9}}, {0xfff8, 0xffff, {0x1, 0x10001}}, {0x8, 0x5, {0x0, 0x9}}, {0x1, 0x3, {0x1, 0x7a86}}, {0x7f, 0x2023, {0x1, 0x3}}, {0x1, 0x6, {0x1, 0x2}}, {0x24, 0x100, {0x1}}, {0xf0b7, 0x0, {0x3, 0x3}}, {0x1e07, 0x9, {0x2, 0x224}}, {0x1000, 0x4b60, {0x1, 0x1}}, {0x8, 0x5c08, {0x0, 0x10000}}, {0x0, 0x3, {0x1, 0xfffffffc}}, {0x8, 0x5, {0x1, 0xfffffc5d}}, {0xa4, 0x7ff, {0x0, 0x6}}, {0x6, 0xff, {0x3, 0x101}}, {0x5, 0x6, {0x0, 0x6}}, {0x39, 0x7f, {0x1, 0x6}}, {0x100, 0x7, {0x2}}, {0x2, 0x3, {0x2}}, {0x4, 0x1ff, {0x3, 0x6}}, {0x2, 0x8, {0x2, 0x4}}, {0x7, 0x401, {0x3, 0xfffffe00}}, {0x900, 0x9, {0x33761aaa95416b10, 0x9}}, {0x7, 0x8001, {0x2, 0x80000001}}, {0x7a, 0x7ff, {0x3, 0x2}}, {0x80, 0x200, {0x3, 0x80}}, {0x7ff, 0x8, {0x2, 0x1}}, {0x8001, 0x3, {0xdd7092fcf3b376b6, 0x4}}, {0x1, 0x9, {0x2, 0x2}}, {0x3f, 0x4, {0x1, 0x7}}, {0x7, 0x0, {0x1, 0xa96}}]}}}, {{0x254, 0x1, {{0x0, 0x8000}, 0xca, 0xec, 0x1f, 0x6, 0x0, 'syz0\x00', "6ddafafa641cafe3936a021078ccb698a5d31d4966dab7250cb19d2f677e6452", "ace12e17129459a38d8853d5746b0a4701870085d8cbde7e934d2b9086b64815", [{0x384, 0x7, {0x2, 0x80}}, {0x4, 0xc80f, {0x0, 0x800}}, {0x401, 0x2, {0x3, 0x5}}, {0x2, 0x2, {0x2, 0x2}}, {0x7ff, 0x0, {0x0, 0x3}}, {0x4000, 0x2, {0x2, 0x4}}, {0xd60c, 0x1000, {0x2}}, {0x4, 0x8, {0x0, 0x7f}}, {0x2, 0xffff, {0x0, 0x1f}}, {0x1, 0x4000, {0x1, 0x1}}, {0x4, 0x0, {0x1, 0x4}}, {0x40, 0xfffe, {0x3, 0x800}}, {0x3f, 0x1000, {0x0, 0x4}}, {0xda9, 0x80, {0x0, 0x20}}, {0x1f, 0x6, {0x1, 0x2}}, {0x7, 0x9, {0x3, 0x81}}, {0xd41e, 0xe3, {0x2, 0x40}}, {0x5, 0x1, {0x0, 0x1f}}, {0x6, 0x5, {0x2, 0x9}}, {0xfc6, 0x5, {0x2, 0x4}}, {0x4, 0x7, {0x3, 0x7}}, {0x0, 0x4, {0x1, 0x7f}}, {0x400}, {0x0, 0x200, {0x3, 0xff}}, {0x4, 0x400, {0x3, 0x80000001}}, {0x1, 0x6, {0x2, 0xfffffff7}}, {0x7, 0x8, {0x3, 0x80000000}}, {0x3, 0x1000, {0x3, 0x7}}, {0x0, 0x463, {0x2, 0x9}}, {0x3, 0x80, {0x2, 0x7fffffff}}, {0xa, 0xfffd, {0x3, 0x4}}, {0x8001, 0x100, {0x1, 0x2}}, {0x800, 0x5, {0x1, 0xbde}}, {0x6, 0x8000, {0x1, 0x2000}}, {0x6, 0x7, {0x3, 0xda}}, {0x6, 0x9, {0x1, 0x200}}, {0x7, 0x0, {0x1, 0x8}}, {0x3, 0x79, {0x1, 0x3}}, {0x7, 0xff, {0x3, 0xffff}}, {0x4, 0xc793, {0x2, 0x2}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="000800007bfc530800020600"], 0x20c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x560e, &(0x7f0000000000)) 07:30:18 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:18 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x28a}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioprio_get$pid(0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xffff9ef3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000240)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="000800007bfc530800020600"], 0x20c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x560e, &(0x7f0000000000)) 07:30:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:19 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x410c, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x7f, 0x9f9, 0xff7b, 0x3}, 'syz0\x00', 0x22}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x30, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0xa, '\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x84059c3b7d8dc6ce}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) shutdown(r5, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r5}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r6, 0x18c}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000400)={r8, 0x40, "607db94a636a25c4b1b752854bf22822a7f11985ec165a582143518555fc315f2314f8acdd9e21b0aeac70d023806f0894939945d2cc2877a5d479f88755b7b9"}, &(0x7f0000000480)=0x48) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000000180)={&(0x7f0000000140), &(0x7f0000000240)=""/144, 0x90}) 07:30:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 526.556952][T12965] tipc: Enabling of bearer rejected, illegal name 07:30:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:20 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 526.664471][T12976] tipc: Enabling of bearer rejected, illegal name 07:30:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="000800007bfc530800020600"], 0x20c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x560e, &(0x7f0000000000)) 07:30:20 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x208001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd=r3, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 07:30:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="000800007bfc530800020600"], 0x20c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x560e, &(0x7f0000000000)) 07:30:21 executing program 0: syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x45df}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)="f820791d28d89b8cd0a679d192399179dbde448baaafdcb52b0d7dca0095cddbaf47313d4916b800c82dae9da82db01140644e30a7a7aa62a815c2fa5daa34784998bef663826d0d8bbebb959af92777d6bd2a0a2291b0a8fd843c23a82a665f4b76fb0578001c28a9f7e5c2dd2f0d6cd01485bb20400f8fc694ad5c18d30fd738369c9b813122c36be5046548e60e68f4d2284479dbe2a4997d2193526ee4fd") 07:30:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:21 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) pipe(0x0) 07:30:22 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x100) connect(r0, &(0x7f0000000140)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x5) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000080)) 07:30:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:23 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) pipe(0x0) 07:30:23 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:23 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000080)) 07:30:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x10000, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000100)=0x2, 0x2c7) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:30:24 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:24 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bond_slave_0\x00', 0x1000}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000001c0)={0x2, 0x100, 0x3}) r4 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x800, 0x0) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz0\x00', {0x8001, 0x9, 0x0, 0x9}, 0x22, [0x7, 0x0, 0x2, 0x400, 0x400, 0xffffff7f, 0x0, 0x2c67, 0x6, 0x3f78, 0x6, 0x4, 0x0, 0x20, 0xfffffffc, 0x2, 0x6, 0x0, 0x9, 0x800ff, 0x7, 0x3, 0xffffffff, 0x7fff, 0xffff, 0x2, 0x7, 0x8c1, 0x6b, 0x64, 0x7, 0xcf, 0x1000, 0x0, 0x2, 0x1000, 0x0, 0x1, 0xd, 0x1, 0x1, 0x0, 0x1, 0x10000, 0x6, 0x1, 0x4, 0x6, 0xffffffff, 0x0, 0x1, 0x0, 0xfff, 0x9, 0xfffffeff, 0x6671938, 0x4, 0xce1, 0x1, 0x0, 0x200000, 0x7fffffff, 0xfff, 0x40], [0x2e05927d, 0x0, 0xc68, 0x976, 0x2, 0xfff, 0x3, 0x200, 0x4, 0xfffff753, 0x6, 0x7f, 0x80000001, 0x0, 0x3, 0xb7b, 0x3ff, 0xaee, 0x7fff, 0x6, 0xf8, 0xea, 0x2, 0x4, 0x6, 0xfffffffb, 0x0, 0x2, 0x2, 0xab8, 0x8, 0x8, 0x8, 0x3, 0x3, 0x8, 0x8, 0x7, 0x8, 0x10001, 0x800, 0x8, 0x8, 0x1ff, 0x7, 0x401, 0xfffffff9, 0x3, 0x48, 0xffffffe1, 0x0, 0x0, 0xdd8, 0x2, 0x9, 0x5, 0x100, 0x1f, 0x2, 0x800, 0x4, 0x2], [0xfffffff7, 0x5, 0x8000, 0x3ff, 0x4f, 0x5b75, 0xc2d, 0x2, 0x8001, 0x1, 0xffffffff, 0x1, 0x8, 0x53601534, 0x5, 0x10001, 0x0, 0xffffffff, 0x981c, 0x6, 0x7fffffff, 0xf2ea, 0x401, 0x1, 0x6e, 0x0, 0x5, 0xfffffff8, 0x143a00, 0x2, 0x5, 0x7, 0x8000, 0x7f, 0x7, 0x1, 0x5, 0x2, 0x10000, 0xc0, 0x1000, 0x7fff, 0x8, 0x6, 0x9, 0x7, 0xfad, 0x1, 0x101, 0x7fff, 0x0, 0x81, 0x7, 0x8, 0x80, 0x3, 0x7db7, 0x1f, 0x3, 0x10001, 0x8, 0xfffff19b, 0x1, 0x8bb8], [0x1, 0x1000, 0x9, 0x32b, 0xfff, 0x3ff, 0x3, 0x5, 0x2, 0x8, 0x1f, 0x800, 0x8001, 0x7ff, 0x3, 0x1, 0x4, 0x8, 0x7, 0xcc, 0xff, 0x5, 0x80000001, 0x80000001, 0x6, 0x9, 0xffff, 0x3, 0x7, 0x4, 0xffff8001, 0x5, 0x0, 0xc85a, 0x1, 0x5, 0x7295, 0x0, 0x5, 0x1, 0x5, 0x2, 0x9, 0x2, 0x1, 0x5, 0xc1d, 0x1, 0x3bcf5537, 0x2, 0x0, 0x3ff, 0xe856, 0x0, 0x368, 0x20, 0x200, 0x7fff, 0x400, 0x80, 0x1, 0x7fffffff, 0xc0000000, 0x3]}, 0x45c) 07:30:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000080)) 07:30:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x1a, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:25 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x0) 07:30:25 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0xf7, 0x1}, {0x3, 0x9}, 0x7, 0xe, 0xfc}) 07:30:26 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) fstat(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000002c0)={0x2, 0x3, 0x80, 0x7, 0x101, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010000f0800"/20, @ANYRES32=r4, @ANYBLOB="0f0000000000000008001c00ef000000a24aa531b280de98bc528c67bb40a227a36e72881d1f192fe4654d8fa359bd9991557eedf2bf19dfa3de14b539c7045ac9a92edb4f7dc08c6370e07c01fdf4467ac249803226b9770176e2b3151d06"], 0x28}, 0x1, 0x3601}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x2f, 0x81, 0x6, 0xec1, 0x9, @ipv4={[], [], @empty}, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x700, 0x5, 0x6}}) r6 = openat$vga_arbiter(0xffffff9c, 0x0, 0x80203, 0x0) fgetxattr(r6, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)=""/102, 0x66) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x130, 0x0, 0x208, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 07:30:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x0) 07:30:26 executing program 0: r0 = syz_io_uring_setup(0x4000087, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) iopl(0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4800396) 07:30:26 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 533.567934][T13180] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 533.883632][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:30:27 executing program 0: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1f, 0x6, [0x0, 0x6, 0x9, 0x3, 0x1, 0x6]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r0, 0x3bd5}, 0x8) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x8000, 0x18100) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000020000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000200ffffac1414001400010000000000000000000000ff"], 0x40}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[0x0, 0x2], [], @local}}]}, 0x40}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r9, 0x2, {0x0, 0x1}, 0xfe}, 0x18) 07:30:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x0) [ 534.177505][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:30:27 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4d, 0x2}, @cond}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040), 0x373) 07:30:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:28 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x10000, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x51, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x373) 07:30:28 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x1, &(0x7f00000001c0)={0x0, 0x989680}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000100)={0x7, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x84) getpeername$netlink(0xffffffffffffffff, &(0x7f0000001300), &(0x7f0000001340)=0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:28 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x51, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x373) 07:30:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x51, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0xa8) 07:30:29 executing program 0: r0 = syz_io_uring_setup(0x4b5f, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0x20}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$random(0xffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x80002, 0x0) r4 = signalfd(r0, &(0x7f0000000340)={[0x1000, 0x3]}, 0x8) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000140)=[r0, r3, r5, r0], 0x4, 0x0, 0x1, {0x0, r6}}, 0x0) r7 = openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000300)={0x100000000, 0x6}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:29 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:29 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x50, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x373) 07:30:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8000000020c, 