iled with error -2
[ 1572.877045][T12117] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1572.895309][T12117] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1572.905976][T12117] usb 1-1: USB disconnect, device number 49
10:11:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x802, 0x73)
sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts={{0x18, 0x29, 0x3b}}], 0x18}, 0x0)

10:11:11 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="b964a6beb078adc5f25d4c55f20034c6fe0d66c1222030cac498cf7cd5d56a480fe7eceb17b7cbf925d49e7856739134a3b825b3070018f4b1ff4a038a6615d60a86184b467d954b71d09e32ca99c0760c6aea0f3f99741e4f9290121d3e43ee45cf927f0838e6daf67f3d19ea98900dbb8a7234e033d051133530048fee8d434f601d98d7774df445a634100640bc78ac13e38e699d3181ea893e4999261abce7cf57abf5184aa8549ae235ddac5e89bfe70f2078e144f362d419834724d0f2835bfd3a634f0c2051a56e1227d739adaa18766584ccfec42352f688186d4d0f0e9a39e64c439c116c1b2e03e1741c20d7d33a866ad83cec88e32b5241d9a334f4c39993daae9f70cb60c09ceb2db6527f05d34e876ac7b819222f7d1781a315d639a2c3e51df83fc48063a86648c636e917a3705df2c8f3db20328d61a4d3b7779973e33215a6e9fa6e4e2d277418ee45b4f88281137b648090a31274a0e4a62ee2cf9259fcb5a2eddadcff9ad08b72e1913a12149f7267b721cedd3fd505711f67a2104f855a2cb1d5f8035ebd6372ae679a78f548c44d9cdaf4fb64056877509e787f942a57f54e2f2f394154ede0a8a52e9e42aba9f96a2a75c90e5f146835f12009c5661fd973a71013079396ed9410c1129e45cb27fe5058aa0806608074eb24f85cc29047bf6f8a5dddf19bde9f7d60e4d1545363100bb6f582639ef3062a438745d27c0408edeb52d2c929f1523eb31618c6dfb1a580002f03ef0d98463033f8052f07a6dad02be839a8685a2599262f884fe27edb37b8bf69e021dd61d45b9fdc570a9b44d075bb5cf140fcce1ce9478643e5a26e49304b82b58ed252ec73a8fb2ed86dc1cce59513a967e3b395a3f2b289c6793abc56b1d505189b59ce7c51cadf99983b559a2550d10aa92a451aa91167790c2bfbd8826974946df8c6b2e1f58b94361e3b0dbf95247c74e13aaeb7190948a688df424d78854233b03b2537d629869f78a8445f629e6ccff3a826003d95b8320fa4aca00195d6e54db2a9988aec3911ce33615febc47e0d9457798d958e447ad1feb82383f8ae83aef62855fd1cfda8fdf34094a1e1ed5ddb154bbc6989c5ded921713376a2bcac4c4f79166525e73157149328063c9cb7b1bc96b7c503f32af9d158435586b877f45f7f737225614f9a0a3a99348501f8b19b5bc5781844937e6f23b695ff2634bf67b0c4f526b4b1032ee61c7839080ed8263afa12c3e6f290f149fd17b6bf3d1c56598810aac98afa9e65bdfa9b3c02b2fd3ed94493d274b96ee3fbca248881439d284dbfb750747b792900f78262da22f14933f571f014c7c14d826079cbaa57b1cd07b3cfab358064dfdc1d04f724c4eb4d39d649913dc14785833567108c3796b8758598c2690808a70a5e6507844ce82a9fe14f3ad6ebc22fc665533bcfab0cd70db8ec8493aa0138fa7871d95729dd956b01a71567d272bd4ff3b549234ffb1f112288633985ea3478c60c8f51bd0e61185b314ce682afbe9b2e67bd10a2d5b5f37a554ab399832e3635f16457f4554451c8c688725b50ffbcfdd2790722f422a197f41d4c816ac2f580bef17873727ec98bd5d85a32045de90c86d14e3f0b1f3f291a6ac1c3bbd982a68010e4d64385e2d8f229a4c1b25ece9d1b799dd70d9c1a314f2e17452e2a3fed0a20569e2de4af91a559bebdacc5abb68554b5c6959a4561cddfb1e1ad57602cc75d7f40faa47f907a48e6f2d716b4e2369f51f2403c181970e2cd925b6cd5543f113bd15240cadcffa4ee64e18a107ff3d3004bfeca202b75855811f981c4ebe1c81d0a59c4f01700930c72ec4eb07fbba48a924e146c9487478d0f16d21fee5f853dcb75fc5ca6dbbb73dd318b360d9df2dd0367a6eb0495421b19e40fa960ad7451681b634a81becf1cb152a7b22fe375134d1daa426ec56e86669ce4a09eeb30541c6eb18b2a5dd2f66df29e38973c6b3ec7ed89e3ee73072f6ec62c6426a93d820bd5c3e5421d4563931bff2f095ef7054456b6f8073942c3affc4c92549f132a3833d3153376e2ad8768e5bf3f133fe0be4ef1dad545565ceda3c83de4be942ddc008fad0848c070a22aaa6e17eb0479d59982b42a5a0443845794114f1e38514f301a81abebe59b3b755636fadcc154d8faa0ff812d731f688ee18193e1cdf5f29532bf911b8a4c195e7be23eb68b1fcfd76178c0c236137051c96bb477df6975e088eab526c408d4949a0887ffecbcd384ea82f46944c37b843ce99c15223ec52d06883a3e6c2ede48aa74fd9c7c1f5e3f291b3705527a1de94d2024093a9ef0e289ace9842c40f923ecd856e80f7f4f3b7fd4148e9658e1a26a6445278d294c2906e5153b5989df2c625acbe3b9e058c0c93e3a8dd0dfe7c25234206db5ec5a88a87fbe90ac9d14afb94a65cda6361f5bd46b0950c26318495e657e308bb3533c187db0ada089604b8dd4c4b60dd339fb40b9c7720a832b7cad50ee28cfdbbd5b7b5ba753ffc6f6e225322cc9bb0f5fec4b4cd0d9032aca66b544411b335f81bda931a4dbec31cb2d399707e897938a8cda948d71cc6bf970bfa7a99b36cc1a7456f2f208a828eb8705aba253c8d1aab2f8a15b98f35764416aee48993abd0e134ec7819958a9a40695bbdc6f166d3d904d31fec0977d27600d9555c6b987792330401cca12c4666b9acddbc993cded044e1e3331123c57cb43da37db25daf54b9826afd002738a6cd9780137049190f3150b7b5756736deed6c208403522fcbb0b4bfd0aaa82318f7581179681020a05ca16452c16123af85057359621c3a5d0e7ffc8dc473055b682f5a2ea6f53a1dd2006f0b7dc0e4f8dafb37d023818a9fde083d60cd69d9f2aacb6afe62d133274538395e916aec2427579d140f3f44232017ec2b3878a92af26f45780fbf2ae73987e77fb38dad5946b1e559c1573941a39e2dd4de16f95a4dfd792ad150c659d28804cf74c2d807f9855cadaa51802c534a38d40342ecdbb7865cb09ed13b7ae12d0f5f5b9c0378688289da96408026f4fdf4c880cb0dca2424b4ce1e5895eda9bf00352de82152fd74e44bb3209ad75ef0444f839e6d0f1d4cada2497f85fe0cd8d8ff3947ef8c755758e2376cabe977b4f4ae78534bc1862d35e855f946125d743504f84c76c7fb0998a523472e593b2b49a716d0f3526d1a63f441670fe25a5fc8d5f3528d3c01ac81d2f13bb7ca7c235414a40bc3bb1e77a9737e291d9723b1b11a7ebbe60f15fcc2464d3889cdbf3111441872b5e7b8cda4677771350169e0acf85179fd4f014a425e2334f2ec6f0482c1784992563692fd5626f4f6fd4d30055e7d10dec43f5ceff6289d267e1f8d0d44bbe4210a6b2c51e85e904044e11057d906afe9582ffb980fe696fd060e0b7ace12685ee711d9011353dee95dd04dc5119f306219c49ebe682adfffdb5cc8df9ab7bc90a1bdb79a20d8cdcbba6174a9d374f9e283be01d6315e1a60caea84f26e89c39848d8332e4a591b45a0cc87910e164ad94c9adb899180cd9b79266f30d6213eb33074c8b631e1f227634b1e5e5acaec5db79000981641f0bbc974b54cc8fd2bf94ac391cff21c1a4af91b33d8d98bdaeaa1173f0bacd5ade4ce5be3826bb2a1d4dd5727662a667dd8e67f1383e2a54c123aed2c270683a1de4381566e616b56d5656e6b68e9436d42c4fcde0ff0926d326d416e7320d7b194c5057aa0d2b85703898faa4b52c76bc46ba648dbaebfa818485208305127a2c3705cdd4b8051bfdaebb7756397bf018e368df57b2e4bbfc195a90722c26a9d108cebfe12a328889aa0173dc99fb8e139d2636198545d9fb49a270a55448258fa2ef4aa48bd1661c59a0a0ab27512899551f7f9d44e0a8d4bf0db621dc49ae9423a9ec14021d92414fd614fa9a7fa16bb452836946ece5291b0b5591479527cd976639f6dd1f937fb6b043db2d195d7feb8a24db48610ecb86e922c84076eb803b2be1fd2413cd79c60de5d1751a61bc0424280e87ab83979cfd6ffdc897184d70401c8caaab3a8ae8f454120786d939428934a3c51b3e882e711e03e6a250b27cee850f2a40c561840e4fae1f149f558c876c6952f8eae56297651e0888b5129739cc79cf411658fc116067fb7d25cb43d50f9c5ad0a5efedc35f9d396dcb1fded3b10c6f367ee15f838a65d59c7618a6dccf15c8fb4074cca0cf723e22cef6f495f60a644387e9a1fc678f2b3e4d29ddb4f5c735f5d0fb9f585a21aa90c1f8f935d62b7f6b659745dc9dc8561937437128863d2ef523b4dd99c2fb7d477f9f2181e07c15c1b6f044f685f89ed372e274aeb1d62d2dbdbcba97cda7f00ec0692d93da4bc3e59a92590a1c076dd22a468c03a5f2df89c0614374c67fe982f4184e6a1736719b96b69ee989d21be8b98f812225013958711603e8fed676269295d08dde013398dbd235678d1e25a846ff442f2c12a7e8ef7073f8fe0a7b79f3ec3a4abf92247d1637bbd40dc8c57065437989720ba323033a06cfd4d1cf369a0903583cf6b20f3dfb45d47aee317041f76facb4b015950aa4b5766abc7350b5c269fd87dc414e6c780dc744849fb4df14b15923b1f65ec40c6fc17f6da1a66a842faa88adcd50f27fb616af949d9ba8a461d98d89103b687ff1d54ec9eeffeb40123109b070b67eceb550765bf70c5a1cc6589a65c2eebd0092b59cd940c46314d2be533ca79449165d5b43f4f918a71589ac311e2b6cb959a0102bf8501b664eef7918a70f72ca1038576f60fe8beda86bd1d45d2257c4b1c1f47ad06742b651f6ba180321cdd727c647c42befd3a67e20f4692662416362bc572fce951028812b262d51267462b67e58ca7425dd35f7106359473ea714b3352ad2d65fddbdd58495161cb7deaeeb2f5be2db58a86fdd9238fc0112f1986c6c64d761908223bee6f4bbdff1dbf68eb3042489d012a54149d567d9d52b33ce0f72e54d0c54c7764e7dd2f3f20cb6c11ecf287bebc671ad5a3e47e37e723fe04216b3e90168bb877812e5fcbf8f1cc7037b3a23666518911de146d1acb02b4b6e84c2b47ec5024eb2bd62ffa94ad85ffcfa44c7178eee40c8c7868832788fe86fb77cee85bb11a14b5fd8b08a9103fe353dd88112885fd77675b6469c3226a8aafa53eca77e2b0f2a4c4ee91fd84708a846ec19a4da252a00a7904530de8a92bf94efb439b03dd312fa402c0cfcd4bd6cd85e9ca0bf56b585d0180ddbe6d6a52a45d7b4f619f683622799cae2d45eb29cbffcedbf196c3ef7aa97507528f4b1d42d315802ea3e406a71392f9aeec3cdd3fa83fd09d68267ee130763c7e14c6987b20fa002c3fee08c09688b56eb63eea31d3aabbd719841ffc0897617f646bd91f2a0f8b186d074069635f9f3bc6d85b5bd04e559435f2b342dc3fb91c933d13d6d37ad741b27828fa4be881f18283912b30962695dd9b4a8d56e595d6e5647207c68e66d82121deb517553d825f746ff1e4c1a8a2e5f727bd8e8e9ecf211f4d48407c781fec871087f2626fd1b01dbf820554af9029af267c4b210d8dcd9dabe44202dde07eff8e853e438d97af5e7ee0388e8cce1c5c68043196b99c55674cd97d1aeb8060e462e9d77277fa6f70ffd99a5d63fe4c262553685bb22a78620a61790642f766a63f90fadb81d4c50bbf89858212ca8685e35d4989c71fe507f2503c8180d3158ad8e1c652dd82997cac25126347e38bb0e43e551a6336a9f991875f49a887a471dd616dc4054c5e2751873cdf8a0206363", 0xffffffffffffffe9, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x400, @rand_addr="58e7d662f708bf1a5d7158f67d93b353", 0xb7}, 0x1c)

10:11:11 executing program 3:
unshare(0x600)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200200, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='map\x00\x00~6\xf5\b\xd2g\xab\fz\xfe\x9f?\x00U\x1de\x9d\xa3p:\xc5{\x8e\xda\xc9\xfc\x8c]\x01\x83B\vg\x8f\xa5\x04\x00', r0}, 0x10)

10:11:11 executing program 1:
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080004000009058cdb000a08000000000c40c8a32820aae3f1c0bc93b09135d69486ca140ad46ab9023df703f2ed03001d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d"], 0x0)

10:11:11 executing program 2:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getegid()
lstat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, r1)
getgroups(0x4, &(0x7f0000000140)=[0x0, r0, r1, 0x0])
getgid()
socket$inet_tcp(0x2, 0x1, 0x0)
setgroups(0x31dbe445, &(0x7f00000002c0))
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3e3, 0x3bc177af4b1a627b)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7})
clock_gettime(0x0, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
futimesat(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{r3, r4/1000+10000}, {0x77359400}})
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r5 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x0)
unshare(0x60020000)

10:11:11 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

[ 1576.456662][T29804] IPVS: ftp: loaded support on port[0] = 21
10:11:11 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x20000000000})

10:11:11 executing program 3:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0)

10:11:11 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x13, &(0x7f0000000000), 0x20a154cc)

10:11:11 executing program 5:
r0 = socket(0x10, 0x803, 0x0)
process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001fc0)={0x300, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @rand_addr="a6e53038e701b5ba95e0921902d32fc5"}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}]}]}, 0x300}}, 0x0)
perf_event_open(&(0x7f0000000980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1005}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

10:11:11 executing program 3:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38)

[ 1576.913373][T23921] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 1576.921280][T11896] usb 1-1: new high-speed USB device number 50 using dummy_hcd
10:11:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0xd00e})

[ 1577.165260][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 1577.283527][T11896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[ 1577.292715][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1577.302042][T23921] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1577.310726][T23921] usb 2-1: config 0 has no interface number 0
[ 1577.317234][T23921] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1577.328175][T23921] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee
[ 1577.337776][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1577.347855][T11896] usb 1-1: config 0 descriptor??
[ 1577.354293][T23921] usb 2-1: config 0 descriptor??
[ 1577.597012][T12117] usb 2-1: USB disconnect, device number 50
[ 1578.283262][T11896] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[ 1578.291164][T11896] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[ 1578.301173][T11896] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1578.318312][T11896] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1578.403145][T28493] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[ 1578.490525][T12117] usb 1-1: USB disconnect, device number 50
[ 1578.773353][T28493] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1578.781532][T28493] usb 2-1: config 0 has no interface number 0
[ 1578.787857][T28493] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1578.798865][T28493] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee
[ 1578.808251][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.817870][T28493] usb 2-1: config 0 descriptor??
[ 1579.065409][T11896] usb 2-1: USB disconnect, device number 51
10:11:16 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4)
r1 = socket(0x1e, 0x1, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
dup2(r1, r2)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:11:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000600, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="8cd40f129524ee860259b1ce249ad1c6aa797adbb695d2be6a7a5d23fbb2c6970f21149b79763892ac0b8b4c25ec1ad3746b65ca787308eb6fc6db9d94c8109fa422a1e744c148bc489572bd83f374cbe71fc0cf02559e70f15d284afe60df1d9224dc1c8ba42f43a56266267eddb5f6b14fb6bea2b5ace4", 0x78)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18}}], 0x18}, 0x0)

10:11:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x800000000000003}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x22, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}, 0x80}, 0x20)

10:11:16 executing program 3:
bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x5f, 0x5f], 0x0, 0xffffffffffffffff, 0x2}, 0x3c)

10:11:16 executing program 1:
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080004000009058cdb000a08000000000c40c8a32820aae3f1c0bc93b09135d69486ca140ad46ab9023df703f2ed03001d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d"], 0x0)

10:11:16 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

10:11:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000ffffffff", 0x58}], 0x1)

10:11:16 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

10:11:16 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r4})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x4008640a, &(0x7f0000000100)={r5, 0x7000000})
dup2(r0, r1)

10:11:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x1e, &(0x7f0000000000), 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = dup2(r0, r2)
dup3(r5, r1, 0x0)

10:11:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000600, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="8cd40f129524ee860259b1ce249ad1c6aa797adbb695d2be6a7a5d23fbb2c6970f21149b79763892ac0b8b4c25ec1ad3746b65ca787308eb6fc6db9d94c8109fa422a1e744c148bc489572bd83f374cbe71fc0cf02559e70f15d284afe60df1d9224dc1c8ba42f43a56266267eddb5f6b14fb6bea2b5ace4", 0x78)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18}}], 0x18}, 0x0)

[ 1581.857734][T11896] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1581.864062][T28493] usb 2-1: new full-speed USB device number 52 using dummy_hcd
10:11:17 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f00000000c0)={'team_slave_1\x00', 0x0})

[ 1582.138294][T11896] usb 1-1: Using ep0 maxpacket: 16
10:11:17 executing program 3:
mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0xffffc, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc))

[ 1582.263619][T11896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[ 1582.273290][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.306727][T11896] usb 1-1: config 0 descriptor??
[ 1582.453413][T28493] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1582.461497][T28493] usb 2-1: config 0 has no interface number 0
[ 1582.467866][T28493] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1582.478919][T28493] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee
[ 1582.488149][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1582.499203][T28493] usb 2-1: config 0 descriptor??
[ 1582.754011][T28493] usb 2-1: USB disconnect, device number 52
[ 1583.203336][T11896] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[ 1583.211101][T11896] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[ 1583.221328][T11896] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1583.238624][T11896] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1583.411633][T11896] usb 1-1: USB disconnect, device number 51
[ 1586.653409][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1586.659572][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1586.813389][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1586.819517][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1587.053453][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1587.059451][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1587.066092][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1587.072124][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1587.078736][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1587.085021][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:11:23 executing program 4:
r0 = socket$inet(0x2, 0x40000000003, 0x800000800000001)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x100, 0x4)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x160)

10:11:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000600, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="8cd40f129524ee860259b1ce249ad1c6aa797adbb695d2be6a7a5d23fbb2c6970f21149b79763892ac0b8b4c25ec1ad3746b65ca787308eb6fc6db9d94c8109fa422a1e744c148bc489572bd83f374cbe71fc0cf02559e70f15d284afe60df1d9224dc1c8ba42f43a56266267eddb5f6b14fb6bea2b5ace4", 0x78)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18}}], 0x18}, 0x0)

10:11:23 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000))
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)
r3 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
tkill(r3, 0x1000000000013)

10:11:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0xaa4, 0x0, 0x0, 0x0, @adapter}]})

10:11:23 executing program 1:
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080004000009058cdb000a08000000000c40c8a32820aae3f1c0bc93b09135d69486ca140ad46ab9023df703f2ed03001d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d"], 0x0)

10:11:23 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x73, 0xb6, 0xf0, 0x10, 0xccd, 0x10a3, 0xf453, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xea, 0xcb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

10:11:24 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 1589.153560][T28493] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[ 1589.195725][T12117] usb 1-1: new high-speed USB device number 52 using dummy_hcd
10:11:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000600, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}])
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="8cd40f129524ee860259b1ce249ad1c6aa797adbb695d2be6a7a5d23fbb2c6970f21149b79763892ac0b8b4c25ec1ad3746b65ca787308eb6fc6db9d94c8109fa422a1e744c148bc489572bd83f374cbe71fc0cf02559e70f15d284afe60df1d9224dc1c8ba42f43a56266267eddb5f6b14fb6bea2b5ace4", 0x78)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18}}], 0x18}, 0x0)

[ 1589.453080][T11978] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1589.504075][T12117] usb 1-1: Using ep0 maxpacket: 16
10:11:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x7}, 0x10)
write(r1, &(0x7f0000000040)="240000001a005f0214f9f4070009040011000000ff020002000200000800040003000000", 0x24)

[ 1589.623983][T28493] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1589.632192][T28493] usb 2-1: config 0 has no interface number 0
[ 1589.638576][T28493] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1589.649626][T28493] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee
[ 1589.660264][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
10:11:24 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x3, 0x0, "b0c7b9bd822173f59c1e3718ab4c8f332688edb9679d731b968df40b5242fe96389377f38336bf4c671230bda278ae03f4d218e21f6ba0537dae68dffb0e1863df5ec693e3dcd7a4bd19fdc267405a5a"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x2, 0x0, "8b05e98a6e9a990ccccaa0722f7917adbf9251c09e5993d319d88199f692070000003eaad49bc3c0a86bd1683c51ec2fdab5a220e04e0000637e2b5a8dd3403b3e0104601d083e2317d3045a7b001d00"}, 0x36a)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "521353f37dcd64c12799efad200b6cd16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f3ea21c5dd607e8a88c9cfd00000000080000000000000000f2ff"}, 0xd8)

[ 1589.670235][T12117] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53
[ 1589.679783][T12117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1589.689907][T12117] usb 1-1: config 0 descriptor??
[ 1589.696598][T28493] usb 2-1: config 0 descriptor??
[ 1589.739028][T11978] usb 3-1: Using ep0 maxpacket: 8
[ 1589.883761][T11978] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[ 1589.894571][T11978] usb 3-1: config 0 has no interface number 0
[ 1589.900805][T11978] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1589.912137][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1589.923568][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1589.935407][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1589.946820][T11978] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1589.960719][T11978] usb 3-1: config 0 interface 164 has no altsetting 0
[ 1589.975819][T11896] usb 2-1: USB disconnect, device number 53
10:11:25 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x40000002, 0x0, 0x4000000000], [0xc1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:11:25 executing program 3:
personality(0x4600000)
io_setup(0x2, &(0x7f0000000240))

[ 1590.073919][T11978] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1590.083177][T11978] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1590.091526][T11978] usb 3-1: Product: syz
[ 1590.151839][T11978] usb 3-1: config 0 descriptor??
[ 1590.356740][T11978] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1590.396858][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.425091][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.593302][T11978] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1590.623417][T12117] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[ 1590.631090][T12117] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[ 1590.641110][T12117] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1590.659178][T12117] dvb_usb_az6007: probe of 1-1:0.0 failed with error -2
[ 1590.668478][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.693244][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.723440][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.729869][T11978] input input65: Limiting number of effects to 32 (device reports 232)
[ 1590.753227][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.773208][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.793397][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.813290][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1590.819658][T11978] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.826123][T11978] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.833860][T11978] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input65
[ 1590.853011][T11896] usb 1-1: USB disconnect, device number 52
[ 1590.868164][T29915] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.876658][T29915] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.883365][T29915] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.889538][T29915] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1590.903692][T23921] usb 3-1: USB disconnect, device number 30
[ 1590.924235][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
[ 1590.930612][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
[ 1591.773284][T23921] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1592.013274][T23921] usb 3-1: Using ep0 maxpacket: 8
[ 1592.133359][T23921] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[ 1592.141631][T23921] usb 3-1: config 0 has no interface number 0
[ 1592.148150][T23921] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1592.159491][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1592.170922][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1592.182543][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1592.193897][T23921] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1592.209243][T23921] usb 3-1: config 0 interface 164 has no altsetting 0
[ 1592.293657][T23921] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1592.303078][T23921] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1592.311492][T23921] usb 3-1: Product: syz
[ 1592.317409][T23921] usb 3-1: config 0 descriptor??
[ 1592.473265][T23921] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1592.493333][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1592.521961][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1592.543329][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.563371][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.583263][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.603196][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.623256][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.643469][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.663205][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.683254][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.703297][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.723174][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.743196][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.763129][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.783186][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.803207][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.823207][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.843210][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.863373][T23921] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1592.869668][T23921] input input66: Timeout waiting for response from device.
[ 1592.881298][T23921] usb 3-1: USB disconnect, device number 31
10:11:31 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x33424752}})

10:11:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000280)=0xeaa4, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x3f}, 0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4)
sendto(r0, &(0x7f00000001c0)="d8", 0x1, 0x0, 0x0, 0x0)

10:11:31 executing program 1:
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200026833cb0009050112080004000009058cdb000a08000000000c40c8a32820aae3f1c0bc93b09135d69486ca140ad46ab9023df703f2ed03001d9cdda8418ea687e52e30d568f5f2f9f3354ae888248ed0fa23b2f36d"], 0x0)

10:11:31 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

10:11:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x200001000008912, &(0x7f00000001c0)="11dca5055e0bcfe47bf070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0)
ioctl$TCSETSF(r1, 0x5404, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='task\x00RT\xdf`\x88\xd2sw\x00k\x9dY\x1a\xe2Hn\xefZ\x00\x04\x83}\xdd\xec\b\xa2\xa6\x89zf\xf7\x06\x03\xb4J\xcfW\x89y\x89\x96\xde\xf8\xd9\xb1\x01\x9e\x9ex!$\xb9\xbb\x9e\xe8\x87w\xc8\'\x90\\\b\xcf\x96\xc6\x01[\x01\x8fB\xa7$\xde\x00\x9c\xd8\x15\xc3\xd3\xb8\xd0\f\x9cA\xee\x10\xcc\xc6\x0eh\bq\xa3rm\x1e\xbb\x7fU\xc6r\xb2\x84Z\xc5\xce=\xaa\xc2u\x95\x89;\xcf\x13\xf2\xf6\x97\x00'/135)
write$sndseq(r1, &(0x7f0000000080)=[{0x10081, 0x6, 0x0, 0x0, @time}], 0x30)

10:11:31 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[ 1596.216070][T29971] TCP: TCP_TX_DELAY enabled
10:11:31 executing program 5:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
write$binfmt_script(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1202"], 0x2)
setrlimit(0x400000000000007, &(0x7f0000000000))
close(r0)
execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

10:11:31 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c)

10:11:31 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00W\xcb\xd53\xc0g\x8a\x1c\xc8m\x8f\xd3\x90\x1f+\x81\x9b\x90\b&\xa5\xd60\xb9\x9e\xcc\xaf3\xea:\aL\x03l\\\xdd\x84\xeeL\xeb,\xa5\xc1\xd4\xd4\xa9I\x87\x06\xfbH>SL\xddsRA\xf2\xf5!JnO\xa7l$\x00V\xa4^\xc7.z)\xc3\f\xee\xce\xec\vM\xcb\xb7\xaa\"[\x19\f\x87\xe4kEmO#\xab`/\xba\xf1\xe3^@:\x86\xff\xc4c\x81\xf0t\x9f7x\xb6\xa3\xedj\\\xbd\x8aK*2|\xdf\xc2[\xbf\x87J\a\xed\b\x8c;\x00\xdf\xab\xcb2\xde\x1f\x90\x1cY\x17+\xb1\x808\xc0\n\x96\x9cVp\x8dq\xba}]\x97\xac\xc9\x91\t\xb4\x97\x11?\xfe\xdf\x00'/190)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00\x01y.swaS.current\x00\xbe\x17\xf2\xfan\xd4\xb9#h\xa1\xf4^\xbb\xe1zX|A=\xfa\x97h7\x84\xf4x\xa3\x17\xc8\xe0Y(\xfep\xf8\x8a\xca\'\xb4\x19\xed|.\"w\xdd\x8b\xd1\xa3M\xc9/\xf6\xbekI7wC\xc2\xcd%\xd0\xa4\xd0{\xbf\r6^\xc0\x92$,\xc6\x8d-\x98\x87/?u\xa8\xda\xefV\xbd\xc23\xe8O|e\x16Z\xa9\x059\xc5\x8bc\xa8k\xcc\xed\x16\xe1O\xa8H\xd6\xa9g\x86\x7f\xdew*\x10\xb5q\x87\xcfS\xc2S\x13\x00\xb4z\xcc\xb7x\xf8q\xd2\xbd!sC\x85\xeeWw\x94\xc7\xaf\xbd\xc8\xc5`\x8c\x1e\xab(\x15q|)\x80', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x20001000)
pkey_free(0xffffffffffffffff)

10:11:31 executing program 3:
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r0, 0x10})

[ 1596.474311][T11978] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[ 1596.496877][T23921] usb 3-1: new high-speed USB device number 32 using dummy_hcd
10:11:31 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x0, 0x80040200, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0))

[ 1596.753751][T23921] usb 3-1: Using ep0 maxpacket: 8
10:11:31 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
unshare(0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1)
socketpair(0x1, 0x4, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80)
write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
poll(0x0, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, 0x0, 0x80000003)

[ 1596.833676][T11978] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[ 1596.841801][T11978] usb 2-1: config 0 has no interface number 0
[ 1596.848318][T11978] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64
[ 1596.859360][T11978] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee
[ 1596.868614][T11978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.879948][T11978] usb 2-1: config 0 descriptor??
[ 1596.885079][T23921] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[ 1596.885149][T23921] usb 3-1: config 0 has no interface number 0
[ 1596.885245][T23921] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1596.911208][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1596.922725][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1596.934401][T23921] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1596.945771][T23921] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1596.959300][T23921] usb 3-1: config 0 interface 164 has no altsetting 0
[ 1597.065272][    C0] net_ratelimit: 4 callbacks suppressed
[ 1597.065419][    C0] protocol 88fb is buggy, dev hsr_slave_0
10:11:32 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

[ 1597.159004][T11896] usb 2-1: USB disconnect, device number 54
[ 1597.285896][T23921] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1597.295661][T23921] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1597.304024][T23921] usb 3-1: Product: syz
[ 1597.317515][T23921] usb 3-1: config 0 descriptor??
[ 1597.453546][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1597.460080][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1597.466743][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1597.473136][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1597.479578][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1597.486075][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1597.492557][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1597.498926][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1597.503484][T23921] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1597.564803][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.583751][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.764113][T23921] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1597.785596][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.813526][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.843465][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.850023][T23921] input input67: Limiting number of effects to 32 (device reports 232)
[ 1597.873469][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.893474][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.913335][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.934971][T23921] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1597.941303][T23921] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1597.947781][T23921] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1597.955859][T23921] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input67
[ 1598.041915][T29970] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1598.052411][T29970] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1598.059146][T29970] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1598.065447][T29970] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1598.076575][T23921] usb 3-1: USB disconnect, device number 32
[ 1598.095070][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
[ 1598.101297][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
10:11:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_ERSPAN_INDEX={0x8}]]}}}]}, 0x44}}, 0x0)