0x121041) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(0x0, &(0x7f0000b38000/0x1000)=nil, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4d, 0x2}, @cond}) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040), 0x373) 07:30:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:29 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:29 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x1, 0x7f, 0x6, 0x80}}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) rename(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='./file1\x00') 07:30:30 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:30 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}, 0x1, 0x3a000000}, 0x0) 07:30:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:30 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, 0xe8) 07:30:30 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 537.531803][T13339] IPVS: ftp: loaded support on port[0] = 21 07:30:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e3d0e9d6d9d18e5f39868de363d3", 0x0, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:30:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) recvmmsg(r0, &(0x7f0000003040)=[{{&(0x7f0000000100)=@caif=@dgm, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/251, 0xfb}, {&(0x7f0000000640)=""/141, 0x8d}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f0000000180)=""/80, 0x50}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/190, 0xbe}], 0x7, &(0x7f00000009c0)=""/84, 0x54}, 0x20}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000bc0)=""/210, 0xd2}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/247, 0xf7}, {&(0x7f0000001dc0)=""/162, 0xa2}, {&(0x7f0000001e80)=""/203, 0xcb}, {&(0x7f0000001f80)=""/69, 0x45}], 0x8, &(0x7f0000002040)=""/4096, 0x1000}, 0x2}], 0x2, 0x40002070, &(0x7f0000003080)={0x0, 0x3938700}) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000030c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x2b, 0x7f, 0x6, 0x3f, 0x3f, 0xff, 0x4, 0x8, 0x1f, 0x3f, 0x3f, 0x1, 0x0, 0x1, 0x20, 0xff}}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x220203) 07:30:31 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 538.378971][T13381] [ 538.381563][T13381] ********************************************************** [ 538.388989][T13381] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 538.396656][T13381] ** ** [ 538.404230][T13381] ** trace_printk() being used. Allocating extra memory. ** [ 538.411822][T13381] ** ** [ 538.419281][T13381] ** This means that this is a DEBUG kernel and it is ** [ 538.426896][T13381] ** unsafe for production use. ** [ 538.434435][T13381] ** ** [ 538.441972][T13381] ** If you see this message and you are not debugging ** [ 538.449389][T13381] ** the kernel, report this immediately to your vendor! ** [ 538.457019][T13381] ** ** [ 538.464547][T13381] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 538.472077][T13381] ********************************************************** 07:30:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 540.075310][T13339] tipc: Started in network mode [ 540.080411][T13339] tipc: Own node identity 7f, cluster identity 4711 [ 540.090076][T13339] tipc: 32-bit node address hash set to 7f [ 540.132168][T13339] IPVS: ftp: loaded support on port[0] = 21 [ 540.336210][ T1589] tipc: Left network mode [ 540.344066][ T1589] tipc: TX(7f) has been purged, node left! 07:30:34 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}, 0x1, 0x3a000000}, 0x0) 07:30:34 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:34 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0xfffffff9, 0x200) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x1, 0x0) 07:30:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:35 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r2, &(0x7f0000000180)={@void, @val, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1}}}}, 0x1e) 07:30:35 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:35 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xbaa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000840)=""/78, 0x4e}], 0x1}}], 0x1, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0, 0x0) r6 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x4200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x62c, 0x7f, 0x7}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) io_destroy(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x4, 0x2, 0x2, "f1555f63055894fad4d249856bae65eacfea1db50d27146ddaa26644e9cfd716", 0x41495043}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@upd={0xf0, 0x12, 0x20, 0x70bd26, 0x25dfdbfb, {{'drbg_nopr_hmac_sha1\x00'}, [], [], 0x400, 0x2000}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x4000400}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x8001) [ 542.245244][T13462] IPVS: ftp: loaded support on port[0] = 21 07:30:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 543.674329][T11671] tipc: TX() has been purged, node left! [ 543.871498][ T8699] Bluetooth: hci2: command 0x0406 tx timeout [ 544.405283][T13462] tipc: Started in network mode [ 544.410966][T13462] tipc: Own node identity 7f, cluster identity 4711 [ 544.419205][T13462] tipc: 32-bit node address hash set to 7f 07:30:38 executing program 4: 07:30:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:38 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:38 executing program 2: 07:30:38 executing program 2: 07:30:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:39 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:39 executing program 4: r0 = syz_io_uring_setup(0x97f, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 546.995880][T11671] tipc: Left network mode [ 547.003904][T11671] tipc: TX(7f) has been purged, node left! 07:30:42 executing program 0: ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000340)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x16}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xdc00}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf800}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c040}, 0x88c05029bbb55211) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000180)={0x9a0000, 0xd1d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9b0972, 0xffff, [], @string=&(0x7f0000000100)=0x1}}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:42 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:42 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:42 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x7, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:42 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r0, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:42 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:42 executing program 4: 07:30:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:43 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f00006d4000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x49386ba6a9ac9fc0, 0x0, [0xbd3, 0x4, 0x6, 0x6, 0x5, 0x100000000, 0x2b8, 0x8001]}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x3f, 0x8, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fa0, 0x20, 0x3, 0x7}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000280)={0x1d, r3}, 0x10) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@deltclass={0xa8, 0x29, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x5f9574bf71515369, 0x9}, {0x3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3e}}, @TCA_RATE={0x6}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x54, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x70b1, 0x0, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x0, 0x7fff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3f, 0x8, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0xfffffff8, 0x8001}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x0, 0x6b18}}]}}, @tclass_kind_options=@c_taprio={0xb, 0x1, 'taprio\x00'}, @tclass_kind_options=@c_red={0x8, 0x1, 'red\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40440c0) 07:30:43 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r0, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:43 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:43 executing program 4: 07:30:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:44 executing program 0: ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000100)={0x0, 0x0, "bf6d08ba5d2bb850352ddce8edb25b60f2922db395b7467f8fcba02ab9eba1ff", 0x4dc000000, 0x75043c0b, 0x0, 0x1, 0x9, 0x7, 0x7, 0x1, [0x6, 0x8, 0x3ff, 0x9]}) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:44 executing program 4: 07:30:44 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r0, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:44 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:44 executing program 4: 07:30:44 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000100)={0x2, 0x1, [0x5, 0x6, 0x800, 0x3, 0x3, 0x81, 0x7, 0x40]}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5e}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0xffff, 0x622001) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f00000002c0)) 07:30:44 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:45 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:45 executing program 4: 07:30:45 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:45 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:45 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:46 executing program 4: 07:30:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:46 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:46 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:46 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:46 executing program 4: 07:30:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 07:30:47 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0xc474, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r4, &(0x7f0000000000), 0x10) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x7}, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6a80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x270e}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:47 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:47 executing program 4: 07:30:47 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:47 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:47 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @private}}}, &(0x7f0000000180)=0x90) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x101, 0xff, 0x81, 0x3}]}, 0x8) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000100)=0xffffab53, 0x4) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:47 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:47 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:47 executing program 4: 07:30:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:48 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:48 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:48 executing program 4: 07:30:48 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:48 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000140)={0x18, 0x0, {0x4, @random="b81a622d7769", 'wg0\x00'}}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) 07:30:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:49 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:49 executing program 4: 07:30:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:49 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:49 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x6f4, 0x1, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000380)={0x9f0000, 0x8000, 0xa8, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x980906, 0x9, [], @string=&(0x7f0000000040)=0x1}}) close(r4) r5 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x200, 0x349401) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000002c0)={0x1}) splice(r3, 0x0, r4, 0x0, 0x4ff60, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000240)={0xffff, 0x8001, 