10:11:38 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffd48, 0x0)
sendmsg$unix(r1, &(0x7f0000000d00)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000600), 0x0, &(0x7f0000000bc0)}, 0x8000)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x7})
epoll_wait(r2, &(0x7f0000000580)=[{}], 0x1, 0x0)

10:11:38 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x3)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r2, &(0x7f0000000000)={'stack ', 'u\x00'}, 0x7)
close(r1)
execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

10:11:38 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
unshare(0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1)
socketpair(0x1, 0x4, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80)
write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
poll(0x0, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, 0x0, 0x80000003)

10:11:38 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

10:11:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

[ 1603.453922][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1603.460216][    C0] protocol 88fb is buggy, dev hsr_slave_1
10:11:38 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/179, 0xb3}}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
getsockopt(0xffffffffffffffff, 0x6b2e, 0x0, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
lstat(0x0, &(0x7f0000000280))
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)

[ 1603.693446][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1603.700552][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1603.707196][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1603.713464][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1603.719895][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1603.726205][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1603.732629][    C1] protocol 88fb is buggy, dev hsr_slave_0
10:11:38 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0)

[ 1603.738889][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1603.833426][T11978] usb 3-1: new high-speed USB device number 33 using dummy_hcd
10:11:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

10:11:39 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
unshare(0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1)
socketpair(0x1, 0x4, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80)
write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
poll(0x0, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, 0x0, 0x80000003)

10:11:39 executing program 1:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x110000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xd4, 0x0, &(0x7f0000000080))

[ 1604.103766][T11978] usb 3-1: Using ep0 maxpacket: 8
10:11:39 executing program 5:
r0 = socket(0x1, 0x802, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc)

[ 1604.303321][T11978] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[ 1604.311627][T11978] usb 3-1: config 0 has no interface number 0
[ 1604.318080][T11978] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1604.329823][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1604.341306][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1604.353000][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1604.364342][T11978] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1604.377847][T11978] usb 3-1: config 0 interface 164 has no altsetting 0
[ 1604.465220][T11978] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1604.474523][T11978] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1604.482788][T11978] usb 3-1: Product: syz
[ 1604.492475][T11978] usb 3-1: config 0 descriptor??
[ 1604.653266][T11978] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1604.673162][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.693299][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.713248][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.733273][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.753599][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.913246][T11978] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1604.933390][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.953272][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.973535][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1604.979969][T11978] input input68: Limiting number of effects to 32 (device reports 232)
[ 1605.003354][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1605.023198][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1605.043164][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1605.063161][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1605.069398][T11978] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.075770][T11978] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.083316][T11978] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.164/input/input68
[ 1605.204772][T30031] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.211843][T30031] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.218572][T30031] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.224820][T30031] iforce 3-1:0.164: usb_submit_urb failed -90
[ 1605.236917][T23921] usb 3-1: USB disconnect, device number 33
[ 1605.255190][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
[ 1605.261335][T23921] iforce 3-1:0.164: usb_submit_urb failed -19
10:11:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:11:44 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'.o\x00\x00\x02\x00\x02\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x10})
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000040)=r0, 0x52d)

10:11:44 executing program 1:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
close(r0)

10:11:44 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)

10:11:44 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
unshare(0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x1)
socketpair(0x1, 0x4, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000500))
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
connect(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80)
write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
poll(0x0, 0x0, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,')
sendfile(r2, r3, 0x0, 0x80000003)

10:11:44 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

10:11:44 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x8)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x3)
r3 = syz_open_procfs(0x0, &(0x7f00007a1ff6)='net/unix\x00')
sendfile(r1, r3, &(0x7f00004db000)=0x300, 0xfe)

[ 1609.933590][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1609.939869][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1609.946609][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1609.952975][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1609.959444][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1609.965735][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1609.972182][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1609.978567][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:11:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0)

[ 1610.055193][T11978] usb 3-1: new high-speed USB device number 34 using dummy_hcd
10:11:45 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
select(0xffffffed, 0x0, &(0x7f0000000140), 0x0, 0x0)

10:11:45 executing program 3:
unshare(0x20020400)
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x40480923, 0x0)

[ 1610.207561][T30099] device bridge1 entered promiscuous mode
10:11:45 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_MCAST_TO_UCAST={0xfffffffffffffd54}]}}}]}, 0x44}}, 0x0)

10:11:45 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x3fd}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000)
read$char_usb(r0, 0x0, 0x0)

[ 1610.323738][T11978] usb 3-1: Using ep0 maxpacket: 8
10:11:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x3, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
close(r3)
pipe(&(0x7f0000000100))
splice(r1, 0x0, r3, 0x0, 0xc0, 0x0)

[ 1610.446079][T30112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1610.751554][T11978] usb 3-1: config 0 has an invalid interface number: 164 but max is 0
[ 1610.759974][T11978] usb 3-1: config 0 has no interface number 0
[ 1610.766294][T11978] usb 3-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1610.777567][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1610.789023][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1610.804705][T11978] usb 3-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1610.816060][T11978] usb 3-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1610.829571][T11978] usb 3-1: config 0 interface 164 has no altsetting 0
[ 1610.913601][T11978] usb 3-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1610.923028][T11978] usb 3-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1610.931286][T11978] usb 3-1: Product: syz
[ 1610.963510][T11978] usb 3-1: config 0 descriptor??
[ 1611.165488][T11978] iforce 3-1:0.164: usb_submit_urb failed: -110
[ 1611.185585][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1611.207186][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1617.678757][T11978] iforce 3-1:0.164: usb_submit_urb failed: -32
[ 1617.721603][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.744231][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.763815][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.793937][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.814045][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.833524][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.863882][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.884307][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.903340][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.923349][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.943338][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.963334][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1617.983320][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1618.003301][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1618.023326][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1618.043331][T11978] iforce 3-1:0.164: usb_submit_urb failed: -71
[ 1618.049616][T11978] input input69: Timeout waiting for response from device.
[ 1618.061079][T11978] usb 3-1: USB disconnect, device number 34
10:11:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x3, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
close(r3)
pipe(&(0x7f0000000100))
splice(r1, 0x0, r3, 0x0, 0xc0, 0x0)

10:11:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x29, 0x829, 0x0, 0x0, {0x3}, [@nested={0xc, 0x3, [@typed={0x8, 0x0, @uid}]}]}, 0x20}}, 0x0)

10:11:59 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
close(0xffffffffffffffff)
socket$rds(0x15, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014})
epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0)

10:11:59 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:11:59 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x3fd}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000)
read$char_usb(r0, 0x0, 0x0)

10:11:59 executing program 4:
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226)

10:11:59 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:11:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x3, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
close(r3)
pipe(&(0x7f0000000100))
splice(r1, 0x0, r3, 0x0, 0xc0, 0x0)

10:11:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x7}}, 0xb8}}, 0x0)

10:11:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
r1 = socket(0x10, 0x3, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r2)
close(r3)
pipe(&(0x7f0000000100))
splice(r1, 0x0, r3, 0x0, 0xc0, 0x0)

10:11:59 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28}, 0x28)

10:11:59 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:11:59 executing program 0:
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
fsopen(&(0x7f0000000280)='sockfs\x00', 0x0)

10:12:08 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_eeprom={0x4b, 0x3a}})

10:12:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x2c, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfc00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x60}}, 0x0)

10:12:08 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:12:08 executing program 0:
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00006a5000/0x4000)=nil, 0x4000)

10:12:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x1}]]}}}]}, 0x44}}, 0x0)

10:12:08 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x3fd}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000)
read$char_usb(r0, 0x0, 0x0)

10:12:08 executing program 2:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000))

10:12:08 executing program 5:
io_setup(0x9, &(0x7f0000000380)=<r0=>0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$P9_RLOCK(r1, &(0x7f0000000040)={0x8}, 0x8)

10:12:08 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendfile(r5, r4, 0x0, 0x10001)
sendmmsg(r5, &(0x7f0000002dc0)=[{{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x2, {0x100000000000000, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0), 0x200003c0}], 0x1}}], 0x1, 0x0)

[ 1633.140125][T30183] netlink: 'syz-executor.3': attribute type 22 has an invalid length.
10:12:08 executing program 3:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getegid()
lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000840)=""/172, 0xac)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f0000000140)=[0x0, r0, 0x0, 0x0])
getgid()
socket$inet_tcp(0x2, 0x1, 0x0)
setgroups(0x31dbe445, &(0x7f00000002c0))
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000400)={0x2, 0x1, 0x3f})
r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x0, 0x3bc177af4b1a627b)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7})
clock_gettime(0x0, &(0x7f0000000440))
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
recvfrom$inet(r3, &(0x7f00000005c0)=""/40, 0x28, 0x40, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x80000001, 0x0, 0x0, 0x5, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_evm(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='\xbf\x13\xc9\x1d\xc3\x02\xde\xd1.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5)
recvfrom(r1, &(0x7f0000000600)=""/174, 0xae, 0x2000, 0x0, 0x0)
unshare(0x60020000)
r4 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r4, 0x0, 0x0, 0x20008000, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendto$unix(r4, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e)
sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000580)={0x401, &(0x7f0000000500)="92d7dc0f4f7268164a3b1148a71781d91849dcece44a4171d758bb5105e84bc2fdedd84242242b1993b31a0b367654befb9f2dea18344009fa1c98330295506af8df13b6fa9a5a87ce85af118ce1edfe1925cddcf3dcde3520cf359d5fde8d88bded76835c18e588fa3fe31900b4bbb76f04257f4410b2066a38f17ff2dd8d"})

[ 1633.531286][T30204] IPVS: ftp: loaded support on port[0] = 21
10:12:09 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x28, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x8, @dev}, @IFA_LOCAL={0x8}]}, 0x28}}, 0x0)

10:12:09 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4a", 0x46}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 1638.333631][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1638.339830][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1638.346555][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1638.352790][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1640.093336][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1640.099337][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1640.105678][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1640.111677][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1640.118012][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1640.124030][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:12:18 executing program 5:
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendfile(r0, r0, &(0x7f00000001c0), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740))

10:12:18 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1ff, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x400000000000007, 0x0)

10:12:18 executing program 0:
io_setup(0x200, &(0x7f0000000180)=<r0=>0x0)
r1 = memfd_create(&(0x7f0000000000)=':\x00', 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0)
io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_getevents(r0, 0x0, 0x1, &(0x7f0000d83f60)=[{}], 0x0)

10:12:18 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x3fd}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
preadv(r0, &(0x7f00000017c0), 0x3cc, 0x1f000000)
read$char_usb(r0, 0x0, 0x0)

10:12:18 executing program 4:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
getegid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
keyctl$chown(0x4, 0x0, 0x0, 0x0)
getgroups(0x4, &(0x7f0000000140)=[0x0, r0, 0x0, 0x0])
getgid()
setgroups(0x31dbe445, &(0x7f00000002c0))
r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x200, 0x10040)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000300)={0x4, 0x8001, 0x4})
r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "e5bb395f55c063cd645af21b63c76d9d"}, 0x11, 0x1c48963f684a34b5)
unshare(0x60020000)

10:12:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]})

10:12:18 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x2e]}, 0x3c)

10:12:18 executing program 3:
r0 = syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

10:12:18 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4080aea2, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x0, 0x7fff}]})

10:12:18 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe050400080008001e800100ff7e", 0x24}], 0x1}, 0x0)

10:12:19 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe050400080008001e800100ff7e", 0x24}], 0x1}, 0x0)

10:12:19 executing program 5:
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendfile(r0, r0, &(0x7f00000001c0), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740))

[ 1644.213094][T11978] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1644.463091][T11978] usb 4-1: Using ep0 maxpacket: 16
[ 1644.585413][T11978] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[ 1644.593772][T11978] usb 4-1: config 0 has no interface number 0
[ 1644.600004][T11978] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1644.609479][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.653511][T11978] usb 4-1: config 0 descriptor??
[ 1645.573464][T11978] smscufx: Failed to read register index 0x00003008
[ 1645.580210][T11978] smscufx: ufx_lite_reset error reading 0x3008
[ 1645.580229][T11978] smscufx: error -71 resetting device
[ 1645.587478][T11978] smscufx: probe of 4-1:0.122 failed with error -71
[ 1645.621237][T11978] usb 4-1: USB disconnect, device number 87
[ 1646.353180][T11978] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1646.613103][T11978] usb 4-1: Using ep0 maxpacket: 16
[ 1646.733248][T11978] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[ 1646.741555][T11978] usb 4-1: config 0 has no interface number 0
[ 1646.748002][T11978] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 1646.757226][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.770668][T11978] usb 4-1: config 0 descriptor??
[ 1647.115358][T11978] smscufx: Failed to read register index 0x00003004
[ 1647.122032][T11978] smscufx: error -71 reading 0x3004 register from device
[ 1647.123126][T11978] smscufx: probe of 4-1:0.122 failed with error -71
[ 1647.195903][T11978] usb 4-1: USB disconnect, device number 88
10:12:26 executing program 4:
r0 = socket$kcm(0xa, 0x2, 0x73)
connect(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @ipv4={[0xe0ffffff, 0x5]}}, 0x80)

10:12:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe050400080008001e800100ff7e", 0x24}], 0x1}, 0x0)

10:12:26 executing program 5:
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendfile(r0, r0, &(0x7f00000001c0), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740))

10:12:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)

10:12:26 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000000000087d1e3831000000000001090224000120000000090400000903f4ff00092100000001222900090581030000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00002e0000002e00f414d22401e24a1abb00b1e1c921ae1a48051a60eaefca88bc88ca199681e8aa52b0a0c1"], 0x0, 0x0, 0x0, 0x0}, 0x0)

10:12:26 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00')
exit(0x0)
read(r0, 0x0, 0x0)

10:12:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f13fe050400080008001e800100ff7e", 0x24}], 0x1}, 0x0)

10:12:26 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'\x00', 0x400})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

10:12:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)

[ 1651.573179][T11759] usb 1-1: new high-speed USB device number 53 using dummy_hcd
10:12:26 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'\x00', 0x400})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

10:12:26 executing program 5:
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
lseek(r0, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendfile(r0, r0, &(0x7f00000001c0), 0x7f8)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740))

[ 1651.815351][T11759] usb 1-1: Using ep0 maxpacket: 8
10:12:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)

[ 1651.935404][T11759] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1651.947492][T11759] usb 1-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1651.960919][T11759] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[ 1651.970194][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.505820][T11759] ryos 0003:1E7D:3138.0022: unknown main item tag 0xd
[ 1652.513239][T11759] ryos 0003:1E7D:3138.0022: unknown main item tag 0xe
[ 1652.521380][T11759] ryos 0003:1E7D:3138.0022: unknown main item tag 0x2
[ 1652.528859][T11759] ryos 0003:1E7D:3138.0022: unknown main item tag 0x0
[ 1652.536057][T11759] ryos 0003:1E7D:3138.0022: unknown main item tag 0x0
[ 1652.544823][T11759] ryos 0003:1E7D:3138.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[ 1652.707224][T11978] usb 1-1: USB disconnect, device number 53
[ 1653.483139][T11978] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1653.733148][T11978] usb 1-1: Using ep0 maxpacket: 8
[ 1653.863306][T11978] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1653.874513][T11978] usb 1-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1653.887598][T11978] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[ 1653.896906][T11978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.215786][T11978] ryos 0003:1E7D:3138.0023: unknown main item tag 0xd
[ 1654.223113][T11978] ryos 0003:1E7D:3138.0023: unknown main item tag 0xe
[ 1654.230119][T11978] ryos 0003:1E7D:3138.0023: unknown main item tag 0x2
[ 1654.237475][T11978] ryos 0003:1E7D:3138.0023: unknown main item tag 0x0
[ 1654.244575][T11978] ryos 0003:1E7D:3138.0023: unknown main item tag 0x0
[ 1654.253280][T11978] ryos 0003:1E7D:3138.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[ 1654.315345][T11759] usb 1-1: USB disconnect, device number 54
10:12:32 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10)
recvfrom(r0, 0x0, 0x58c4963970cc9a93, 0x0, &(0x7f0000000580)=@xdp, 0x719000)