0xf1, &(0x7f0000000100)="3f773b74f1c913c8f9780bc7babb533bde7461a8688eb8bccd436611609d0772e154574c7e230a578183ac2f761064f6319c0b9515262b4b1743f303eede4319abd5dd766dc5b945808c705634f760ddfebaa5db4e9007358f8114163203372a0ee137463c9d26a6d789922aebf7896a76f0868fb324286a8f04f715420f5a3e5d8d415ce46013ac69d50c8d1675f50deeb5e2e3b44564b195a1c08d242d9f1b088e1fab9a277b220efd855a9fc5a06749a45137d7e1720f1058dab650626be863e1009e7270893b5423aea33156e1a97a972ab6ea4982de1a39ecf49e1465dc1e93c5d3a2a6c5bdd30a4dca66773fd576"}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x4) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x10, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:49 executing program 4: 07:30:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:49 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:50 executing program 0: syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCNOTTY(r2, 0x5422) 07:30:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000100)=['\x02'], 0x1}) 07:30:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:50 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:51 executing program 2: r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @null]}, 0x48) 07:30:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:51 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f00006d4000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:51 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 558.350440][T13919] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 07:30:51 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:51 executing program 2: r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 558.439475][T13920] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 07:30:52 executing program 4: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010101020000000000000000000000000c0019800800010001"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 07:30:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:52 executing program 0: syz_io_uring_setup(0x5fa2, &(0x7f0000000000)={0x0, 0x64bf, 0x2, 0x1, 0x2ac}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:52 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:52 executing program 2: r0 = syz_io_uring_setup(0x87, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 559.242895][ T8704] Bluetooth: hci3: command 0x0406 tx timeout 07:30:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ff60, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000100)={0x5, 0x100, {}, {0xee00}, 0x2, 0x2}) r2 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:53 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:53 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:53 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 07:30:54 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:54 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) 07:30:54 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:54 executing program 0: r0 = syz_io_uring_setup(0x22d6, &(0x7f0000000080)={0x0, 0xea57}, &(0x7f00006d4000/0xe000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:54 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:55 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:55 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000000100)=""/140, &(0x7f00000001c0)=0x8c) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ff60, 0x0) pidfd_getfd(r4, r3, 0x0) 07:30:55 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:55 executing program 4: 07:30:56 executing program 4: 07:30:56 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:56 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000140)={r3}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:56 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getdents(r0, 0x0, 0x0) 07:30:57 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:57 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:57 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, "4f4fda0763cfd94916990c622842b207e649436b3ccbca7412"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000040) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:57 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:57 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:58 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:58 executing program 0: r0 = syz_io_uring_setup(0x1000087, &(0x7f0000000140)={0x0, 0x979e, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:58 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x868c1, 0x1d) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r1, r2, 0x0, 0x11f08) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, 0x0) 07:30:58 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:58 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:30:59 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:30:59 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) connect$phonet_pipe(r3, &(0x7f0000000000), 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'bond0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x815) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x4510, 0x20, 0x2, 0x0, 0x0) [ 566.239614][ T29] audit: type=1804 audit(1598599859.619:17): pid=14179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203790769/syzkaller.YYhvs5/88/file0" dev="sda1" ino=16017 res=1 07:30:59 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:30:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:30:59 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000003400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000ec0)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x20000000c64, 0x0) [ 567.459898][T14245] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52 sclass=netlink_xfrm_socket pid=14245 comm=syz-executor.0 [ 568.035283][ T29] audit: type=1804 audit(1598599861.409:18): pid=14249 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203790769/syzkaller.YYhvs5/88/file0" dev="sda1" ino=16017 res=1 07:31:01 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x868c1, 0x1d) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(r1, r2, 0x0, 0x11f08) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, 0x0) 07:31:01 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:01 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 07:31:01 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x1bdd307, 0x0) 07:31:02 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:02 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="110100007d00001905f200000500000005"], 0x111) 07:31:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:02 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x81, 0x5, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @planes=&(0x7f0000000000)={0x0, 0x0, @fd, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0xff00}) 07:31:02 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 569.948259][ T29] audit: type=1804 audit(1598599863.339:19): pid=14277 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203790769/syzkaller.YYhvs5/89/file0" dev="sda1" ino=16017 res=1 07:31:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 07:31:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x0) 07:31:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:31:04 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:04 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:04 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:04 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:04 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 571.494584][T11905] usb 2-1: new high-speed USB device number 18 using dummy_hcd 07:31:04 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 571.754499][T11905] usb 2-1: Using ep0 maxpacket: 16 07:31:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 572.064453][T11905] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 572.073746][T11905] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 572.082127][T11905] usb 2-1: Product: syz [ 572.086423][T11905] usb 2-1: Manufacturer: syz [ 572.091251][T11905] usb 2-1: SerialNumber: syz 07:31:05 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x200087) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004280)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendfile(r1, r0, 0x0, 0x80001d00c0d0) 07:31:05 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 572.175847][T11905] usb 2-1: config 0 descriptor?? [ 572.236790][T11905] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 018 [ 572.826366][ T29] audit: type=1800 audit(1598599866.219:20): pid=14385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=15729 res=0 [ 572.878099][T11905] i2c i2c-0: connected i2c-tiny-usb device [ 573.081464][ T8701] usb 2-1: USB disconnect, device number 18 [ 573.872406][ T8701] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 574.121988][ T8701] usb 2-1: Using ep0 maxpacket: 16 07:31:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:31:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:07 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:07 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) creat(&(0x7f0000000140)='./bus\x00', 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 07:31:07 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 574.482026][ T8701] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 574.491766][ T8701] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 574.500003][ T8701] usb 2-1: Product: syz [ 574.504899][ T8701] usb 2-1: Manufacturer: syz [ 574.595935][ T8701] usb 2-1: config 0 descriptor?? [ 574.648698][ T8701] usb 2-1: can't set config #0, error -71 [ 574.699509][ T8701] usb 2-1: USB disconnect, device number 19 07:31:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:08 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:08 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 575.431293][ T9137] usb 2-1: new high-speed USB device number 20 using dummy_hcd 07:31:09 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 575.671374][ T9137] usb 2-1: Using ep0 maxpacket: 16 07:31:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(0x0, 0x8c, 0xfffffffc, 0x0, 0x0, 0x0) 07:31:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 575.952649][ T9137] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 575.961979][ T9137] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 575.970291][ T9137] usb 2-1: Product: syz [ 575.974800][ T9137] usb 2-1: Manufacturer: syz [ 575.979559][ T9137] usb 2-1: SerialNumber: syz [ 576.119127][ T9137] usb 2-1: config 0 descriptor?? [ 576.170363][ T9137] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 020 [ 576.816844][ T9137] i2c i2c-0: connected i2c-tiny-usb device [ 577.031683][ T9137] usb 2-1: USB disconnect, device number 20 07:31:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:31:11 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d30130000000002"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:11 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:11 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) 07:31:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x80800, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') fchown(r2, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x479e6139}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 07:31:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 577.819179][T14512] syz-executor.0: vmalloc: allocation failure: 17179869208 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.834339][T14512] CPU: 1 PID: 14512 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 577.843110][T14512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.853233][T14512] Call Trace: [ 577.856650][T14512] dump_stack+0x21c/0x280 [ 577.861160][T14512] warn_alloc+0x4cc/0x680 [ 577.866130][T14512] ? kmsan_get_metadata+0x116/0x180 [ 577.871442][T14512] ? __vmalloc_node_range+0x1e4/0x1400 [ 577.877017][T14512] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.882926][T14512] __vmalloc_node_range+0x10bf/0x1400 [ 577.888410][T14512] vzalloc+0xe0/0xf0 [ 577.892476][T14512] ? ip_set_alloc+0x129/0x160 [ 577.897275][T14512] ? ip_set_alloc+0x129/0x160 [ 577.902056][T14512] ip_set_alloc+0x129/0x160 [ 577.906715][T14512] hash_mac_create+0x6e6/0x1140 [ 577.911687][T14512] ? hash_ipportnet6_gc+0x850/0x850 [ 577.916961][T14512] ip_set_create+0xc9d/0x1c00 [ 577.921787][T14512] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.927681][T14512] ? ip_set_protocol+0x930/0x930 [ 577.932813][T14512] nfnetlink_rcv_msg+0xc68/0xdc0 [ 577.937885][T14512] ? kmsan_get_metadata+0x116/0x180 [ 577.943200][T14512] ? kmsan_get_metadata+0x116/0x180 [ 577.948501][T14512] ? kmsan_set_origin_checked+0x95/0xf0 [ 577.954165][T14512] ? kmsan_get_metadata+0x116/0x180 [ 577.959489][T14512] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 577.965451][T14512] netlink_rcv_skb+0x6d7/0x7e0 [ 577.970328][T14512] ? nfnetlink_bind+0x220/0x220 [ 577.975282][T14512] nfnetlink_rcv+0x4fa/0x3f60 [ 577.980106][T14512] ? __dev_queue_xmit+0x4121/0x4470 [ 577.985457][T14512] ? skb_clone+0x491/0x6b0 [ 577.989962][T14512] ? kmsan_get_metadata+0x116/0x180 [ 577.995252][T14512] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 578.001170][T14512] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 578.007334][T14512] ? netlink_deliver_tap+0xdaf/0xed0 [ 578.012733][T14512] ? kmsan_get_metadata+0x116/0x180 [ 578.018025][T14512] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 578.023925][T14512] netlink_unicast+0x11c8/0x1490 [ 578.028966][T14512] ? nfnetlink_net_exit_batch+0x280/0x280 [ 578.034791][T14512] netlink_sendmsg+0x173a/0x1840 [ 578.039836][T14512] ____sys_sendmsg+0xc82/0x1240 [ 578.044800][T14512] ? netlink_getsockopt+0x17e0/0x17e0 [ 578.050257][T14512] __sys_sendmsg+0x6d1/0x840 [ 578.054971][T14512] ? kmsan_copy_to_user+0x81/0x90 [ 578.060186][T14512] ? put_old_timespec32+0x231/0x2d0 [ 578.065479][T14512] ? kmsan_get_metadata+0x116/0x180 [ 578.070762][T14512] ? kmsan_get_metadata+0x116/0x180 [ 578.076047][T14512] ? kmsan_get_metadata+0x116/0x180 [ 578.081435][T14512] __se_compat_sys_sendmsg+0xa7/0xc0 [ 578.086822][T14512] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 578.092383][T14512] __do_fast_syscall_32+0x2af/0x480 [ 578.097681][T14512] do_fast_syscall_32+0x6b/0xd0 [ 578.102619][T14512] do_SYSENTER_32+0x73/0x90 [ 578.107213][T14512] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 578.113602][T14512] RIP: 0023:0xf7fe7549 [ 578.117702][T14512] Code: Bad RIP value. [ 578.121821][T14512] RSP: 002b:00000000f55e10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 578.130330][T14512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 578.138372][T14512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.146410][T14512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.154535][T14512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.162570][T14512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.172370][T14512] Mem-Info: [ 578.175670][T14512] active_anon:132912 inactive_anon:4874 isolated_anon:0 [ 578.175670][T14512] active_file:8528 inactive_file:22934 isolated_file:0 [ 578.175670][T14512] unevictable:187 dirty:76 writeback:0 [ 578.175670][T14512] slab_reclaimable:7032 slab_unreclaimable:22355 [ 578.175670][T14512] mapped:60272 shmem:5064 pagetables:1519 bounce:0 [ 578.175670][T14512] free:241900 free_pcp:1076 free_cma:0 [ 578.213668][T14512] Node 0 active_anon:531004kB inactive_anon:19492kB active_file:33924kB inactive_file:85564kB unevictable:748kB isolated(anon):0kB isolated(file):0kB mapped:234176kB dirty:276kB writeback:0kB shmem:20252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 434176kB writeback_tmp:0kB all_unreclaimable? no [ 578.242350][T14512] Node 1 active_anon:644kB inactive_anon:4kB active_file:188kB inactive_file:6172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:6912kB dirty:28kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no [ 578.268701][T14512] Node 0 DMA free:4096kB min:172kB low:212kB high:252kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.297861][T14512] lowmem_reserve[]: 0 896 1124 1124 1124 [ 578.303701][T14512] Node 0 DMA32 free:67448kB min:40940kB low:50660kB high:60380kB reserved_highatomic:0KB active_anon:512160kB inactive_anon:1996kB active_file:12240kB inactive_file:69840kB unevictable:2016kB writepending:200kB present:3129332kB managed:921776kB mlocked:2020kB kernel_stack:1344kB pagetables:3748kB bounce:0kB free_pcp:2108kB local_pcp:1188kB free_cma:0kB [ 578.337042][T14512] lowmem_reserve[]: 0 0 228 228 228 [ 578.344375][T14512] Node 0 Normal free:12288kB min:9896kB low:12368kB high:14840kB reserved_highatomic:0KB active_anon:18864kB inactive_anon:17496kB active_file:21348kB inactive_file:15724kB unevictable:600kB writepending:96kB present:786432kB managed:233472kB mlocked:600kB kernel_stack:3456kB pagetables:2208kB bounce:0kB free_pcp:532kB local_pcp:288kB free_cma:0kB [ 578.377349][T14512] lowmem_reserve[]: 0 0 0 0 0 [ 578.382315][T14512] Node 1 Normal free:881940kB min:41144kB low:51428kB high:61712kB reserved_highatomic:0KB active_anon:644kB inactive_anon:4kB active_file:188kB inactive_file:6172kB unevictable:0kB writepending:28kB present:3932160kB managed:970752kB mlocked:0kB kernel_stack:64kB pagetables:124kB bounce:0kB free_pcp:1848kB local_pcp:932kB free_cma:0kB [ 578.414436][T14512] lowmem_reserve[]: 0 0 0 0 0 [ 578.419227][T14512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 578.431386][T14512] Node 0 DMA32: 994*4kB (UME) 481*8kB (UME) 429*16kB (UM) 269*32kB (UM) 119*64kB (UM) 53*128kB (UM) 32*256kB (UM) 21*512kB (UM) 10*1024kB (UM) 0*2048kB 0*4096kB = 66880kB [ 578.448818][T14512] Node 0 Normal: 74*4kB (UME) 99*8kB (UME) 72*16kB (E) 78*32kB (ME) 60*64kB (UME) 13*128kB (ME) 4*256kB (E) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 12288kB [ 578.465102][T14512] Node 1 Normal: 153*4kB (UM) 82*8kB (UME) 53*16kB (UM) 32*32kB (UME) 6*64kB (ME) 7*128kB (UME) 4*256kB (UM) 4*512kB (ME) 4*1024kB (ME) 3*2048kB (ME) 211*4096kB (UM) = 881988kB [ 578.483174][T14512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.492988][T14512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.502491][T14512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.512341][T14512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.521826][T14512] 31104 total pagecache pages [ 578.526550][T14512] 0 pages in swap cache [ 578.530879][T14512] Swap cache stats: add 0, delete 0, find 0/0 [ 578.536996][T14512] Free swap = 0kB [ 578.540947][T14512] Total swap = 0kB [ 578.544740][T14512] 1965979 pages RAM [ 578.548673][T14512] 0 pages HighMem/MovableOnly [ 578.553569][T14512] 1433455 pages reserved [ 578.557860][T14512] 0 pages cma reserved 07:31:12 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:12 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d30130000000002"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 579.111181][T11905] usb 2-1: new high-speed USB device number 21 using dummy_hcd 07:31:12 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) 07:31:12 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 579.392386][T11905] usb 2-1: Using ep0 maxpacket: 16 07:31:13 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d30130000000002"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 579.681933][T11905] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 579.691553][T11905] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 579.699800][T11905] usb 2-1: Product: syz [ 579.704400][T11905] usb 2-1: Manufacturer: syz [ 579.709148][T11905] usb 2-1: SerialNumber: syz 07:31:13 executing program 2: syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 579.898495][T11905] usb 2-1: config 0 descriptor?? [ 579.965178][T11905] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 021 [ 580.601713][T11905] i2c i2c-0: connected i2c-tiny-usb device [ 580.825165][ T8699] usb 2-1: USB disconnect, device number 21 07:31:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:31:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:14 executing program 2: syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06010100000000010bfdff1d000000070001000600f2ff9b000780180001808000000000000000ff1002000000000000001c0006000442000000000c00040000000140acdc14aa140017007665746800000000616e000000008000050007008800000014000800000063616e3100000000001b020000000900120000007a32000000000c001b4072dcf77b001980000c00148008200140ee0000a5a00000000004028aab860000000000000000322a3d9cbf3d0900020073797a30"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x883715, 0x0) 07:31:14 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414e"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:14 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mlockall(0x1) [ 581.738726][T14608] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:31:15 executing program 2: syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:31:15 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414e"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 582.311614][ T9137] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 582.551228][ T9137] usb 2-1: Using ep0 maxpacket: 16 07:31:16 executing program 0: 07:31:16 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:31:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 582.842379][ T9137] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 582.851842][ T9137] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 582.860058][ T9137] usb 2-1: Product: syz [ 582.865230][ T9137] usb 2-1: Manufacturer: syz [ 582.869983][ T9137] usb 2-1: SerialNumber: syz [ 583.015051][ T9137] usb 2-1: config 0 descriptor?? [ 583.060728][ T9137] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 022 [ 583.709198][ T9137] i2c i2c-0: connected i2c-tiny-usb device [ 583.929330][T11735] usb 2-1: USB disconnect, device number 22 07:31:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 07:31:17 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414e"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:17 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:31:17 executing program 0: 07:31:17 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mlockall(0x1) 07:31:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 584.847279][ T8704] Bluetooth: hci4: command 0x0406 tx timeout 07:31:18 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:31:18 executing program 0: 07:31:18 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec42"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 585.213495][T11735] usb 2-1: new high-speed USB device number 23 using dummy_hcd 07:31:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 585.460984][T11735] usb 2-1: Using ep0 maxpacket: 16 07:31:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) open$dir(0x0, 0x0, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x8903, &(0x7f0000000240)) 07:31:19 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) pkey_alloc(0x0, 0x6) pkey_alloc(0x0, 0x0) [ 585.744533][T11735] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 585.754634][T11735] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 585.763414][T11735] usb 2-1: Product: syz [ 585.767996][T11735] usb 2-1: Manufacturer: syz [ 585.772920][T11735] usb 2-1: SerialNumber: syz [ 585.841945][T11735] usb 2-1: config 0 descriptor?? [ 585.888057][T11735] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 023 [ 586.537616][T11735] i2c i2c-0: connected i2c-tiny-usb device [ 586.737083][T11735] usb 2-1: USB disconnect, device number 23 07:31:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 07:31:20 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec42"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:20 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mlockall(0x1) 07:31:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"}) read(r0, &(0x7f000001a340)=""/102400, 0x19000) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r4}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 07:31:21 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec42"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 588.250197][ T8699] usb 2-1: new high-speed USB device number 24 using dummy_hcd 07:31:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 588.501261][ T8699] usb 2-1: Using ep0 maxpacket: 16 07:31:21 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:22 executing program 0: [ 588.844511][ T8699] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 588.854654][ T8699] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 588.863203][ T8699] usb 2-1: Product: syz [ 588.867858][ T8699] usb 2-1: Manufacturer: syz [ 588.872945][ T8699] usb 2-1: SerialNumber: syz [ 588.976078][ T8699] usb 2-1: config 0 descriptor?? [ 589.037535][ T8699] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 024 07:31:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:22 executing program 2: 07:31:22 executing program 4: mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 589.680083][ T8699] i2c i2c-0: connected i2c-tiny-usb device [ 589.878122][ T8699] usb 2-1: USB disconnect, device number 24 07:31:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:23 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:23 executing program 0: 07:31:23 executing program 2: 07:31:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:24 executing program 2: 07:31:24 executing program 0: 07:31:24 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 591.250902][ T5] usb 2-1: new high-speed USB device number 25 using dummy_hcd 07:31:24 executing program 2: 07:31:24 executing program 0: [ 591.491416][ T5] usb 2-1: Using ep0 maxpacket: 16 07:31:25 executing program 4: mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 591.772191][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 591.781741][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 591.790034][ T5] usb 2-1: Product: syz [ 591.794599][ T5] usb 2-1: Manufacturer: syz [ 591.799555][ T5] usb 2-1: SerialNumber: syz [ 591.941405][ T5] usb 2-1: config 0 descriptor?? [ 591.987488][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 025 [ 592.638780][ T5] i2c i2c-0: connected i2c-tiny-usb device [ 592.834883][ T8699] usb 2-1: USB disconnect, device number 25 07:31:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) 07:31:26 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699b"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:26 executing program 0: 07:31:26 executing program 2: 07:31:26 executing program 4: mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) 07:31:27 executing program 2: 07:31:27 executing program 0: 07:31:27 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699b"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 594.180951][ T5] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 594.421942][ T5] usb 2-1: Using ep0 maxpacket: 16 07:31:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x2, 0x0) read$alg(r0, &(0x7f0000000540)=""/126, 0x7e) 07:31:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0xa0028000}, &(0x7f0000000240)=0x54) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 594.702368][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 594.711738][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 594.720037][ T5] usb 2-1: Product: syz [ 594.724685][ T5] usb 2-1: Manufacturer: syz [ 594.729518][ T5] usb 2-1: SerialNumber: syz [ 594.881337][ T5] usb 2-1: config 0 descriptor?? [ 594.929190][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 026 [ 595.094537][T14899] IPVS: ftp: loaded support on port[0] = 21 [ 595.571129][ T5] i2c i2c-0: failure reading functionality [ 595.595228][ T5] i2c i2c-0: connected i2c-tiny-usb device [ 595.613126][ T5] usb 2-1: USB disconnect, device number 26 [ 596.006213][T14899] IPVS: ftp: loaded support on port[0] = 21 07:31:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) 07:31:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:29 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699b"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x2, 0x0) read$alg(r0, &(0x7f0000000540)=""/126, 0x7e) 07:31:29 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 596.166612][T11671] tipc: TX() has been purged, node left! 07:31:30 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:30 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 597.100996][ T5] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 597.341001][ T5] usb 2-1: Using ep0 maxpacket: 16 07:31:31 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 597.634923][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 597.644312][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 597.652812][ T5] usb 2-1: Product: syz [ 597.657171][ T5] usb 2-1: Manufacturer: syz [ 597.662172][ T5] usb 2-1: SerialNumber: syz 07:31:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:31 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00', 0xa0028000}, &(0x7f0000000240)=0x54) [ 597.813025][ T5] usb 2-1: config 0 descriptor?? [ 597.857421][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 027 [ 598.220645][T14996] IPVS: ftp: loaded support on port[0] = 21 [ 598.491856][ T5] i2c i2c-0: failure reading functionality [ 598.518314][ T5] i2c i2c-0: connected i2c-tiny-usb device [ 598.594536][ T5] usb 2-1: USB disconnect, device number 27 07:31:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000540)=""/126, 0x7e) 07:31:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) 07:31:32 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) 07:31:32 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r1, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:33 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:33 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xa6, 0x0, 0x0, 0x0, 0x0, 0xc8a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x2800000a, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}, 0x6800}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) r2 = dup(0xffffffffffffffff) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast=0x10}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x40}}], 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=ANY=[@ANYBLOB="e40a0000", @ANYRES16=0x0, @ANYBLOB="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"], 0xae4}}, 0x0) [ 599.881583][ T5] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 600.121074][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 600.257983][T11671] tipc: TX() has been purged, node left! [ 600.402342][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 600.411737][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 600.420014][ T5] usb 2-1: Product: syz [ 600.424624][ T5] usb 2-1: Manufacturer: syz [ 600.429447][ T5] usb 2-1: SerialNumber: syz [ 600.617919][ T5] usb 2-1: config 0 descriptor?? 07:31:34 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 600.701976][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 028 07:31:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:34 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x1) [ 601.321655][ T5] i2c i2c-0: failure reading functionality [ 601.341523][ T5] i2c i2c-0: connected i2c-tiny-usb device [ 601.358249][ T5] usb 2-1: USB disconnect, device number 28 07:31:35 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000200)={0x0, [[0x800], [0x2a2], [0x5]], [], [], [], 0x0, 0x0, 0x0, 0x2}) 07:31:35 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000280)=ANY=[]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='*'], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 07:31:35 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:36 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3, 0x1}) 07:31:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 602.751235][ T8703] usb 2-1: new high-speed USB device number 29 using dummy_hcd 07:31:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980902}) 07:31:36 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 603.001117][ T8703] usb 2-1: Using ep0 maxpacket: 16 07:31:36 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x0) [ 603.351533][ T8703] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 603.360884][ T8703] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 603.369211][ T8703] usb 2-1: Product: syz [ 603.373909][ T8703] usb 2-1: Manufacturer: syz [ 603.378663][ T8703] usb 2-1: SerialNumber: syz 07:31:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000000100)=""/4096, 0x31, 0x1000, 0x1}, 0x20) 07:31:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 603.643437][ T8703] usb 2-1: config 0 descriptor?? [ 603.719010][ T8703] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 029 07:31:37 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc008561c, &(0x7f0000000000)={0x980902}) 07:31:37 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000340)={0x0, 'vcan0\x00'}) 07:31:37 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x0) [ 604.347395][ T8703] i2c i2c-0: failure reading functionality [ 604.413401][ T8703] i2c i2c-0: connected i2c-tiny-usb device [ 604.494472][ T8703] usb 2-1: USB disconnect, device number 29 [ 604.669962][T11671] tipc: TX() has been purged, node left! 07:31:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:38 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:38 executing program 0: r0 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000ac0)="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", 0x57c}, {&(0x7f0000001680)="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", 0x58c}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 07:31:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x80045500, &(0x7f0000001440)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 07:31:38 executing program 4: mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mlockall(0x0) 07:31:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) 07:31:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000001000024d564b"]) 07:31:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:39 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:39 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) creat(&(0x7f0000000100)='./file0\x00', 0x0) acct(&(0x7f00000000c0)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r1 = gettid() tkill(r1, 0x1000000000016) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) openat$nvram(0xffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x8) sendfile(r2, r2, &(0x7f00000001c0), 0x0) [ 605.901134][T11905] usb 2-1: new high-speed USB device number 30 using dummy_hcd 07:31:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000000a01010000000000000000020000080900010073797a30000000000900010073797a300000000008000240000000010c00044000000000000000050900010073797a300000000008000240000000010900010073797a30000000008c000000030a01020000000000000000020000000900010073797a300000000014000480080002400000000008000140000000000900030073797a30000000004c0008"], 0x1}}, 0x0) r2 = socket(0x2, 0x3, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 606.161089][T11905] usb 2-1: Using ep0 maxpacket: 16 [ 606.461858][T11905] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 606.471225][T11905] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 606.479433][T11905] usb 2-1: Product: syz [ 606.483944][T11905] usb 2-1: Manufacturer: syz [ 606.488686][T11905] usb 2-1: SerialNumber: syz [ 606.645148][T11905] usb 2-1: config 0 descriptor?? [ 606.700438][T11905] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 030 [ 607.028584][T15237] Process accounting resumed [ 607.354154][T11905] i2c i2c-0: failure reading functionality [ 607.367422][T11905] i2c i2c-0: connected i2c-tiny-usb device [ 607.378411][T11905] usb 2-1: USB disconnect, device number 30 07:31:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x801, 0x0, 0x3f00, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 07:31:41 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:41 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:31:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000640)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xbb\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x00_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd33\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x06\x00\x00\x00\x00\x00\x00\x00Q\x94R/\xdf\x1c\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \x00\x00\x00\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = getpid() r3 = getpid() kcmp(r2, r3, 0x0, r0, 0xffffffffffffffff) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = gettid() tkill(r4, 0x13) 07:31:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 608.261166][T15262] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.4 proc:/self/fd/3' not defined. 