10:12:32 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'\x00', 0x400})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

10:12:32 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x2})

10:12:32 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)

10:12:32 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f0000000180)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000240)='./file0/file0/../file0\x00', 0x0, 0x8020, 0x0)

10:12:32 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

10:12:32 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

10:12:32 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x300}, [@nested={0x4}]}, 0x18}}, 0x0)

10:12:32 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f0000000180)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000240)='./file0/file0/../file0\x00', 0x0, 0x8020, 0x0)

10:12:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000202010000409fbc60e130e2d215434810000200040001000800020004000180"], 0x24}}, 0x0)

10:12:32 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'\x00', 0x400})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

10:12:33 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

[ 1657.977854][T30357] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
10:12:40 executing program 1:
r0 = socket(0x2040000000002, 0x80000000000003, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00\x00\x00\x00\x00f\x00', 0x10)
sendto$unix(r0, 0x0, 0xb8, 0x7ffc, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x1c)

10:12:40 executing program 4:
unshare(0x6c060000)
mmap(&(0x7f0000aec000/0x4000)=nil, 0x4000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000002400)={'lo\x00', {0x2, 0x0, @broadcast}})
socket$inet_tcp(0x2, 0x1, 0x0)

10:12:40 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0))

10:12:40 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f0000000180)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000240)='./file0/file0/../file0\x00', 0x0, 0x8020, 0x0)

10:12:40 executing program 2:
set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4)
r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r6)
r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7)
r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r8)
clone(0x4412c500, 0x0, 0x0, 0x0, 0x0)

10:12:40 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x31)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080))

[ 1665.116181][T30375] IPVS: ftp: loaded support on port[0] = 21
10:12:40 executing program 5:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f0000000180)='../file0\x00', 0x2)
mount(0x0, &(0x7f0000000240)='./file0/file0/../file0\x00', 0x0, 0x8020, 0x0)

10:12:40 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x0, 0x0, 0x9e]})

10:12:40 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:12:40 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
tkill(0x0, 0x0)

10:12:40 executing program 5:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00\xb0\x90Z.\xa4I\xdarKN\xf3\xd1\x81Z\x01E\xd4\vu\xf5|.|\xddM`\xcfS\x14\a\x18\x8fC\x84,\xad\x96\f_\xcd\xe0-k\xaa\x02\x8f\x9b\x1d\xad)\xe7\x1eH)\xb5\xf8\xa7\xaf\xe9\x11\xdd\xe9\b\x1b8n\xaf\xd4\xa2j5\x04K\x01\'6^k\xe8\"td\xa4\x14\xf4\x01\xf6\xfc\x93\x9aX\x9c\xf6\xfc\xfcB\x93\x16\x93\x16l\x8eE\x12*\xddM\xd78\xea\x9e\xcaE\"$r*\x01\xcc\x981', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x2d1)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x200)

[ 1665.438243][T30397] IPVS: ftp: loaded support on port[0] = 21
10:12:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = getpid()
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@setlink={0x4c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MAP={0x24}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x4c}}, 0x0)

10:12:40 executing program 0:
socket$tipc(0x1e, 0x4, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})
unshare(0x20020400)
poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0)

[ 1665.770451][T30419] net_ratelimit: 18 callbacks suppressed
[ 1665.770486][T30419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1669.302185][T30423] IPVS: ftp: loaded support on port[0] = 21
10:12:47 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0)

10:12:47 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

10:12:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
tkill(0x0, 0x0)

10:12:47 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x9}]}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

10:12:47 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe)

10:12:47 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @empty}, 0x10)

10:12:47 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10)
r2 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000015000700000000000000000002ff00060c1935c8a768d033753e45c3d86b6d22aa004e9548b45c02b165e3a7bd17af3636c2db2f6eae578489bffeae1bc51c7c5f0000009cf1db4d460f97e82aa34cb6ce2e42ffbf2a7d8bb72eafe6213a3cb1a50dd4827caf01f84c4712d655aa40a107141a2c416aafe6eb61afb1034860c2bcfd810a0b8618962df41eb9ebb76d994c705f6474eb3b7bce3406b0fb63cbd294b955719059ef1f6c315a080e4035354adac99dd9dfbfa145ae365cdfdf346f18b20dfc312b1d2e01a2d52055ce1484dd7ebb5b4f04a5df12309ae6549c"], 0x48}}, 0x0)

10:12:47 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000200))

10:12:47 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
tkill(0x0, 0x0)

10:12:47 executing program 0:
unshare(0x20400)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000140)=""/63)

[ 1672.824077][T11978] usb 6-1: new high-speed USB device number 58 using dummy_hcd
10:12:47 executing program 1:
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

10:12:48 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
fgetxattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
tkill(0x0, 0x0)

[ 1673.095896][T11978] usb 6-1: Using ep0 maxpacket: 32
[ 1673.133672][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1673.140078][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1673.146954][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1673.153447][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1673.227023][T11978] usb 6-1: config 0 has an invalid interface number: 232 but max is 0
[ 1673.235403][T11978] usb 6-1: config 0 has no interface number 0
[ 1673.375814][T11978] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1673.385060][T11978] usb 6-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1673.393602][T11978] usb 6-1: Product: syz
[ 1673.397915][T11978] usb 6-1: Manufacturer: syz
[ 1673.423718][T11978] usb 6-1: config 0 descriptor??
[ 1673.466334][T11978] ftdi_sio 6-1:0.232: FTDI USB Serial Device converter detected
[ 1673.475313][T11978] usb 6-1: Detected SIO
[ 1673.506022][T11978] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1673.666742][T11759] usb 6-1: USB disconnect, device number 58
[ 1673.675821][T11759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1673.686486][T11759] ftdi_sio 6-1:0.232: device disconnected
[ 1674.433009][T11759] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1674.673032][T11759] usb 6-1: Using ep0 maxpacket: 32
[ 1674.793343][T11759] usb 6-1: config 0 has an invalid interface number: 232 but max is 0
[ 1674.801593][T11759] usb 6-1: config 0 has no interface number 0
[ 1674.923314][T11759] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1674.932480][T11759] usb 6-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1674.941158][T11759] usb 6-1: Product: syz
[ 1674.945456][T11759] usb 6-1: Manufacturer: syz
[ 1674.951381][T11759] usb 6-1: config 0 descriptor??
[ 1674.995264][T11759] ftdi_sio 6-1:0.232: FTDI USB Serial Device converter detected
[ 1675.004027][T11759] usb 6-1: Detected SIO
[ 1675.009265][T11759] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1675.194875][T11759] usb 6-1: USB disconnect, device number 59
[ 1675.203912][T11759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1675.215475][T11759] ftdi_sio 6-1:0.232: device disconnected
10:12:54 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x2}}, @IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}}, 0x0)

10:12:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x7b, 0x0, [0x4b564d03]})

10:12:54 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x2, 0x300}}, 0x18}}, 0x0)

10:12:54 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a629ae4024042c015fb80000e50109021b0001000000000904f8000100001b00000000000000000000ac77dcdca6b89d321a5ac6e8a957ce03e348c55e0a0aeb641cd0f527e76dd0e0653d22ebdcad3c695c03942876a680fda3cb9d0ec86ffcfe19"], 0x0)

10:12:54 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x9}]}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

10:12:54 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000000), 0x1c)

10:12:55 executing program 0:
futex(&(0x7f0000000ffc), 0x85, 0x0, 0x0, &(0x7f0000000ffc), 0x278b7c90)

10:12:55 executing program 3:
r0 = socket(0x10, 0x400000000080803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r0, &(0x7f0000000040)="240000003a00d17da53a7436fef7001d0a0b49ffed000009000028000800030001000000", 0x24)
recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2}}], 0x663, 0x2, 0x0)

10:12:55 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000000), 0x1c)

10:12:55 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6}]}, 0x10)

10:12:55 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000000), 0x1c)

[ 1680.215561][T11759] usb 2-1: new high-speed USB device number 55 using dummy_hcd
10:12:55 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000000), 0x1c)

[ 1680.605659][T11759] usb 2-1: config 0 has an invalid interface number: 248 but max is 0
[ 1680.614373][T11759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1680.625840][T11759] usb 2-1: config 0 has no interface number 0
[ 1680.632090][T11759] usb 2-1: config 0 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1680.743943][T11759] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=b8.5f
[ 1680.753552][T11759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=229
[ 1680.761989][T11759] usb 2-1: SerialNumber: syz
[ 1680.768569][T11759] usb 2-1: config 0 descriptor??
[ 1681.063803][T11759] usb 2-1: probing VID:PID(0424:012C)   
[ 1681.069759][T11759] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1681.077983][T11759] vub300: probe of 2-1:0.248 failed with error -22
[ 1681.087001][T11759] usb 2-1: USB disconnect, device number 55
[ 1681.793150][T11759] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1682.153290][T11759] usb 2-1: config 0 has an invalid interface number: 248 but max is 0
[ 1682.161734][T11759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1682.172088][T11759] usb 2-1: config 0 has no interface number 0
[ 1682.178303][T11759] usb 2-1: config 0 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1682.263306][T11759] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=b8.5f
[ 1682.272526][T11759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=229
[ 1682.280968][T11759] usb 2-1: SerialNumber: syz
[ 1682.287145][T11759] usb 2-1: config 0 descriptor??
[ 1682.564227][T11759] usb 2-1: probing VID:PID(0424:012C)   
[ 1682.570284][T11759] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1682.578471][T11759] vub300: probe of 2-1:0.248 failed with error -22
[ 1682.597572][T11759] usb 2-1: USB disconnect, device number 56
10:13:01 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
r1 = epoll_create(0x400)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000))

10:13:01 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6}]}, 0x10)

10:13:01 executing program 3:
perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:13:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0)

10:13:01 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a629ae4024042c015fb80000e50109021b0001000000000904f8000100001b00000000000000000000ac77dcdca6b89d321a5ac6e8a957ce03e348c55e0a0aeb641cd0f527e76dd0e0653d22ebdcad3c695c03942876a680fda3cb9d0ec86ffcfe19"], 0x0)

10:13:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x9}]}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 1686.225029][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.234613][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.244316][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.253667][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.262969][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.272221][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.281570][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.291606][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.301674][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.311118][T30518] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1686.323144][T30518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
10:13:01 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6}]}, 0x10)

10:13:01 executing program 3:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x0, 0x0, [], 0x0})

[ 1686.523500][T11978] usb 2-1: new high-speed USB device number 57 using dummy_hcd
10:13:01 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0)
fsetxattr(r2, &(0x7f0000000100)=@random={'user.', '}+#@%\x00'}, 0x0, 0x0, 0x0)

10:13:01 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000180)=[{0x45, 0x0, 0x1}, {}, {0x6}]}, 0x10)

10:13:01 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0)

10:13:01 executing program 3:
r0 = socket(0x10, 0x4000000000002, 0x0)
ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000000)={'sit0\x00\x1f\x80\x12\x00>\x01\xe0\x00\x00\x0e\x02', @ifru_ivalue=0x400000})

[ 1686.852314][T30545] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1686.935020][T11978] usb 2-1: config 0 has an invalid interface number: 248 but max is 0
[ 1686.943821][T11978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1686.954212][T11978] usb 2-1: config 0 has no interface number 0
[ 1686.960448][T11978] usb 2-1: config 0 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1687.113649][T11978] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=b8.5f
[ 1687.124008][T11978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=229
[ 1687.132353][T11978] usb 2-1: SerialNumber: syz
[ 1687.167413][T11978] usb 2-1: config 0 descriptor??
[ 1687.433505][T11978] usb 2-1: probing VID:PID(0424:012C)   
[ 1687.439619][T11978] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1687.447932][T11978] vub300: probe of 2-1:0.248 failed with error -22
[ 1687.487205][T11978] usb 2-1: USB disconnect, device number 57
10:13:08 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm={0x2}, @timestamp], 0x11cc51)

10:13:08 executing program 3:
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags})

10:13:08 executing program 0:
r0 = memfd_create(&(0x7f0000000140)='!ppp0\x00', 0x0)
pwritev(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)='*', 0x1f00}, {0x0, 0x2}, {&(0x7f00000007c0)="9680f52a2a0e0bbfd3bba558534b7168d1b45e5879949fe527e2a37ed0ad7fc1db3fd431811103d8630ab6b38445981550b397f886d96b6010c4e65eb9baef013723479327188d40dd9c0cc1ba88394e2d5119acef97aded9129e0aead541dc3ec94dcd1d0c4b4813795ca1d20b22aeef322e2265756f36160d9469fda3eaf9bf186c9c440f8014ea1e5ba04e1546f2e73b98aad24c0bd7ce6e1d5fbf63d32ef07ade3431f693028273e818104816ab248d64dfac51ede0de03f1a2e031382c0bfb96a333703f50e2fa01b651c39a9dc4996e53fbf9bcfa3e70a6a291c7f0a5d93f4f6ebace767f09b13be7ce09b755d6463106b49c28adfb3d8d1c788abd330ce47f04b144e15edfeae3a6fcbe07ec96ea137b44495e4058c6ab8312e9085892c84612bb0198ae03d1e91a91153ef80a82ba52fce9273d6405a8ce3c981b98637263e997bd8e6e8cc3c3531a247fe4126129a74c48c46d772df7c9a11a04145b4758020bc3c2db5f37f4de9956914915bf2de6081dd531a60327639ca30cfa869729d739678da3c336a856ef04af1b66da3dbde1f9d7ea1b648ae22569e0828f388b2320548f01e50c6e74cfdcd81090532bf95bfbd4f386f10362e1806bff3405d6f0c1f8bb2a426ada22d75274cfb57c1e98aeb218218a87c0a3f86de7bea4091bfef0aa689f279f93af8a8f5fd3e7a55edf02d7085a6f0efeef22bd17410d291c03959955df6c0c15b5cf0102f8d79f9b380a8eb8652a29ebeed67eaa07af4c9740614a882d0e5f44f07c17b1f11dcf357f2b3e25467d13ab9f78d93ebd7b83e0e12cc639fbd4cde35d0686a84d3ef1f829f0b49bdb2ddfe88390b901d95c11b3dc483d04b1a921838d0e5820813fa12cef9b55b22559797fd1e97142befd12f24607185b6b62417e6fb7f6346205b016b234d01d9ea001ac83f29e04b29dab53602f7acdd5b3ec20968ab8fec35790d35a1c9b3358247307494a01a906e9ee2038f59733e87cd3a2e56e042f5b2162383c76313ec137d6d4d7c6b25c23d8221852982ec7023fd6280ec93f60defa3ca3ee4b0c72270d44ff43036dae405eb5d990d5a5e99ade47270f3739583bde7208b865738a33d36daf05e7073d0ef46e32ceb839df9b5f2bd04db2710c6e910da0933a1e44b69da501d6b87cbd8b206d3df03d91bd2f07a90b69a9203f0503ac9a958d5574352951ea6bd7c3b9b521be06a97ed2037bb60176d541a8a5a8c36f9d0815a67d5d7844b4a66616b0c35975b3d7e133f3c5f7329400f718695d31a765ff2f2e45bf711b0faaf7c38e97d469a9ae6fb33eaa626364c6b862721713b742afb8e3d84503bba5c1a08ecd5a1abfa2df1def7682901951a0afeb4acec607d42856dac8e9fb94474f987afea5f24b4971a403e501f7e02dc3dc75cdc30e05d00a5c7008e266cab84d78a9c1e007755fd442ca0e57336bb9bf1fdb7e3ea37aaf258caaa9609bd1ba088fa3289c41a572dab110adccaebd9086586bd6e28b0306e180d06b6a232fcfd8abaa2fb067ad0c913d92bd7c4631548c66084095207f4c40d745ec1c2df6982e26b0714c3e1fb0203ed324d0314f17b97cdacc9144cce6013827372d95a1f05d53eba044f56aaffe529dd37baccd3520be1807ce929ee4df06067a70e992c20cea25d5e4e1229892b5691a1a8d54681631a000cd99dc93aa530b9e5c7a4af7057fca4bce38d7839adccd9581669738b419d1100cfb379f4e24d004c00c0ffb4b21f29a47d1c85ddb40a2363b3b69f3ff35ccdcf466090d7e41c1a2850394641051e1285b6e6175ff752a55ccce87513306777d2980dacf7c7f762232ca4ab4f3b0c8e2582cd3b3a4ccc08316443ec7180caefe5a0e89e1e91bffd1e59373855738b48faf1493659f0057d2ab304b2e89080c8929ed1b9b479dafc9cab1357467ea0458af4afa1011e6c0d0ca6344f5cf677efc4fbe46d815a3b917084de0450eb0a9d9b10f879bae4b17c2965975efb2ce505a315295fdda1ca7547120be93fd9d6b93283bd08f2270b3358219e50c7b3d293ad9917bb815f8299e437c67c03fe9eb65327b9076027c5677446df12038ae15630f3dc5ef99314a1b1dc61b3d9ecacaa46972bf1f807228960bf29010e2539b5fcbff37b77d098661b7464b14fbc2c464b16e1fa76d31707c04f8785b1c72d3f84c12b1013ee35d6f5978745901c1d3c187d923b9ed6be608b24c2bfb64df0b87b86ff0fc1a7f85aa7eba9b8e5f930b54e0a547fb85fcf0f1d9c5b13761dd06779db4e4adb21f193a4965f898a732d9fc809f4cefde11ac070d366af4943368430c19ea2f9cbc80316cac1d5d8562901b4df5211199365175b5c5de66ad6a879c64c406691c7ea671e5b6294e8b5cfe00c1ee6f372b7cda13aaa2853afa05ee00c3a7781166686cdf6378b203232bae6568f941abe6f91d09cf8284113d1aa68cb9ff61a1ae29b3841ce65e4e74244e6a5869ddc4323704c5c7db0b4bebb6d29946f8679e2596fc997faec4ad0b18397030ee87da7ce623a0ef1bbe5146abd381fe8df1ba0a68cfdce65fff7ddad6bea23113964bddfc88dec5e0a13862e2e1d0cccf7861eecd60a604c247671d5769435980bddc3cccb5b0d5d8be8ac41c700fcae9a2b63d579f85f57e39d18942f561d5ff3ae412dc64d608d0c73baf1eaff37d6b6eb96f5443eec147eb6ea56d25b06fdfdd9eec5d4fa675ab63355a3460ea19c7d71a2d89183709394b35af51fa36a108399579645141b230e4b25697d617fded89a6d4db3694c4d026ed250e6e8d4bbdb799f827392732b87e816aa227fe23afd1574f90002547afd782d1d6e4678c318b0fecc5ec49ed82d6010cc48e8fbcee57b7e0d98b75f6767f08e9575a0ac517878a0ee8cc7eb364ab3fda24431301bca69dc2a674671d56dbee3b3201160d8f03f43660e0144ae770381be049cdd006f33f8d281796a4d11e4ff33d874b437bd", 0x841}], 0x4, 0x0)

10:13:08 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0)

10:13:08 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x9}]}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

10:13:08 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a629ae4024042c015fb80000e50109021b0001000000000904f8000100001b00000000000000000000ac77dcdca6b89d321a5ac6e8a957ce03e348c55e0a0aeb641cd0f527e76dd0e0653d22ebdcad3c695c03942876a680fda3cb9d0ec86ffcfe19"], 0x0)

[ 1693.675751][T30559] validate_nla: 96 callbacks suppressed
[ 1693.675852][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.691201][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.700680][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.710284][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
10:13:08 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe8<t\x0e-du4\xa1\x04XP\xa26e\xd8\x1c\xa0rp\x19?]\x00<\x10\xe3B9\x84L[n\x8d\x17!\xc0\xb5:\x91\xc2\xf6\xec\x1eT\x84d]\xb3\xdf')
r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='gid_map\x00')
sendfile(r1, r0, 0x0, 0x10000)

10:13:08 executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r0=>0x0})
clock_nanosleep(0xb, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000013)

[ 1693.719909][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.729526][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.738969][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.748949][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.758943][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.768469][T30559] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1693.780571][T30559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
10:13:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@routing, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000180))

[ 1693.933486][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1693.939812][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1693.946397][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1693.952623][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1694.003644][T11978] usb 2-1: new high-speed USB device number 58 using dummy_hcd
10:13:09 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0)

10:13:09 executing program 3:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000240))
fchdir(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/\x00yz0\x00\xbb\xd3\xc2\x83\x0f*\x10.\xd2\x06\v\xdc\x00\xca\n\xfc\n\n\xb4\x04\x00\x00]\x8e\xa9t\xc2\x81\xf5\xf1\xa6\xd1\x18\xbc8\xd1\xa3\x1dlz\x9a\xc8o\a&\x82\xcf\t\xde\f\xb8\xbe\xf5Z\x1aS\n=,\xee\x9e\xd8%\x16\xa5\x00\xcaq\xb2\xd0Bk\x9e\xcd\x1e%g\xf5_\xc22\x02\x1c\xcc\xb1\xdca\x80V\xac\xf41\x02zU++7\xcfS\x17\xc9\x19G\x89\xfb\xfb\xfe\xc9\x15\x9d\xe6\ar\x99\"\"3Lg\xe8N\xc1', 0x1ff)

[ 1694.173751][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1694.180222][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1694.187126][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1694.193602][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1694.200397][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1694.206973][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:13:09 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffff9}, 0x0)

[ 1694.251753][T30587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1694.423979][T11978] usb 2-1: config 0 has an invalid interface number: 248 but max is 0
[ 1694.432352][T11978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1694.442691][T11978] usb 2-1: config 0 has no interface number 0
[ 1694.449033][T11978] usb 2-1: config 0 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1694.554387][T11978] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=b8.5f
[ 1694.563720][T11978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=229
[ 1694.572095][T11978] usb 2-1: SerialNumber: syz
[ 1694.635732][T11978] usb 2-1: config 0 descriptor??
[ 1694.923484][T11978] usb 2-1: probing VID:PID(0424:012C)   
[ 1694.929485][T11978] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1694.937736][T11978] vub300: probe of 2-1:0.248 failed with error -22
[ 1694.957807][T11978] usb 2-1: USB disconnect, device number 58
10:13:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000210007041dfffd946f610500020000000000000000000800050016000400ff7e", 0x24}], 0x1}, 0x0)

10:13:15 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ffcf9ade407dfb5094", 0x534, 0xc001, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14)
sendto$inet6(r3, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev}, 0x14)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4)

10:13:15 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffff9}, 0x0)

10:13:15 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x8, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0)

10:13:15 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x718000)

10:13:15 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a629ae4024042c015fb80000e50109021b0001000000000904f8000100001b00000000000000000000ac77dcdca6b89d321a5ac6e8a957ce03e348c55e0a0aeb641cd0f527e76dd0e0653d22ebdcad3c695c03942876a680fda3cb9d0ec86ffcfe19"], 0x0)

10:13:16 executing program 5:
r0 = socket$l2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0)

10:13:16 executing program 0:
perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000014a, 0xf0ffff)

10:13:16 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffff9}, 0x0)

10:13:16 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xeffd, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}}}}}}}, 0x0)

10:13:16 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x67)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1701.205488][T11759] usb 2-1: new high-speed USB device number 59 using dummy_hcd
10:13:16 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
r4 = pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfffffff9}, 0x0)

10:13:16 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006ed000), &(0x7f0000f24000)=0x4)

[ 1701.573847][T11759] usb 2-1: config 0 has an invalid interface number: 248 but max is 0
[ 1701.582243][T11759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1701.592719][T11759] usb 2-1: config 0 has no interface number 0
[ 1701.599528][T11759] usb 2-1: config 0 interface 248 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1701.694057][T11759] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=b8.5f
[ 1701.703376][T11759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=229
[ 1701.711711][T11759] usb 2-1: SerialNumber: syz
[ 1701.718220][T11759] usb 2-1: config 0 descriptor??
[ 1702.003413][T11759] usb 2-1: probing VID:PID(0424:012C)   
[ 1702.009474][T11759] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1702.017987][T11759] vub300: probe of 2-1:0.248 failed with error -22
[ 1702.026865][T11759] usb 2-1: USB disconnect, device number 59
10:13:23 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0)

10:13:23 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xeffd, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}}}}}}}, 0x0)

10:13:23 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@acquire={0x178, 0x17, 0x7, 0x0, 0x0, {{@in=@remote}, @in=@remote, {@in=@initdev, @in=@local}, {{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@policy_type={0xc}, @tmpl={0x44, 0x5, [{{@in=@multicast2}, 0x8, @in6=@loopback}]}]}, 0x178}, 0x8}, 0x0)

10:13:23 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
writev(r0, 0x0, 0x0)

10:13:23 executing program 5:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00')
read$FUSE(r0, 0x0, 0x2a1)

10:13:23 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x8, 0x6, 0x20, 0x0, 0xffff, 0x3, 0x1]}, &(0x7f0000000140)=0x12)
sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f00000000c0), 0xfdcc)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)=[{&(0x7f0000000400)=""/199, 0xfffffe80}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000340)=""/42, 0x2a}], 0x2, 0x0, 0x181, 0x200f00}, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r5}, 0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000500))
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000580)={0x2a, 0x4, 0x0, {0x3, 0x8, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)

10:13:23 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xeffd, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}}}}}}}, 0x0)

10:13:23 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000200)=0x6, 0x2)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x3, 0x4)
bind(r0, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10)
recvmmsg(r0, &(0x7f0000000180), 0x40000000000020f, 0x0, &(0x7f0000000000))

10:13:23 executing program 5:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x8001})
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000100))
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4})

10:13:23 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0x10000}})
ioctl$RTC_AIE_OFF(r0, 0x7002)

10:13:23 executing program 0:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0x7})

10:13:23 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0xeffd, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}}}}}}}, 0x0)

[ 1708.529327][T30676] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1709.156315][T11759] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1709.164083][T11759] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1709.171660][T11759] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1709.179422][T11759] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1709.187044][T11759] rtc rtc0: __rtc_set_alarm: err=-22
10:13:30 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x11000000000b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x7d, &(0x7f0000003640), &(0x7f0000003680)=0x10)

10:13:30 executing program 5:
unshare(0x20040600)
r0 = socket$kcm(0xa, 0x2, 0x73)
connect(r0, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @initdev}}, 0x4c)

10:13:30 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3014}})

10:13:30 executing program 0:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000240), 0x0, 0x0)

10:13:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a)

10:13:30 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0xffffffffffffffb3)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe79, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4005, 0x4)

10:13:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="da5200007a38ba1ab6f1f316"], 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:13:30 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3002}})

10:13:30 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = io_uring_setup(0x64, &(0x7f0000000140))
io_uring_enter(r3, 0x3, 0x3, 0x0, 0x0, 0x0)

10:13:30 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x6, 0xc2)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8650b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

10:13:30 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3002}})

10:13:30 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001580)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)

10:13:37 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="beca70639da44ac9a0fc2316cc762d0d"}, 0x20)

10:13:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = io_uring_setup(0x64, &(0x7f0000000140))
io_uring_enter(r3, 0x3, 0x3, 0x0, 0x0, 0x0)

10:13:37 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003380)={0xac, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:13:37 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3002}})

10:13:37 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa0006, 0x0)
write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x2)

10:13:37 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0xffffffffffffffb3)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe79, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4005, 0x4)

10:13:37 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3002}})

10:13:37 executing program 2:
syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2000000000000802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x55})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x15}, 0x45c)

10:13:37 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = io_uring_setup(0x64, &(0x7f0000000140))
io_uring_enter(r3, 0x3, 0x3, 0x0, 0x0, 0x0)

10:13:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x13, r3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)

[ 1722.851630][T30762] input: syz1 as /devices/virtual/input/input70
[ 1722.861118][T11759] usb 4-1: new high-speed USB device number 89 using dummy_hcd
10:13:38 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = io_uring_setup(0x64, &(0x7f0000000140))
io_uring_enter(r3, 0x3, 0x3, 0x0, 0x0, 0x0)

[ 1723.022434][T30767] debugfs: Directory '30767-4' with parent 'kvm' already present!
10:13:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x13, r3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)

[ 1723.103105][T11759] usb 4-1: Using ep0 maxpacket: 16
[ 1723.233415][T11759] usb 4-1: config 0 has an invalid interface number: 29 but max is 0
[ 1723.241765][T11759] usb 4-1: config 0 has no interface number 0
[ 1723.248507][T11759] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=b8.35
[ 1723.257709][T11759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.296562][T11759] usb 4-1: config 0 descriptor??
[ 1723.773302][T11759] usb 4-1: Cannot set MAC address
[ 1723.778705][T11759] MOSCHIP usb-ethernet driver: probe of 4-1:0.29 failed with error -71
[ 1723.791553][T11759] usb 4-1: USB disconnect, device number 89
[ 1724.523132][T11978] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1724.783111][T11978] usb 4-1: Using ep0 maxpacket: 16
[ 1724.913324][T11978] usb 4-1: config 0 has an invalid interface number: 29 but max is 0
[ 1724.921676][T11978] usb 4-1: config 0 has no interface number 0
[ 1724.928042][T11978] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=b8.35
[ 1724.937231][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.947088][T11978] usb 4-1: config 0 descriptor??
[ 1725.283318][T11978] usb 4-1: Cannot read MAC address
[ 1725.288814][T11978] MOSCHIP usb-ethernet driver: probe of 4-1:0.29 failed with error -71
[ 1725.301703][T11978] usb 4-1: USB disconnect, device number 90
10:13:43 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0x82, 0x84, 0x8, 0xd49, 0x7010, 0x8aeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0x63, 0x3d, 0xbd}}]}}]}}, 0x0)

10:13:43 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b6d0608450502800a030000000109029280d6b312000009040000005f3db600"], 0x0)

10:13:43 executing program 2:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_submit(r1, 0x0, 0x0)
io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000400000000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}])

10:13:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x13, r3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)

10:13:43 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0xffffffffffffffb3)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe79, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4005, 0x4)

10:13:43 executing program 3:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000d40)='ramfs\x00', 0x2e00008, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0)
execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)

10:13:44 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffd8f, 0x20000000, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

10:13:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x13, r3, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)

10:13:44 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

[ 1729.133182][T11978] usb 6-1: new high-speed USB device number 60 using dummy_hcd
10:13:44 executing program 0:
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1f, 0x86, 0xba, 0x20, 0x13d8, 0x1, 0x5297, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xe7, 0x7b, 0x79}}]}}]}}, 0x0)

10:13:44 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:13:44 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