07:31:41 executing program 0: clone(0x1000000218007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upfate default user:l'], 0x1a, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 07:31:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:41 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 608.710963][ T3219] usb 2-1: new high-speed USB device number 31 using dummy_hcd 07:31:42 executing program 0: [ 608.821715][T15291] encrypted_key: keylen parameter is missing 07:31:42 executing program 4: [ 608.974058][ T3219] usb 2-1: Using ep0 maxpacket: 16 [ 609.264614][ T3219] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 609.273945][ T3219] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 609.283416][ T3219] usb 2-1: Product: syz [ 609.287709][ T3219] usb 2-1: Manufacturer: syz [ 609.292527][ T3219] usb 2-1: SerialNumber: syz [ 609.306137][ T3219] usb 2-1: config 0 descriptor?? [ 609.376515][ T3219] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 031 [ 610.011959][ T3219] i2c i2c-0: failure reading functionality [ 610.057375][ T3219] i2c i2c-0: connected i2c-tiny-usb device [ 610.105369][ T3219] usb 2-1: USB disconnect, device number 31 07:31:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:31:44 executing program 2: 07:31:44 executing program 0: 07:31:44 executing program 4: 07:31:44 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:44 executing program 4: 07:31:44 executing program 0: 07:31:44 executing program 2: 07:31:44 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 611.474933][ T8703] usb 2-1: new high-speed USB device number 32 using dummy_hcd 07:31:44 executing program 4: [ 611.732993][ T8703] usb 2-1: Using ep0 maxpacket: 16 [ 612.061209][ T8703] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 612.070421][ T8703] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 612.078850][ T8703] usb 2-1: Product: syz [ 612.083277][ T8703] usb 2-1: Manufacturer: syz [ 612.088002][ T8703] usb 2-1: SerialNumber: syz [ 612.123060][ T8703] usb 2-1: config 0 descriptor?? [ 612.166996][ T8703] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 032 [ 612.793511][ T8703] i2c i2c-0: failure reading functionality [ 612.823688][ T8703] i2c i2c-0: connected i2c-tiny-usb device [ 612.864829][ T8703] usb 2-1: USB disconnect, device number 32 07:31:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:46 executing program 0: 07:31:46 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:31:46 executing program 2: 07:31:46 executing program 4: 07:31:47 executing program 2: 07:31:47 executing program 4: 07:31:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:31:47 executing program 0: 07:31:47 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 614.260718][T11735] usb 2-1: new high-speed USB device number 33 using dummy_hcd 07:31:47 executing program 2: [ 614.501391][T11735] usb 2-1: Using ep0 maxpacket: 16 [ 614.781646][T11735] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 614.791001][T11735] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 614.799220][T11735] usb 2-1: Product: syz [ 614.803723][T11735] usb 2-1: Manufacturer: syz [ 614.808446][T11735] usb 2-1: SerialNumber: syz [ 614.848728][T11735] usb 2-1: config 0 descriptor?? [ 614.908190][T11735] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 033 [ 615.551022][T11735] i2c i2c-0: failure reading functionality [ 615.569677][T11735] i2c i2c-0: connected i2c-tiny-usb device [ 615.586079][T11735] usb 2-1: USB disconnect, device number 33 07:31:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a0903010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:31:49 executing program 0: 07:31:49 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:49 executing program 4: 07:31:49 executing program 2: 07:31:50 executing program 0: 07:31:50 executing program 2: 07:31:50 executing program 4: 07:31:50 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:50 executing program 5: [ 617.071929][T11735] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 617.311592][T11735] usb 2-1: Using ep0 maxpacket: 16 07:31:50 executing program 0: [ 617.591650][T11735] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 617.600987][T11735] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 617.609203][T11735] usb 2-1: Product: syz [ 617.613728][T11735] usb 2-1: Manufacturer: syz [ 617.618466][T11735] usb 2-1: SerialNumber: syz [ 617.823842][T11735] usb 2-1: config 0 descriptor?? [ 617.869769][T11735] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 034 [ 618.511946][T11735] i2c i2c-0: failure reading functionality [ 618.543702][T11735] i2c i2c-0: connected i2c-tiny-usb device [ 618.562140][T11735] usb 2-1: USB disconnect, device number 34 07:31:52 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:31:52 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) modify_ldt$read(0x0, &(0x7f00000003c0)=""/102, 0x66) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) 07:31:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp6\x00') lseek(r0, 0x8, 0x0) 07:31:52 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x1f, &(0x7f00000000c0)) [ 619.374315][T15507] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 07:31:53 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:53 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f0000001f00)) 07:31:53 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 07:31:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) 07:31:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 07:31:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0) 07:31:54 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @broadcast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, "ca43132309256f28"}}}}}, 0x32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 620.672040][ T8699] Bluetooth: hci5: command 0x0406 tx timeout 07:31:54 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:54 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0xffffff66) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setitimer(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x24083, 0x0) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:54 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) modify_ldt$read(0x0, &(0x7f00000003c0)=""/102, 0x66) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r2 = dup2(0xffffffffffffffff, r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)) 07:31:55 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:55 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) 07:31:55 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) umount2(0x0, 0x0) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r2, &(0x7f00000017c0), 0x1a5, 0xaf8, 0x0) 07:31:55 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) shmat(0x0, &(0x7f0000ff3000/0x3000)=nil, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 07:31:55 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x21e, 0x0, 0x0) 07:31:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00') 07:31:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp6\x00') lseek(r0, 0x0, 0x1) 07:31:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:56 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) setpriority(0x2, 0x0, 0x6) 07:31:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xfffffffd, 0x0, "184127a429ad8b0a6c8af4782b5ef38a84620602d1c2de161050dd20d7d0d67c3f023819def56113662c6ead1e52c937e4cc4a3cc2972f7b81eb14ef4fb5527e", "13216f9f5777042b205cc4e47c508599652112489f4c1b86632cd37d74004384"}) 07:31:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @dev}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@multicast, @broadcast, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, "ca43132309256f28"}}}}}, 0x32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 07:31:57 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 07:31:57 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) dup2(r0, r1) 07:31:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:57 executing program 4: syz_mount_image$ext4(&(0x7f0000002500)='ext3\x00', 0x0, 0x0, 0x1, &(0x7f0000003a40)=[{&(0x7f0000002580)='A', 0x1}], 0x0, &(0x7f0000003b40)={[{@dax='dax'}, {@max_batch_time={'max_batch_time'}}, {@auto_da_alloc='auto_da_alloc'}]}) 07:31:58 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:58 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003200091c000000000005000000000000100001000c0001"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:31:58 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x28) setitimer(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x24083, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:31:58 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003a40)=[{&(0x7f0000002580)='A', 0x1}], 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) 07:31:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:31:58 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 625.940548][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.950067][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:31:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)) 07:31:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x8, "184127a429ad8b0a6c8af4782b5ef38a84620602d1c2de161050dd20d7d0d67c3f023819def56113662c6ead1e52c937e4cc4a3cc2972f7b81eb14ef4fb5527e", "13216f9f5777042b205cc4e47c508599652112489f4c1b86632cd37d74004384"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 07:31:59 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:31:59 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003200091c000000000005000000000000100001000c0001"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 626.707376][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 626.717036][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:32:00 executing program 4: 07:32:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:00 executing program 5: 07:32:00 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:00 executing program 2: 07:32:00 executing program 0: 07:32:00 executing program 4: 07:32:00 executing program 5: [ 627.520872][ T8703] usb 2-1: new high-speed USB device number 35 using dummy_hcd 07:32:01 executing program 0: 07:32:01 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:01 executing program 4: [ 627.801063][ T8703] usb 2-1: device descriptor read/64, error 18 07:32:01 executing program 5: 07:32:01 executing program 0: [ 628.240859][ T8703] usb 2-1: device descriptor read/64, error 18 [ 628.520701][ T8703] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 628.810929][ T8703] usb 2-1: device descriptor read/64, error 18 [ 629.200801][ T8703] usb 2-1: device descriptor read/64, error 18 [ 629.331224][ T8703] usb usb2-port1: attempt power cycle [ 630.050719][ T8703] usb 2-1: new high-speed USB device number 37 using dummy_hcd 07:32:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:03 executing program 5: 07:32:03 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:03 executing program 4: 07:32:03 executing program 0: 07:32:03 executing program 2: [ 630.230762][ T8703] usb 2-1: device descriptor read/8, error -71 07:32:03 executing program 4: [ 630.450792][ T8703] usb 2-1: device descriptor read/8, error -71 07:32:03 executing program 0: 07:32:03 executing program 5: 07:32:04 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:04 executing program 4: [ 630.946376][ T8703] usb 2-1: new high-speed USB device number 38 using dummy_hcd 07:32:04 executing program 5: [ 631.131436][ T8703] usb 2-1: device descriptor read/8, error -61 [ 631.410922][ T8703] usb 2-1: device descriptor read/8, error -61 [ 631.531041][ T8703] usb usb2-port1: unable to enumerate USB device 07:32:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:06 executing program 0: 07:32:06 executing program 2: 07:32:06 executing program 4: 07:32:06 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:06 executing program 5: 07:32:07 executing program 4: 07:32:07 executing program 