[ 1729.479556][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 1729.623965][T11978] usb 6-1: config index 0 descriptor too short (expected 32914, got 18)
[ 1729.633076][T11978] usb 6-1: config 179 has too many interfaces: 214, using maximum allowed: 32
[ 1729.642102][T11978] usb 6-1: config 179 has 1 interface, different from the descriptor's value: 214
[ 1729.651576][T11978] usb 6-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a
[ 1729.660828][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1729.685103][T11759] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[ 1729.963524][T11978] usb 6-1: string descriptor 0 read error: -71
[ 1729.973779][T11978] gspca_main: xirlink-cit-2.14.0 probing 0545:8002
[ 1729.981961][T11978] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71
[ 1729.997593][T11978] usb 6-1: USB disconnect, device number 60
[ 1730.063310][T11759] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[ 1730.071811][T11759] usb 1-1: config 0 has no interface number 0
[ 1730.078651][T11759] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=52.97
[ 1730.087959][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1730.098276][T11759] usb 1-1: config 0 descriptor??
[ 1730.150939][T11759] usb 1-1: selecting invalid altsetting 3
[ 1730.157502][T11759] comedi comedi0: could not set alternate setting 3 in high speed
[ 1730.165653][T11759] usbdux 1-1:0.239: driver 'usbdux' failed to auto-configure device.
[ 1730.176911][T11759] usbdux: probe of 1-1:0.239 failed with error -22
[ 1730.347973][T11759] usb 1-1: USB disconnect, device number 55
[ 1730.693078][T11896] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1730.933261][T11896] usb 6-1: Using ep0 maxpacket: 8
[ 1731.054133][T11896] usb 6-1: config index 0 descriptor too short (expected 32914, got 18)
[ 1731.062682][T11896] usb 6-1: config 179 has too many interfaces: 214, using maximum allowed: 32
[ 1731.071901][T11896] usb 6-1: config 179 has 1 interface, different from the descriptor's value: 214
[ 1731.081399][T11896] usb 6-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a
[ 1731.090790][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.123279][T11759] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[ 1731.374627][T11896] usb 6-1: string descriptor 0 read error: -71
[ 1731.386012][T11896] gspca_main: xirlink-cit-2.14.0 probing 0545:8002
[ 1731.394419][T11896] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72
[ 1731.430198][T11896] usb 6-1: USB disconnect, device number 61
[ 1731.503601][T11759] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[ 1731.511856][T11759] usb 1-1: config 0 has no interface number 0
[ 1731.518167][T11759] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=52.97
[ 1731.527333][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.546493][T11759] usb 1-1: config 0 descriptor??
[ 1731.591538][T11759] usb 1-1: selecting invalid altsetting 3
[ 1731.598216][T11759] comedi comedi0: could not set alternate setting 3 in high speed
[ 1731.606279][T11759] usbdux 1-1:0.239: driver 'usbdux' failed to auto-configure device.
[ 1731.621382][T11759] usbdux: probe of 1-1:0.239 failed with error -22
[ 1731.785204][T11978] usb 1-1: USB disconnect, device number 56
[ 1735.413182][T11978] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1735.663071][T11978] usb 5-1: Using ep0 maxpacket: 8
[ 1735.783185][T11978] usb 5-1: config 0 has an invalid interface number: 17 but max is 0
[ 1735.791489][T11978] usb 5-1: config 0 has no interface number 0
[ 1735.963524][T11978] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice=8a.eb
[ 1735.973068][T11978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.981111][T11978] usb 5-1: Product: syz
[ 1735.985442][T11978] usb 5-1: Manufacturer: syz
[ 1735.990141][T11978] usb 5-1: SerialNumber: syz
[ 1735.996597][T11978] usb 5-1: config 0 descriptor??
[ 1736.035092][T11978] ums-onetouch 5-1:0.17: USB Mass Storage device detected
10:13:51 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dontfrag={{0x14, 0x29, 0x4}}], 0x18}}], 0x2, 0x0)

10:13:51 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:13:51 executing program 0:
unshare(0x8000400)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
close(r0)
timerfd_gettime(r0, 0x0)

10:13:51 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0xffffffffffffffb3)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe79, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4005, 0x4)

10:13:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0)

10:13:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffd8f, 0x20000000, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

[ 1736.082078][T11978] usb 5-1: USB disconnect, device number 39
10:13:51 executing program 0:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(0xffffffffffffffff, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
pkey_alloc(0x0, 0x0)
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000400)={"3f1c85b3165ce78f9f8020bfb1a02e5eb74b732c234f5f136d3c3bdf575a73510e080aeea120d00b73d406a3ae6949c8e333da25e47ed197dc8a41ac532361b67a24de0e973e400072f5646b2970558f210f563ca356583b2774e42e8fd9f9a00d253de5cb44b803b51ad2228e04be3f5d619d60ec062ac2c972abfeeed83a28db47b347122ed30848880a49ae090aae5a996f9d72d39d6de8353ae3b87381c3177ca43f4d363757e4b6efc2ffa51ad3c3df1c3e19df0020517b0c7382b7ac6822f34fa1bb787bbfc0ee2544ad10887a9e5a4e7a5f600aa431d0fdd631ee4c87486c1759e39c9540be2d40357f9518f0d44b07c63e9a09ea81ea275d31b4eb8ad83e5fdd4e0317b4769c37894d3b02c804f56a7d52eeb6240ec94d60546dcb26912ff964ada5545e6f9ac3836e83fdb68b02c91165f420be10da543ea462b4a75535dc8cf31670daf03aa92713c9ab51db939f4451c5fd717c883c098a621ccf1736559a238ca19730a67875ba650b48bc68d494e045c1c110c12c3fba8c48ff58b00902b7eff55f309d70fea6cec63dc4a593dc21743bf627557c7266da166ae23e77a9f571323bbdd1c11ad2286e804126b1c838be0a2e177beb02d7a660b4675f9afa6e38d713d349f525af52dfac8b183e246a9cbf8b34c20d17aec86af8dd875eb7aced9782dd1c1c8452488166bc7819dde8c789a78095cd6572c1163329b7186dd05ff6da2d5cdb36f8732d2c6d5a30467df89ff58e6443ff27f8e43da41f525fd91466419d30ba33ff12475553da904a10c92a9f2ed5ce7e4152e091dcef210dbb436fbdf3443d8435c4a9cc55e779798b89e8d5994a461366e4c3ea6e6147b6a038549cf19d47eea9b8c0d31a8a6279e982a00ed36c86d0cf2db61a51c75676b5b05135961664dba904542c3232d5ed808987d2e97149c42108854062a2b42a1b6274aeeb8bc0a5e2bb693879397a1bff4dad5aafa1ff50f3ccc97ca67f0c7c0cf1c2bf49ea9e7a0695e6be1505c0870099fba0857f47e3fde97abaf43f5f51523da407133e0cbc20b977c4924d24d08b495a80b818ffd4f8d30c98e261b767141f1f6e5d6f58cd0a8c95d91346f5314cd07f485539d05deda4db501fbcfcebbff9b760e3b3a8f010b0738397f29ab2c0e4b997119b07eb224c9a8fc26b3373e6a609e9cd6f0b4e145a43b4dce4b55fa8c42df1a81ba26e38204f820ab5c5c87ca23e5f72d0d3944e68acc7e0d9df9aa4565d62663efe9b5c75df510213ef101f3ee010a997f0f454cde4411c1ad8bc6ad56f610fea54093e5dacaa620fbec904f063780d93995d8ecc5960d401e605f018d3f13627944b08fe8a806ecfd39ea7a0e4de002817b9b5ff1586e47b14ecc1ceb2d280752a59064f953e6e1f077876f6f82c3ef67deeb2c4273f60871b81c58e33cc5d8fb0729637245a"})
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040))
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r3, 0x40045108, &(0x7f0000000000))
r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000004)
inotify_rm_watch(0xffffffffffffffff, r4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f00000003c0))

10:13:51 executing program 2:
preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/86, 0x56}], 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
preadv(r2, &(0x7f00000017c0), 0x375, 0x0)

10:13:51 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{}, 'syz0\x00', 0x30})
ioctl$UI_DEV_CREATE(r1, 0x5501)

[ 1736.585598][T12117] usb 6-1: new high-speed USB device number 62 using dummy_hcd
10:13:51 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9})

[ 1736.655892][T30861] input: syz0 as /devices/virtual/input/input73
[ 1736.738454][T30861] input: syz0 as /devices/virtual/input/input74
10:13:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffd8f, 0x20000000, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

10:13:51 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{}, 'syz0\x00', 0x30})
ioctl$UI_DEV_CREATE(r1, 0x5501)

[ 1736.833527][T12117] usb 6-1: Using ep0 maxpacket: 32
10:13:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
r2 = dup3(r1, r0, 0x0)
write$P9_RLOCK(r2, 0x0, 0x0)

[ 1736.959732][T30872] input: syz0 as /devices/virtual/input/input75
[ 1736.963983][T12117] usb 6-1: config 0 has an invalid interface number: 232 but max is 0
[ 1736.974560][T12117] usb 6-1: config 0 has no interface number 0
[ 1737.101802][T12117] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1737.111213][T12117] usb 6-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1737.119846][T12117] usb 6-1: Product: syz
[ 1737.124238][T12117] usb 6-1: Manufacturer: syz
[ 1737.193773][T12117] usb 6-1: config 0 descriptor??
[ 1737.254539][T12117] ftdi_sio 6-1:0.232: FTDI USB Serial Device converter detected
[ 1737.263662][T12117] usb 6-1: Detected SIO
[ 1737.270593][T12117] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1737.454619][T12117] usb 6-1: USB disconnect, device number 62
[ 1737.465649][T12117] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1737.476427][T12117] ftdi_sio 6-1:0.232: device disconnected
[ 1738.233161][T11896] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1738.473160][T11896] usb 6-1: Using ep0 maxpacket: 32
[ 1738.593373][T11896] usb 6-1: config 0 has an invalid interface number: 232 but max is 0
[ 1738.601657][T11896] usb 6-1: config 0 has no interface number 0
[ 1738.723348][T11896] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.2b
[ 1738.732456][T11896] usb 6-1: New USB device strings: Mfr=207, Product=157, SerialNumber=0
[ 1738.741096][T11896] usb 6-1: Product: syz
[ 1738.745390][T11896] usb 6-1: Manufacturer: syz
[ 1738.751414][T11896] usb 6-1: config 0 descriptor??
[ 1738.795444][T11896] ftdi_sio 6-1:0.232: FTDI USB Serial Device converter detected
[ 1738.804508][T11896] usb 6-1: Detected SIO
[ 1738.810007][T11896] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1738.995498][T12117] usb 6-1: USB disconnect, device number 63
[ 1739.004987][T12117] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1739.015465][T12117] ftdi_sio 6-1:0.232: device disconnected
10:13:57 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{}, 'syz0\x00', 0x30})
ioctl$UI_DEV_CREATE(r1, 0x5501)

10:13:57 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0400fc0010000b4003000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0)

10:13:57 executing program 1:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0)

10:13:57 executing program 2:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3800000000000000]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x2, 0x0, "0087ae", 0x0, "ca7745"}}}}}}}, 0x0)

10:13:57 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffd8f, 0x20000000, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

10:13:57 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe07002b0000000000ff0711000000450001070000001419001a000b00020007000100550e00"/57, 0x39}], 0x1)

[ 1742.457286][T30898] input: syz0 as /devices/virtual/input/input76
10:13:57 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet(0x28, 0x2, 0x28)

10:13:57 executing program 2:
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9)
mknod(&(0x7f00000001c0)='./file0\x00', 0x200001040, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:13:57 executing program 1:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0)

10:13:57 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{}, 'syz0\x00', 0x30})
ioctl$UI_DEV_CREATE(r1, 0x5501)

10:13:57 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet(0x28, 0x2, 0x28)

10:13:57 executing program 1:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0)

[ 1742.799099][T30915] input: syz0 as /devices/virtual/input/input77
10:13:58 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0x3, {0x0}}, 0x18)

10:14:04 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5}, [@mdlm_detail={0x4}]}}}]}}]}}, 0x0)

10:14:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet(0x28, 0x2, 0x28)

10:14:04 executing program 1:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'ecb(blowfish)\x00'}}}, 0xe0}}, 0x0)

10:14:04 executing program 0:
r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xa0, 0x0, &(0x7f0000000000))

10:14:04 executing program 2:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

10:14:04 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={0x0})

10:14:04 executing program 2:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

10:14:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0x0, @ioapic})

10:14:04 executing program 3:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7)
close(r0)

10:14:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$inet(0x28, 0x2, 0x28)

10:14:04 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x29)

10:14:05 executing program 2:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

[ 1750.035473][T30958] debugfs: Directory 'vcpu0' with parent '30958-4' already present!
[ 1750.129044][T30969] debugfs: Directory 'vcpu0' with parent '30958-4' already present!
10:14:09 executing program 4:
bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff], 0x0, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd}, 0x3c)

10:14:09 executing program 5:
unshare(0x20400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10})

10:14:09 executing program 3:
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c100009008000a000", 0x33a)

10:14:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0x0, @ioapic})

10:14:09 executing program 2:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0)

10:14:09 executing program 0:
r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x1}}, 0x0, 0x200, 0x0, 0x2, 0x21}, &(0x7f0000000300)=0x98)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
symlink(&(0x7f0000000080)='./file1/file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, <r3=>0x0})
sendmmsg(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)

[ 1754.901967][T30980] netlink: 782 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1754.979293][T30979] debugfs: Directory 'vcpu0' with parent '30979-4' already present!
10:14:10 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x3f9, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:14:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0x0, @ioapic})

10:14:10 executing program 5:
unshare(0x20400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10})

10:14:10 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000005c00)=[{{&(0x7f0000002240)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f00000025c0)={0xa, 0x4e23, 0x0, @dev, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000002d00)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}], 0x2, 0x0)

10:14:10 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "04de379016ea8bec173d703ac4d8e956119485b30d17f67bcf17d0e1aab9f3d2"}})

[ 1755.341336][T31003] debugfs: Directory 'vcpu0' with parent '31003-4' already present!
10:14:10 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"})

10:14:10 executing program 0:
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, 0x0)

[ 1755.833155][T11896] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[ 1756.193220][T11896] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[ 1756.363439][T11896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1756.372539][T11896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.380828][T11896] usb 1-1: Product: syz
[ 1756.385140][T11896] usb 1-1: Manufacturer: syz
[ 1756.389754][T11896] usb 1-1: SerialNumber: syz
[ 1756.434770][T11896] cdc_ether: probe of 1-1:1.0 failed with error -22
[ 1756.636351][T11896] usb 1-1: USB disconnect, device number 57
[ 1757.403252][T11896] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[ 1757.763340][T11896] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[ 1757.933501][T11896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1757.942616][T11896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.950852][T11896] usb 1-1: Product: syz
[ 1757.955360][T11896] usb 1-1: Manufacturer: syz
[ 1757.960416][T11896] usb 1-1: SerialNumber: syz
[ 1758.004876][T11896] cdc_ether: probe of 1-1:1.0 failed with error -22
[ 1758.205249][T11896] usb 1-1: USB disconnect, device number 58
10:14:17 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}})
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

10:14:17 executing program 5:
unshare(0x20400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10})

10:14:17 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0x0, @ioapic})

10:14:17 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x3f9, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:14:17 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gfeatures})

10:14:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0)

[ 1762.209584][T31037] validate_nla: 96 callbacks suppressed
[ 1762.209608][T31037] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:14:17 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580))
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)

[ 1762.251683][T31039] debugfs: Directory 'vcpu0' with parent '31039-4' already present!
10:14:17 executing program 5:
unshare(0x20400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10})

10:14:17 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x3f9, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:14:17 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0x0, 0x0, "a4a7d774a8671d95"}})

10:14:17 executing program 3:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x3f9, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:14:17 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1762.957261][T31067] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:14:24 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

10:14:24 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0)

10:14:24 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = epoll_create(0x803)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
shutdown(r0, 0x0)

10:14:24 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x2, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x3)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x5)

10:14:24 executing program 4:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x8000000e})
write$sndseq(r1, &(0x7f0000000200), 0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8)

10:14:24 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
sendfile(r2, r3, 0x0, 0x1)
sendfile(r0, r1, 0x0, 0x1)

[ 1769.517036][T31083] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:14:24 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

10:14:24 executing program 5:
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00\xf3\xad\xe75\xf9\x03\x00AU\xa0\xe1\x94N\xd8\xdfLA\x1e0\x89dm\x10\xb4e\xa6\x91\v\x13', &(0x7f0000000440)=@chain={'key_or_keyring:', r0, ':chain\x00'})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00\x81\x15\xeba\xc9*\xdb\xd0\xefg\xcb\xcf\f\xb1\x9c?=\x14\xe1\xdc\x85\xf15k\xb8?\xfb\xb3>\xc8\x8b\xc0XE\xce\xda\xf9\x01hE\xa7\xa8\a\xc3\xaa\xd0\xed\x9ao\xb5\xe0\x1a\xd6\xb8\x15[-K\xe79J\xfc?\xbd\xab\xe1\xca,G\x87\xd1\x02L\t]Kn\xbe\x11\xa5\xe8x3_8', &(0x7f0000000180)=@chain={'key_or_keyring:', r1, ':chain\x00'})

10:14:24 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
sendfile(r2, r3, 0x0, 0x1)
sendfile(r0, r1, 0x0, 0x1)

10:14:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0xa6)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x1000001, 0x100132, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, 0x0, &(0x7f0000000180))

10:14:24 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000080000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[], 0x350)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20)

10:14:25 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
sendfile(r2, r3, 0x0, 0x1)
sendfile(r0, r1, 0x0, 0x1)

10:14:25 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

10:14:31 executing program 4:
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000180)="1c00000019002551075c0165ff0ffc02802000030004000500e1000c", 0x1c)

10:14:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\xe3\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\x00\x87\xac\xad\x80\xa3P\x8c\xea\x17f%;\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80\x1d\x95WM\x9a\xc6\x95\x98\xed\xe9\xca\x9e\xe6\xcb\x8e\xef\xf659-\xef\xb5\xc9\xf2\"\x15\xb39T\x81\x19\xcc\xcd\xb5\r\x10G\x16(~\x15\xd1\xde\x9e\xb1s\xa0\x864hb\xaa\xa3\x18V\x17xE\xbd\xc2QD\xa5P\x0f\x8e\x1f\x888\xb6\xee\xc6N\xd2\x136\xeb\xa4\x1d\xaap\xc6\x9e\xdc\x007h\f\x96g\"_\xb1\x1b\xdb\x86\xc6\xc9\xb1\xcc\xa1\x9f\xd8h\xcc\x12\xf1k\xe8\x86:D\xd2\xd1\x02I\xfe\x96t\xe5C\x86)\xf0M\xc4\xa35\xcc\x9b\x9e\xbb5\x18[\x958D\\~3\xcaO\x97M\xaf\x930\xfd\x13\xa3\xde\xce0\x1d5I\xba\xc5;T\xdc\xaf\xc8\xa6\n\x92\x0e6>\x19*')
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r2, 0x20400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x1, 0x154, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x1cc)
fchmod(r3, 0x22)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x2000008f)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00')
getdents64(r4, &(0x7f0000000df0)=""/528, 0x7f355eb8)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x6)
syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0)

10:14:31 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00')
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
r1 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4))
mount(0x0, &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, 0x0)
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

10:14:31 executing program 2:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t<j\xab\xbc\xf2\x04\xf8oN\xa1\x9a\x88rg]\x17\xa76\xa5\x15Me/J\xce\xb9\x98\xd3\xdf\xcc2Jn\xd5S\xca\xdd>]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea  ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f')
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00')
sendfile(r2, r3, 0x0, 0x1)
sendfile(r0, r1, 0x0, 0x1)

10:14:31 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0)

10:14:31 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

[ 1776.794373][T31128] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:14:31 executing program 5:
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f0000002500)=[{&(0x7f00000014c0)="c0", 0x1}], 0x1)

10:14:32 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000)

10:14:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x4b, 0x2b}})

10:14:32 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000)

10:14:32 executing program 1:
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe09, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x100080003, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

10:14:32 executing program 2:
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = socket$inet6(0xa, 0x80000000000003, 0x3)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]})

10:14:36 executing program 4:
unshare(0x2000400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETAW(r0, 0x541f, 0x0)

10:14:36 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000)

10:14:36 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0)

10:14:36 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

10:14:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0)

10:14:36 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_PRIORITY={0x8}]}}}]}, 0x3c}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0)

10:14:37 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000)

[ 1781.979747][T31174] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:14:37 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xd, 0x90)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f0000000040))

10:14:37 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast2}}}, 0x104)

10:14:37 executing program 5:
futimesat(0xffffffffffffffff, 0x0, 0x0)

10:14:37 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x24, 0x0, 0x0)
r4 = dup2(r1, r3)
dup3(r4, r2, 0x0)

10:14:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

10:14:44 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1f, 0xa3, 0x4f, 0x20, 0x6cd, 0x131, 0x82ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0x96, 0xd6, 0xf7}}]}}]}}, 0x0)

10:14:44 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

10:14:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400add427323b470c45b4562c067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac71082300000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

10:14:44 executing program 0:
madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x3)

10:14:44 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20)

10:14:44 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:14:44 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x10000)
select(0x236, 0x0, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0)

10:14:44 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:14:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000ac0)=ANY=[]], 0x1, 0x0)
msgsnd(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="03"], 0x1, 0x0)
msgrcv(r2, &(0x7f0000000680)={0x0, ""/113}, 0x79, 0x3, 0x0)

10:14:44 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

10:14:44 executing program 5:
unshare(0x400)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6})

10:14:44 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:14:51 executing program 1:
r0 = socket(0x22, 0x1000000000000002, 0x800000001)
accept$packet(r0, 0x0, 0x0)

10:14:51 executing program 0:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xe0700000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00\x00\x00\x00\x00P\xe0\x00', 0x20000238, 0x0, 0x90, [0x0, 0x0, 0x0, 0x20000100, 0x20000130, 0x20000160], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108)

10:14:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_open_procfs(0x0, &(0x7f0000272000))

10:14:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000b00}]}]}, 0x24}}, 0x0)

10:14:51 executing program 5:
creat(&(0x7f0000000200)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa008, 0x0)

10:14:51 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

10:14:51 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0x0)
dup2(r2, r1)
io_setup(0x1000, &(0x7f0000000140)=<r3=>0x0)
io_submit(r3, 0x20000103, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)

10:14:51 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007bdf86401aeb0128e8280000000109021b00010000000009048000016e95db00090584050000000000"], 0x0)

10:14:51 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_LEARNING={0x8}]}}}]}, 0x44}}, 0x0)

10:14:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x100007ff}, 0x10)
write(r1, &(0x7f000018efdc)="1c0000005e001f0014f9f4ff08000000060003400000000000000000", 0x1c)

10:14:51 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = dup2(r0, r0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x90)

[ 1796.738173][T31276] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
10:14:51 executing program 1:
mkdir(&(0x7f0000001b40)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x800000, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
ftruncate(r0, 0x8200)
r1 = getpid()
process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0)

[ 1796.830058][T31286] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[ 1797.053618][T11896] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1797.423266][T11896] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1797.431709][T11896] usb 6-1: config 0 has no interface number 0
[ 1797.438549][T11896] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1797.450342][T11896] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=28.e8
[ 1797.460179][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1797.470722][T11896] usb 6-1: config 0 descriptor??
[ 1797.716463][T12117] usb 6-1: USB disconnect, device number 64
[ 1798.483223][T12117] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1798.843302][T12117] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1798.851992][T12117] usb 6-1: config 0 has no interface number 0
[ 1798.858431][T12117] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1798.869720][T12117] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=28.e8
[ 1798.878980][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1798.888716][T12117] usb 6-1: config 0 descriptor??
[ 1799.135950][T12117] usb 6-1: USB disconnect, device number 65
10:14:57 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000013000100"/20, @ANYRES32, @ANYBLOB="000000000000000080002b00740001000000008100000000000000000000000000000000000000000000000000000000000000000000000000000800"/75, @ANYRES32=0x0, @ANYBLOB="4000000000000000ab", @ANYRES32, @ANYBLOB="0800000000000000000000000000000010000000000600000000000000000000000000000800030008000000"], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xeb, 0x0)

10:14:57 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x15, &(0x7f0000000140), 0x20616c66)

10:14:57 executing program 4:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x04'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'i\xaf \xa2\x9ak\x88eU\x00\x00\x00\x00\x04\x00'}})

10:14:57 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000064000b0500000000000000edffffff00", @ANYRES32, @ANYBLOB="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"], 0x74}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0)

10:14:57 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create(0x9)
r2 = epoll_create(0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = epoll_create(0x5b)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r6, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800))

10:14:57 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x4d)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1802.733644][T31299] net_ratelimit: 2 callbacks suppressed
[ 1802.733664][T31299] openvswitch: netlink: IP tunnel dst address not specified
10:14:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create(0x9)
r2 = epoll_create(0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = epoll_create(0x5b)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r6, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800))

10:14:58 executing program 1:
unshare(0x2000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23)

10:14:58 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
dup3(r2, r3, 0x0)

10:14:58 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r1, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180d)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:14:58 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create(0x9)
r2 = epoll_create(0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = epoll_create(0x5b)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r6, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800))

10:14:58 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

10:14:58 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000013000100"/20, @ANYRES32, @ANYBLOB="000000000000000080002b00740001000000008100000000000000000000000000000000000000000000000000000000000000000000000000000800"/75, @ANYRES32=0x0, @ANYBLOB="4000000000000000ab", @ANYRES32, @ANYBLOB="0800000000000000000000000000000010000000000600000000000000000000000000000800030008000000"], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xeb, 0x0)

10:15:04 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create(0x9)
r2 = epoll_create(0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = epoll_create(0x5b)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4))
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r6, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800))

10:15:04 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

10:15:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$setflags(r1, 0x2, 0x0)

10:15:04 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/568]}, 0x2b0)

10:15:04 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000013000100"/20, @ANYRES32, @ANYBLOB="000000000000000080002b00740001000000008100000000000000000000000000000000000000000000000000000000000000000000000000000800"/75, @ANYRES32=0x0, @ANYBLOB="4000000000000000ab", @ANYRES32, @ANYBLOB="0800000000000000000000000000000010000000000600000000000000000000000000000800030008000000"], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xeb, 0x0)

10:15:04 executing program 5:
r0 = socket$inet6(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007fafb72d1cb2a4a280930206437c01a843090a26275b040016001500064002004c000000a3c728f1c46b7b31afdc1338d54400009b84136ef75afb6cde448daa7227c43ab8620000bf0cec6bab91d4", 0x55}], 0x1}, 0x0)

[ 1809.125513][T31360] netlink: 'syz-executor.5': attribute type 6 has an invalid length.
[ 1809.133873][T31360] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1809.166190][T31360] netlink: 'syz-executor.5': attribute type 6 has an invalid length.
[ 1809.174898][T31360] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.5'.
10:15:04 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

10:15:04 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000200)={'batadv0\x00', @ifru_ivalue})

10:15:04 executing program 2:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffa]}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"})

10:15:04 executing program 5:
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r2, 0x0, 0x2000000000000023, 0x0, 0x100000008)
getsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendto$packet(r1, &(0x7f0000000640)="dfbfe6034523b770ba82d52e605e575bda08461c54d27822d7e313edc8a40388cd424f5b70094e99d91056653cf27494b7428fd30000544a4a11e363064732c176026bd5ebcd38812f0d2857fccebddcfdabd9425cb5547f0effc2ef972f48bef299a1886ddc3124f4f89219a41bc6d8c721c2b3834bc39b2d9f044f7ee50b6888e97b0591f70b8a9cc73b088ca94797e4638a22560f6fa8e60fd19c4206b0c4859a6654afe232f9907b635f84577d23e9419045ef59ac340da36116c6b345c30300776e9ac8ecadb6cc58535b3b1f21460badbaa4cf1886d5a0f57513ab26ff77f8507b0edb49ba5204145ad32d8c0b1c9834201ffcd1a6fbc91a84916002165e8fd7b45d982b50c4491b448f675f677011c910582a15f803901b75ba03df4e36e0e685b21101a1de34dbc743149d5d8f7758af1a1edc097589401f779206af5f9399304106c816082ee1268f872a00000000000000", 0xff8a, 0x3ffffff, 0x0, 0x7065eb39)

10:15:04 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xffffffffffffffac, &(0x7f0000000040))

10:15:04 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @empty}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x20)

10:15:04 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

10:15:10 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0xff9f, 0x2, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:15:10 executing program 4:
syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0)

10:15:10 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a000000013000100"/20, @ANYRES32, @ANYBLOB="000000000000000080002b00740001000000008100000000000000000000000000000000000000000000000000000000000000000000000000000800"/75, @ANYRES32=0x0, @ANYBLOB="4000000000000000ab", @ANYRES32, @ANYBLOB="0800000000000000000000000000000010000000000600000000000000000000000000000800030008000000"], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0xeb, 0x0)

10:15:10 executing program 5:
unshare(0x20400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)

10:15:10 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000000)='eth1md5sum^\xbb-^,)}cpuset\x00')

10:15:10 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

[ 1815.385782][T31395] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING
10:15:10 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

10:15:10 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000240)={{0x80}, 'port1\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00N\xef\xc7\xb9\x00', 0x0, 0x110002})

10:15:10 executing program 5:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000240)=@req={0xffffffffffff0001, 0x0, 0x0, 0x1ff}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/251, 0x23}], 0x1, 0x0, 0xffffffffffffff64}, 0x0)

10:15:10 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80000001}, 0x4e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind(r0, 0x0, 0x0)
close(r0)

10:15:10 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000000280)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524009ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5b4967904daf833d91ae9461ef10036f8be000000", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x81f, 0x4)
recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)

10:15:10 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000ddffffff611020000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:15:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}]]}}}]}, 0x38}}, 0x0)

[ 1816.051254][T31434] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
10:15:16 executing program 4:
r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0)
remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)
mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil)
munmap(&(0x7f0000008000/0x2000)=nil, 0x2000)

10:15:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x29a, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190007041dfffd946f61050002000300fe0200000002080008001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

10:15:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0x71, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

10:15:16 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

10:15:16 executing program 3:
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xb0, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x88, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x78, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_IGNORE_DF={0xfffffffffffffff2}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x1, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xb0}}, 0x0)

10:15:16 executing program 5:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="240000000f0607031dfffd946fa2830020200a0009000100071d85a2046e36ad2807eee6", 0x24}], 0x1}, 0x0)

[ 1821.756497][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1821.771996][T31451] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1821.780436][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:15:16 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setrlimit(0x7, &(0x7f0000a9cff8))
accept4$packet(r0, 0x0, 0x0, 0x0)

10:15:17 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x88, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400090600000000000000000a008000", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000000200"], 0x2c}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140)=[{0x2c, 0x0, &(0x7f0000000580), 0x17, &(0x7f0000000100)=[@op]}], 0x492499d, 0x0)

[ 1822.082249][T31445] netlink: 'syz-executor.3': attribute type 23 has an invalid length.
[ 1822.090958][T31445] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1822.142315][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
10:15:17 executing program 0:
r0 = socket$inet6(0xa, 0x802, 0x73)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000015c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002f80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @broadcast}}}}], 0x28}}], 0x2, 0x0)

10:15:17 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588e4b3a5e608000000", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)

10:15:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xfffffffffffffe24, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x19, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:15:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3})

10:15:24 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000104}]})