0: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x20000148) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) 07:32:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 07:32:07 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x0, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 634.470476][ T8700] usb 2-1: new high-speed USB device number 39 using dummy_hcd 07:32:08 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x7fffdf002000, 0x0, 0x11, r0, 0x8000000) 07:32:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x5415, 0x0) [ 634.740761][ T8700] usb 2-1: device descriptor read/64, error 18 [ 635.130911][ T8700] usb 2-1: device descriptor read/64, error 18 [ 635.411885][ T8700] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 635.681021][ T8700] usb 2-1: device descriptor read/64, error 18 [ 636.070456][ T8700] usb 2-1: device descriptor read/64, error 18 [ 636.191526][ T8700] usb usb2-port1: attempt power cycle [ 636.920660][ T8700] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 637.111620][ T8700] usb 2-1: device descriptor read/8, error -61 07:32:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:10 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x0, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:10 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8918, 0x0) 07:32:10 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 07:32:10 executing program 0: r0 = socket(0x15, 0x5, 0x0) getpeername$ax25(r0, 0x0, 0x0) 07:32:10 executing program 2: keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) [ 637.329078][ T8700] usb 2-1: device descriptor read/8, error -71 07:32:11 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 07:32:11 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x0, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:11 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001800000001040000000000003fffffffad1000000000000095"], &(0x7f0000000540)='GPL\x00', 0x5, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xf0) 07:32:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0505611, 0x0) [ 638.341494][ T8700] usb 2-1: new high-speed USB device number 42 using dummy_hcd 07:32:11 executing program 5: socket$pptp(0x18, 0x1, 0x2) r0 = socket(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x9, &(0x7f0000000000), 0x4) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$llc(r0, &(0x7f0000000200), &(0x7f0000000240)=0x10) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x1b0c, 0x88168, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x3, 0x7}, 0x2004, 0x100000003, 0xe0000, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='pagemap\x00') write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x1, r3}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) [ 638.511337][ T8700] usb 2-1: device descriptor read/8, error -61 07:32:12 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 638.791366][ T8700] usb 2-1: device descriptor read/8, error -61 [ 638.914088][ T8700] usb usb2-port1: unable to enumerate USB device 07:32:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:14 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 07:32:14 executing program 2: r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000080)) 07:32:14 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB='!\x00-'], 0x44}}, 0x0) 07:32:14 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x84c0, 0x0) 07:32:14 executing program 0: r0 = socket(0x2, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0x0) 07:32:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 07:32:15 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x40044104, 0x0) 07:32:15 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 642.040734][T11735] usb 2-1: new high-speed USB device number 43 using dummy_hcd 07:32:15 executing program 0: read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 642.311101][T11735] usb 2-1: device descriptor read/64, error 18 07:32:15 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000000c0)={{0x0, @name="d8ad2d42e81171a5d4d9e98e5074af8ed33580bf204199d8132cf8b4c4606f2b"}, 0x8}) [ 642.700603][T11735] usb 2-1: device descriptor read/64, error 18 [ 642.971101][T11735] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 643.241637][T11735] usb 2-1: device descriptor read/64, error 18 [ 643.630730][T11735] usb 2-1: device descriptor read/64, error 18 [ 643.751211][T11735] usb usb2-port1: attempt power cycle [ 644.461117][T11735] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 644.651224][T11735] usb 2-1: device descriptor read/8, error -61 07:32:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:18 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) fremovexattr(r0, &(0x7f0000001080)=@random={'security.', '/dev/dri/renderD128\x00'}) 07:32:18 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:18 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$char_raw(r0, 0x0, 0x0) 07:32:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xec) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8946, &(0x7f0000000100)) 07:32:18 executing program 5: lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [], {}, [], {0x8}}, 0x24, 0x0) [ 644.976219][T11735] usb 2-1: device descriptor read/8, error -71 07:32:18 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$OBJ_PIN_PROG(0x9, 0x0, 0x0) 07:32:18 executing program 4: r0 = socket(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 07:32:19 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 645.991022][T11735] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 646.211331][T11735] usb 2-1: device descriptor read/8, error -61 07:32:19 executing program 4: r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)=0x10) [ 646.481828][T11735] usb 2-1: device descriptor read/8, error -61 07:32:19 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) memfd_create(&(0x7f0000000100)='/s\xcb\x9cF2\x1d\b\x00\xca\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xca\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43Ur\x13\x0f\x13\xfe\x04\x00\x01q\xf2\xb4 C\xf9\b\x9c\x97D\x96\xfbi\xf8\xa9\bb\xd3\x12*yV]ua5 \xf7\fQ\xd8g9\xb2-\xa1\x06\x00\x00\x00\xe93\xf2\xd6\x03\'\xaa(\x8f\xaf\f7\n\xcf\xaf\xd6\x1fK\xe0\xf3g\x81\xf3o$\x03\x89\xf7\xb6\xed\xd0\xaf\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x17?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2J8x\xad/\xba\x91mJ\x7f\xe4m\xe6\t\xd9?<\xc9Q\x7f\x92$O_\xf6\xb6\x1ce\xd0R\xcf\x1c\xbd\x03\x9a\xca\xc1_\xfb\xd0n\xc0\xc6\x04\xa8\x9c\xf5\xa7\xe5\xf8&5\xffD\x04\x160\xafy\x02\\\x15F\x0f\x01\x00\x00\x00\x00\x00\x00\x00\x1f\x1a\x17\xb9\x9a\xc5Lc\"}\x04\xab\xf2\xd6\xfaYl\\k\x93\xb7\xd3`\xa6\x06\x82Nr\xbc\x7f\bO\xbe+$\b\xb3\xca\xe7\xe6\vG\x15\x89\xfa\xa6\xedlp~\xc4_\x84\x97\xdd\xe9\x05\xee]\x84\x0e\xb6\xd7\x0f;\v\xf3lcU\x16\xc5\xabS2J)\x01*\xab6`\xeflFS\xec\xaf\x851\xeb~\xf9\x86\x13\xc2\x879\x17n\xd2ycE\x04\xf5\x19\xa0\r\xe9\xb6&\xca;\xa7\x98\xd9^\xfa|\x0fI5\xe6#h\xeb\xee?\xefCAx\x85\x0f\xf7PGL\x9f]-\x8e\x8c\xc2\xc1\xdci\x94\xb2+\xdd\xd9m\xc1\xfd\xf9\x9c\x86F\bh\xc6\xc1\xd7\xe8 $\xd4\x16\xad\xcd(\xf3\xae\xa0\xadV\x18\xc6\xaey\xa8\x96XL\x00\x12!\xdf3\xb9jI\t\x8d\x94\x10\xcc\xa0\x18f\xc5\x9c.JjP\xcc\x95\xc6r\x80\xea\x14\x14\x00\x8d\xb1\xe0\xef\xd7\x8b\xff+U8\x16Y\x1c\xd1\xa5Wb\xc5\x98\n\xe4\xb6\xce\x8d;\fH\xaf\x15\xd0V\xcf\xe3V\x90\x8a\xfb\xd1\x1b\x94\xa0\x97\a\xf8337\x179\x14\xf3\xe4\xfa\xcb\x94~\x9dy5Ez\x11~\\\xcfmH\x01\xdd\x90\x82\x85E\x06j\xd95\x97\xc8\xdcFEq\x99\xd1Mpb\xa8.\x1f\xbfI\xea\xcb\xa0\xf5\xac\xc1j\xfa\xfb&\x1b\x81mz\xd4;\xf5\x8e,_\xfb\xa7\x91\xc6\x03\x84\ax\xf01&\xd3\xea\a\'5\x15\xbc\xa5\xf8\xf7@\x88$\x86\xa00\x9c\xbf/\xd9]n^j\xf5\x89\xb4\x90\xcc8\xc4E\xca\x8b\x1f\x05\x7f\x14\a\xc4J\xd6\xea7\"H\xa3D\xc1\xf48K\xb6yN\x90[\xf9.\xa92cd\xd8\n/(\x11\xfekH\xb7S#\x946\xb4]\x1cfA@]\t\xf0.\x7f\x17i\xa9\x84\xf87\xf6\x9fTo\xb5\x16\xebx\xb1\xfe\x89\xfe\xc0\xba\xca\xca\xc6\xac\x9b\xb3\x00\xa9\xf6Yd\xc7c0\xe2\x88\x16;\xc5\fnV\x9a\xd8B\xb4\x14\x14\xd5\x7f\xc3\r\x1b\xe2$\x95\xd6\x110\xc6\xb2G2 tq\xeae!\x81\x92\xd0\\\x14\xff\xb2C\xe0\xf27H\x94+\xb9\xcd\xce<\xe6\xf2\x1f\xf0\xf0N\xeegi@sI\xbaR@\x89 D\xbb!\x01\xd6A\xe9\xf6N\x10\x8ab\x12V\xed\xb8\xaf\xc0\xd3^\x05\xdd@\x8b)\v\x008\"\xbe\xa8\x151p\x816\xd9\xa3i\x9b\x90\xf4F&#\xca\xaf\xffaR\xe32F\x18\x04\xdd\xc8\x1e\x0e%B\xb2\vT\xfe\xde\x1e^Nz\xfb\xf210mf\x9c(d@\x11\xdfmn[\xaa\"\t', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 646.605400][T11735] usb usb2-port1: unable to enumerate USB device 07:32:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:22 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, 0x0) 07:32:22 executing program 0: bpf$MAP_CREATE(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 07:32:22 executing program 2: getgroups(0x2, &(0x7f0000000040)=[0xee00, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, r0}}) 07:32:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0xbc69, 0x4) 07:32:22 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7def95ae"}, 0x0, 0x0, @fd}) 07:32:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x0, @private=0xa010101}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xa85}, 0x8) 07:32:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000109", @ANYRES32=0x0, @ANYBLOB="00000000000000001c"], 0x3c}}, 0x0) 07:32:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) [ 649.660513][ T9137] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 649.739236][T15965] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 07:32:23 executing program 4: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000002c0)='GPL\x00', 0x1, 0xdc, &(0x7f0000000300)=""/220, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x25}, 0x10) [ 649.900876][ T9137] usb 2-1: Using ep0 maxpacket: 16 07:32:23 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 649.944523][ T9137] usb 2-1: no configurations [ 649.949354][ T9137] usb 2-1: can't read configurations, error -22 [ 650.221500][ T9137] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 650.463908][ T9137] usb 2-1: Using ep0 maxpacket: 16 [ 650.504518][ T9137] usb 2-1: no configurations [ 650.509346][ T9137] usb 2-1: can't read configurations, error -22 [ 650.555814][ T9137] usb usb2-port1: attempt power cycle [ 651.314421][ T9137] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 651.411358][ T9137] usb 2-1: Using ep0 maxpacket: 16 [ 651.455059][ T9137] usb 2-1: no configurations [ 651.459820][ T9137] usb 2-1: can't read configurations, error -22 [ 651.634184][ T9137] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 651.731205][ T9137] usb 2-1: Using ep0 maxpacket: 16 [ 651.781353][ T9137] usb 2-1: no configurations [ 651.786189][ T9137] usb 2-1: can't read configurations, error -22 [ 651.854141][ T9137] usb usb2-port1: unable to enumerate USB device 07:32:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0x6) 07:32:25 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 07:32:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)={0x14, 0x3, 0x1, 0x401}, 0x14}}, 0x0) 07:32:25 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9035d301300000000020028000000000000ac295204414ef527660d85ec421b9af3699bf7"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000ff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:32:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) 07:32:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) 07:32:26 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 07:32:26 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x6}, &(0x7f0000000200)={0x9}, 0x0) [ 653.123377][ T3219] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 653.390468][ T3219] usb 2-1: Using ep0 maxpacket: 16 [ 653.431419][ T3219] usb 2-1: no configurations [ 653.436251][ T3219] usb 2-1: can't read configurations, error -22 07:32:26 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={'sha512_mb\x00'}}) 07:32:27 executing program 0: r0 = socket(0x2a, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) 07:32:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) [ 653.670620][ T3219] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 653.940437][ T3219] usb 2-1: Using ep0 maxpacket: 16 [ 653.991638][ T3219] usb 2-1: no configurations [ 653.996520][ T3219] usb 2-1: can't read configurations, error -22 [ 654.027852][ T3219] usb usb2-port1: attempt power cycle [ 654.175770][T16011] could not allocate digest TFM handle sha512_mb [ 654.234705][T16011] could not allocate digest TFM handle sha512_mb [ 654.770932][ T3219] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 654.861220][ T3219] usb 2-1: Using ep0 maxpacket: 16 [ 654.901205][ T3219] usb 2-1: no configurations [ 654.905948][ T3219] usb 2-1: can't read configurations, error -22 [ 655.080783][ T3219] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 655.170894][ T3219] usb 2-1: Using ep0 maxpacket: 16 [ 655.210702][ T3219] usb 2-1: no configurations [ 655.215462][ T3219] usb 2-1: can't read configurations, error -22 [ 655.260487][ T3219] usb usb2-port1: unable to enumerate USB device 07:32:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:29 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"7afa44d55a7ffd27e50ceb9758ba3a40"}) 07:32:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@fat=@tz_utc='tz=UTC'}]}) 07:32:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd}, 0x40) 07:32:29 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 07:32:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x84, 0x19, 0x0, 0x0) 07:32:29 executing program 4: openat$random(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/urandom\x00', 0x0, 0x0) [ 656.296880][T16036] FAT-fs (loop3): bogus number of reserved sectors [ 656.308142][T16036] FAT-fs (loop3): Can't find a valid FAT filesystem 07:32:29 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 07:32:29 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000100)) 07:32:29 executing program 5: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) [ 656.574306][T16036] FAT-fs (loop3): bogus number of reserved sectors [ 656.581935][T16036] FAT-fs (loop3): Can't find a valid FAT filesystem [ 656.690547][T11735] usb 2-1: new high-speed USB device number 55 using dummy_hcd 07:32:30 executing program 4: prctl$PR_SET_MM_AUXV(0xe, 0xc, 0x0, 0x0) 07:32:30 executing program 3: syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x48, 0x0) [ 656.930858][T11735] usb 2-1: Using ep0 maxpacket: 16 [ 656.971539][T11735] usb 2-1: no configurations [ 656.976314][T11735] usb 2-1: can't read configurations, error -22 [ 657.176468][T11735] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 657.374292][ T29] audit: type=1400 audit(1598599950.770:21): avc: denied { getattr } for pid=16056 comm="syz-executor.2" path="socket:[57222]" dev="sockfs" ino=57222 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 657.440329][T11735] usb 2-1: Using ep0 maxpacket: 16 [ 657.482555][T11735] usb 2-1: no configurations [ 657.487313][T11735] usb 2-1: can't read configurations, error -22 [ 657.507907][T11735] usb usb2-port1: attempt power cycle [ 658.221205][T11735] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 658.312120][T11735] usb 2-1: Using ep0 maxpacket: 16 [ 658.351836][T11735] usb 2-1: no configurations [ 658.356617][T11735] usb 2-1: can't read configurations, error -22 [ 658.530612][T11735] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 658.621570][T11735] usb 2-1: Using ep0 maxpacket: 16 [ 658.661040][T11735] usb 2-1: no configurations [ 658.665781][T11735] usb 2-1: can't read configurations, error -22 [ 658.690547][T11735] usb usb2-port1: unable to enumerate USB device 07:32:32 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a09030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 07:32:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 07:32:32 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x18}}, 0x0) 07:32:32 executing program 3: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x3031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 07:32:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x76, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 07:32:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc208ae62, &(0x7f0000000280)) 07:32:33 executing program 0: bpf$PROG_LOAD(0x12, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) 07:32:33 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000340)) [ 660.600771][ T5] usb 2-1: new high-speed USB device number 59 using dummy_hcd 07:32:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fchdir(0xffffffffffffffff) [ 660.841241][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 660.963055][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.973586][ T5] usb 2-1: config 0 has no interfaces? [ 661.161313][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 661.170775][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 661.179061][ T5] usb 2-1: Product: syz [ 661.183711][ T5] usb 2-1: Manufacturer: syz [ 661.188610][ T5] usb 2-1: SerialNumber: syz 07:32:34 executing program 5: syz_mount_image$bfs(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:32:34 executing program 4: r0 = syz_io_uring_setup(0x6b52, &(0x7f0000000340), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x81be, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f223964d"}, 0x0, 0x0, @fd}) io_uring_enter(r0, 0x6dad, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)='CP', 0x2}, {0x0}], 0x2, &(0x7f00000013c0)=[{0x10}, {0x10, 0x10d, 0x1ff}], 0x20}}], 0x1, 0x4000040) [ 661.373125][ T5] usb 2-1: config 0 descriptor?? [ 663.275386][ T8703] usb 2-1: USB disconnect, device number 59 07:32:36 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a09030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:36 executing program 0: r0 = socket(0x2, 0x3, 0x3b) connect$can_bcm(r0, &(0x7f0000000080), 0x10) 07:32:36 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000100)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 07:32:36 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x35}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 07:32:36 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8915, &(0x7f0000000000)) 07:32:36 executing program 4: add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000015c0)="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", 0x1001, 0xfffffffffffffffc) 07:32:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x890b, 0x0) 07:32:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 07:32:37 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 664.251384][ T5] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 664.311034][T16146] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 07:32:37 executing program 3: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x400, 0x0) 07:32:37 executing program 4: socket$inet(0x2, 0xa, 0x8) [ 664.490851][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 664.611493][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.621901][ T5] usb 2-1: config 0 has no interfaces? [ 664.791632][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 664.801220][ T5] usb 2-1: New USB device strings: Mfr=10, Product=9, SerialNumber=3 [ 664.809488][ T5] usb 2-1: Product: syz [ 664.814069][ T5] usb 2-1: Manufacturer: syz [ 664.818889][ T5] usb 2-1: SerialNumber: syz [ 664.968812][ T5] usb 2-1: config 0 descriptor?? 07:32:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086b3f110401c3405ce630a09030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "e29dce73"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x4, "537b7cdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:32:40 executing program 5: r0 = socket(0xa, 0x6, 0x0) connect$caif(r0, &(0x7f0000000000)=@util={0x25, "14b437c2f0df3d8844ae36055709c7e2"}, 0x18) 07:32:40 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x4008031, 0xffffffffffffffff, 0x8000000) 07:32:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x10, &(0x7f0000001080), 0x4) 07:32:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae64, 0x0) 07:32:40 executing program 2: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x2) [ 666.991256][ T8703] usb 2-1: USB disconnect, device number 60 07:32:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90f, 0x28101) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0x0) 07:32:40 executing program 4: r0 = socket(0x25, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 07:32:40 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3e) 07:32:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) [ 667.850372][ T8703] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 667.914875][T16188] ===================================================== [ 667.921987][T16188] BUG: KMSAN: uninit-value in ax25_connect+0x12aa/0x21f0 [ 667.929038][T16188] CPU: 0 PID: 16188 Comm: syz-executor.3 Not tainted 5.8.0-rc5-syzkaller #0 [ 667.938155][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.948228][T16188] Call Trace: [ 667.951557][T16188] dump_stack+0x21c/0x280 [ 667.955927][T16188] kmsan_report+0xf7/0x1e0 [ 667.960529][T16188] __msan_warning+0x58/0xa0 [ 667.965083][T16188] ax25_connect+0x12aa/0x21f0 [ 667.969832][T16188] ? kmsan_get_metadata+0x116/0x180 [ 667.975426][T16188] ? ax25_bind+0xba0/0xba0 [ 667.979969][T16188] __sys_connect+0x7a3/0x8a0 [ 667.984638][T16188] ? kmsan_get_metadata+0x116/0x180 [ 667.989884][T16188] ? kmsan_get_metadata+0x116/0x180 [ 667.995131][T16188] __se_sys_connect+0x8d/0xb0 [ 667.999853][T16188] __ia32_sys_connect+0x4a/0x70 [ 668.004780][T16188] __do_fast_syscall_32+0x2af/0x480 [ 668.010639][T16188] do_fast_syscall_32+0x6b/0xd0 [ 668.015618][T16188] do_SYSENTER_32+0x73/0x90 [ 668.020284][T16188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.026631][T16188] RIP: 0023:0xf7ff8549 [ 668.030726][T16188] Code: Bad RIP value. [ 668.035046][T16188] RSP: 002b:00000000f55f20cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 668.043485][T16188] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 668.051479][T16188] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 668.059475][T16188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.067469][T16188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 668.075463][T16188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.083502][T16188] [ 668.085854][T16188] Local variable ----address@__sys_connect created at: [ 668.092763][T16188] __sys_connect+0x118/0x8a0 [ 668.097384][T16188] __sys_connect+0x118/0x8a0 [ 668.101974][T16188] ===================================================== [ 668.108917][T16188] Disabling lock debugging due to kernel taint [ 668.115082][T16188] Kernel panic - not syncing: panic_on_warn set ... [ 668.121697][T16188] CPU: 0 PID: 16188 Comm: syz-executor.3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 668.131769][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.141837][T16188] Call Trace: [ 668.145189][T16188] dump_stack+0x21c/0x280 [ 668.149617][T16188] panic+0x4d7/0xef7 [ 668.153566][T16188] ? add_taint+0x17c/0x210 [ 668.158070][T16188] kmsan_report+0x1df/0x1e0 [ 668.162947][T16188] __msan_warning+0x58/0xa0 [ 668.167505][T16188] ax25_connect+0x12aa/0x21f0 [ 668.172238][T16188] ? kmsan_get_metadata+0x116/0x180 [ 668.177473][T16188] ? ax25_bind+0xba0/0xba0 [ 668.181933][T16188] __sys_connect+0x7a3/0x8a0 [ 668.186573][T16188] ? kmsan_get_metadata+0x116/0x180 [ 668.191801][T16188] ? kmsan_get_metadata+0x116/0x180 [ 668.197030][T16188] __se_sys_connect+0x8d/0xb0 [ 668.201739][T16188] __ia32_sys_connect+0x4a/0x70 [ 668.206611][T16188] __do_fast_syscall_32+0x2af/0x480 [ 668.211875][T16188] do_fast_syscall_32+0x6b/0xd0 [ 668.216758][T16188] do_SYSENTER_32+0x73/0x90 [ 668.221287][T16188] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 668.227652][T16188] RIP: 0023:0xf7ff8549 [ 668.231721][T16188] Code: Bad RIP value. [ 668.235790][T16188] RSP: 002b:00000000f55f20cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 668.244338][T16188] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 668.252336][T16188] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 668.260345][T16188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.268337][T16188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 668.276322][T16188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.285430][T16188] Kernel Offset: disabled [ 668.289760][T16188] Rebooting in 86400 seconds..