10:15:24 executing program 3:
pipe(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf1, 0x21fc}, 0x14)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000003c0)=0x2, 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r3, 0x0, 0x10003, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00')
bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r6 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendfile(r6, r5, 0x0, 0x2)

10:15:24 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="000000000000fbdbdf250f000000080002000400040008000600040002001c000200080001000000000004000400080002000000000004000400700004000c00070008000300000000003c00070008000400040000000800010000000000080001000000000008000100000000000800010004000000080002000000000008000400040000000c00010073797a31000000000c0021007379"], 0x3}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:15:24 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588e4b3a5e608000000", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)

10:15:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xfffffffffffffe24, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x19, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:15:24 executing program 1:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x3, @raw_data="19929be3ca09ccaee958f2ed18f2872a9d43983c48185fca60115527495c1654e4a629f4f5832bab309797a570edd67fee77a326a53d1d34ae5a9ab42cd5c0bdbf078382ccac67161d989b4714b674583a35d555119afd04246b78e460f494ec2bc8da2f72c938145ee386163390735abf0b4ae1229c74d1a569b8d4e6f0f3b5b003380c9d6da69031e59da3abf57e6ef401e9eebf8dd2e0d32fbb59456899387eda2b27854cc9b875f06111a208ad1f46cdc0b5d129bdd60f9feb428e9463485ac2654238048107"}})

10:15:24 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588e4b3a5e608000000", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)

10:15:24 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)

10:15:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xfffffffffffffe24, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x19, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:15:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xfffffffffffffe24, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x19, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)

10:15:24 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000180)="d38100ffe6002b452b7b4f0a7ff32588e4b3a5e608000000", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000500)=""/83, 0xfffffef6, 0x0)
prctl$PR_GET_FPEXC(0xb, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)

10:15:24 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

10:15:31 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x34, 0xc901}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000006f3d)=""/195}, 0x48)

10:15:31 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0)
msync(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x4)

10:15:31 executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

10:15:31 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000100))

10:15:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xc, 0x1, @remote}]}, 0x54}}, 0x0)

10:15:31 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=@ipv4_delroute={0x24, 0x19, 0x301, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmmsg$alg(r0, &(0x7f00000015c0)=[{0x6, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000340)=[@iv={0x0, 0x117, 0x2, 0x0, "a8c984b9f7a4b0deca34f8de2066477c7fb680b3497ec6d89a4338580ebac886b45328468eabb888b99db577de80b6506091674861e51f1675d3f1b249db6277f90e67c251260faae615c8c58155961841492c61da2ebb1366c026bfc0d9056f56fa2994f633d82273ce2ac55bc3a7839959"}, @iv={0x0, 0x117, 0x2, 0x0, "c28108d751148691521f4af9b6d739cfa302edb8f84087b1b6d68aa5cbd1512986ae4521894992c09d2d2009f742124d7d98a22ff1f47b129c8b25097509c65bb39f7d87a9c50ea6c11bca976b88386f092091d4fab1406888c6664987813daf3683a00e7c0f7050f3a006b71c9fb0182449044532eb886628c165b7a604f99f84803774ef69a2d002cfc10b3d9bd5e99d315b36a3"}, @assoc, @iv={0x0, 0x117, 0x2, 0x0, "dc976e1e728b081134d423fa56de23b13219c71f2ca68fec3dab53c6518e73d40ab71e73c07d724575411ff5e5d04194e61b1c22398f7fe4a98ecdc2d85da4cc9c71f8efcb74f286e9d4561602acc395892c2dfe8fbdb0d9580a24a21faefd02d5b6014e568152a84ebe06776d5e3376a0350141d334ee6eece5e7cc69bb49a0a09b60e4ad3c616782564476596b6a47db03acead050647846084ed6f4775547930c337d06a35e804c37f2"}, @op, @op, @op, @iv={0x0, 0x117, 0x2, 0x0, "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"}]}], 0x492492492492297, 0x0)

10:15:31 executing program 5:
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0)

10:15:31 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x2, &(0x7f0000000240)=<r2=>0x0)
open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0)
io_submit(r2, 0x2000000000000060, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)='Y', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0xfffffcee}])
r4 = dup3(r0, r1, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

10:15:31 executing program 3:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x0, 0x0, {0xe, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}})

10:15:31 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00')
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x3c0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0x8)
sendfile(r0, r1, 0x0, 0x320c)

10:15:31 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000100))

10:15:31 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x0, 0x1, "9b"}, 0x9)

10:15:31 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

10:15:38 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000001600)=[{&(0x7f0000000000)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b23867c85533b38c", 0x2a}], 0x2)

10:15:38 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xe9)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2c}]}, 0x1e4)

10:15:38 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000100))

10:15:38 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x0})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9)
connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
connect$vsock_stream(r1, 0x0, 0x0)

10:15:38 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

10:15:38 executing program 2:
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180), &(0x7f0000000080)=0xb)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

10:15:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r2 = gettid()
fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r2})
fcntl$setlease(r1, 0x400, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x88200, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

10:15:38 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000080)="06e128c6", 0x4)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80002000005, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0x0, 0x0, &(0x7f0000000000))

10:15:38 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000100))

10:15:38 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x1000000ae)

10:15:38 executing program 0:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x2c)

10:15:38 executing program 2:
syz_usb_connect(0x0, 0x3de, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5e, 0x6d, 0xfc, 0x8, 0x6cd, 0x121, 0x1a2f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc7, 0x0, 0x1, 0x2d, 0xa4, 0x98, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0)

[ 1844.213100][T11896] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1844.463145][T11896] usb 3-1: Using ep0 maxpacket: 8
[ 1844.583243][T11896] usb 3-1: config 0 has an invalid interface number: 199 but max is 0
[ 1844.592009][T11896] usb 3-1: config 0 has no interface number 0
[ 1844.598578][T11896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=1a.2f
[ 1844.607760][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1844.617454][T11896] usb 3-1: config 0 descriptor??
[ 1844.656696][T11896] keyspan 3-1:0.199: Keyspan 1 port adapter converter detected
[ 1844.664893][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 82
[ 1844.674695][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 81
[ 1844.682716][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 1
[ 1844.698902][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 2
[ 1844.708298][T11896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1844.858903][T11896] usb 3-1: USB disconnect, device number 35
[ 1844.869635][T11896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1844.882636][T11896] keyspan 3-1:0.199: device disconnected
[ 1845.623050][T11896] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1845.873143][T11896] usb 3-1: Using ep0 maxpacket: 8
[ 1845.993372][T11896] usb 3-1: config 0 has an invalid interface number: 199 but max is 0
[ 1846.001726][T11896] usb 3-1: config 0 has no interface number 0
[ 1846.008564][T11896] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=1a.2f
[ 1846.017891][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1846.028811][T11896] usb 3-1: config 0 descriptor??
[ 1846.076023][T11896] keyspan 3-1:0.199: Keyspan 1 port adapter converter detected
[ 1846.084224][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 82
[ 1846.093701][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 81
[ 1846.101701][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 1
[ 1846.111029][T11896] keyspan 3-1:0.199: found no endpoint descriptor for endpoint 2
[ 1846.120169][T11896] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1846.275167][T11896] usb 3-1: USB disconnect, device number 36
[ 1846.285882][T11896] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1846.300801][T11896] keyspan 3-1:0.199: device disconnected
10:15:44 executing program 3:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x23f2, 0xfffffffffffffffe)

10:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00\xc8\xae\xcaA\xe2\xde\xce$\x92\xbd\x1a\xa5\x11\xa5]\xb3\x13\xf7\xde=\xe5R\x9a:,\x82\v$O\x88\xd4(#\xe1\x9aK,\xcf\xc4|A3\xd2eG\x11\xb7I\xae-\xd9n5\f\xd4ti\x0f%\xe9\xb9\xddA^i\xd70\x8e!\xb1\xdahx\x99\xa75\x97\xe6\xff}3\bh\xbc\xbd\x8d\xb0zu\xff\x03\xce\xe1\xbc\xc1\xdb^\xaf\x80\tB)GH\xa0L\x0e\xe1\xd9\x93\xf7?\x16\x1cb8W\xb7\xa8\x81\x99\x864\xd6\xe8!E\xbb\r.;\xcd\xf8\v\xe6\xbc\a?\xf3\xed\x1f?\xbb\xadWSf\xd6}\xe5\xeazqq[\xfc\xcd\xb2\xf3')
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='personality\x00')
sendfile(r0, r1, 0x0, 0x7fffffff)

10:15:44 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

10:15:44 executing program 1:
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfc0004)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x66, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)

10:15:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x6c}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]})

10:15:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:15:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0)

10:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

10:15:44 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
getdents(r0, 0x0, 0x10a)

10:15:45 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x41a0ae8d, 0x0)
r5 = dup3(r2, r3, 0x0)
dup2(r5, r4)

10:15:45 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@empty, 0x1}, 0x20)

10:15:45 executing program 2:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0)={0x1, 0x6}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080), 0x2)

10:15:45 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

[ 1850.271301][T31688] misc userio: Can't change port type on an already running userio instance
[ 1850.688192][T31704] misc userio: Can't change port type on an already running userio instance
10:15:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0)

10:15:52 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1102}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:15:52 executing program 0:
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0)
unshare(0x40600)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
epoll_create1(0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4))
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000))
pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)={0x607}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400), 0x8})

10:15:52 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0)

10:15:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x2})

10:15:52 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x5e5d3de2b9dd0d6e)
r0 = inotify_init1(0x0)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000000)='./file0\x00', 0xc080, 0x0)

10:15:52 executing program 0:
unshare(0x20400)
r0 = socket(0x11, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

10:15:52 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x5e5d3de2b9dd0d6e)
r0 = inotify_init1(0x0)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000000)='./file0\x00', 0xc080, 0x0)

10:15:52 executing program 5:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x4d)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xb7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

10:15:52 executing program 0:
unshare(0x20400)
r0 = socket(0x11, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

10:15:52 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x5e5d3de2b9dd0d6e)
r0 = inotify_init1(0x0)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000000)='./file0\x00', 0xc080, 0x0)

10:15:52 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/21, 0x15}], 0x1)

10:15:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0)

10:15:59 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x5e5d3de2b9dd0d6e)
r0 = inotify_init1(0x0)
socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mknodat(r2, &(0x7f0000000000)='./file0\x00', 0xc080, 0x0)

10:15:59 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x88)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x4, 0x2be)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x280, &(0x7f0000002d40), 0x1e1}}, {{0x0, 0x0, &(0x7f0000000040), 0x1ff, &(0x7f0000000140), 0xa0}}], 0xa0cbcb, 0x0)

10:15:59 executing program 0:
unshare(0x20400)
r0 = socket(0x11, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

10:15:59 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x1ac, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb651, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0)

10:15:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create(0x10007fff)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
syz_open_pts(r0, 0x0)
syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x40}, 0x0, 0x0, 0x0, 0x0)

10:15:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1cb, 0x0)

10:15:59 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfc, 0x40, 0x0, 0x0, 0x2, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000003400)={0x24, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x0, 0x22, 0x9, {0x9}}}, 0x0)

10:15:59 executing program 1:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000000), 0x10000000000002a4, &(0x7f0000000180), 0x23a, 0x0)

10:15:59 executing program 0:
unshare(0x20400)
r0 = socket(0x11, 0x3, 0x0)
bind$can_raw(r0, 0x0, 0x0)

[ 1864.613144][T12117] usb 6-1: new high-speed USB device number 66 using dummy_hcd
10:15:59 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0)

10:15:59 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

10:15:59 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000014c0)={0x2, @pix_mp={0x0, 0x0, 0x3132564e}})

[ 1864.783946][T11978] usb 3-1: new high-speed USB device number 37 using dummy_hcd
10:15:59 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1}, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40043, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0)
recvmsg$kcm(r3, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000))

[ 1864.873641][T12117] usb 6-1: Using ep0 maxpacket: 16
[ 1865.003355][T12117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1865.014891][T12117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1865.027919][T12117] usb 6-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.40
[ 1865.037145][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.059286][T12117] usb 6-1: config 0 descriptor??
[ 1865.093240][T11978] usb 3-1: Using ep0 maxpacket: 8
[ 1865.233398][T11978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1865.245657][T11978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1865.493212][T11978] usb 3-1: string descriptor 0 read error: -22
[ 1865.499595][T11978] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40
[ 1865.508936][T11978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2
[ 1865.519271][T11978] usb 3-1: config 0 descriptor??
[ 1865.546153][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.555102][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.563616][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.571327][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.579865][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.588117][T12117] thrustmaster 0003:044F:B651.0024: unknown main item tag 0x0
[ 1865.614864][T12117] thrustmaster 0003:044F:B651.0024: hidraw0: USB HID v0.05 Device [HID 044f:b651] on usb-dummy_hcd.5-1/input0
[ 1865.746988][T12117] usb 6-1: USB disconnect, device number 66
[ 1866.006841][T11978] elecom 0003:056E:00FC.0025: unknown main item tag 0x0
[ 1866.014403][T11978] elecom 0003:056E:00FC.0025: unknown main item tag 0x0
[ 1866.021576][T11978] elecom 0003:056E:00FC.0025: unknown main item tag 0x0
[ 1866.030991][T11978] elecom 0003:056E:00FC.0025: item fetching failed at offset 131023678
[ 1866.039919][T11978] elecom: probe of 0003:056E:00FC.0025 failed with error -22
[ 1866.206331][T11896] usb 3-1: USB disconnect, device number 37
[ 1866.513110][T11978] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1866.763440][T11978] usb 6-1: Using ep0 maxpacket: 16
[ 1866.883416][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1866.895105][T11978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1866.908188][T11978] usb 6-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.40
[ 1866.917477][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1866.928515][T11978] usb 6-1: config 0 descriptor??
[ 1866.993131][T12117] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1867.236314][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.244125][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.251897][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.259757][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.267523][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.275310][T11978] thrustmaster 0003:044F:B651.0026: unknown main item tag 0x0
[ 1867.284250][T12117] usb 3-1: Using ep0 maxpacket: 8
[ 1867.290180][T11978] thrustmaster 0003:044F:B651.0026: hidraw0: USB HID v0.05 Device [HID 044f:b651] on usb-dummy_hcd.5-1/input0
[ 1867.361200][T11978] usb 6-1: USB disconnect, device number 67
[ 1867.423219][T12117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1867.435146][T12117] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1867.683317][T12117] usb 3-1: string descriptor 0 read error: -22
[ 1867.690333][T12117] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40
[ 1867.700085][T12117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2
[ 1867.709392][T12117] usb 3-1: config 0 descriptor??
[ 1867.734231][T12117] usb 3-1: can't set config #0, error -71
[ 1867.742440][T12117] usb 3-1: USB disconnect, device number 38
10:16:05 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000240), 0xc)

10:16:05 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
write(r0, &(0x7f0000000140)="150000000800000000000000c86b6525000013", 0x13)

10:16:05 executing program 1:
r0 = socket$unix(0x1, 0x40000000001, 0x0)
bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x81000000004)
write(r1, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

10:16:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220)

10:16:05 executing program 5:
r0 = socket$inet(0x2, 0x200000002, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000001ac1414aa0100000002000000"], 0x134)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x2, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

10:16:05 executing program 2:
r0 = socket$unix(0x1, 0x2000000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
r2 = accept(r1, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80000001)
shutdown(r2, 0x2)

[ 1870.629323][T31809] ebt_limit: overflow, try lower: 0/0
10:16:05 executing program 1:
r0 = socket$unix(0x1, 0x40000000001, 0x0)
bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x81000000004)
write(r1, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

10:16:05 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

10:16:05 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000240), 0xc)

10:16:05 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000100)={0x94})

10:16:05 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

10:16:06 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000240), 0xc)

10:16:06 executing program 1:
r0 = socket$unix(0x1, 0x40000000001, 0x0)
bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x81000000004)
write(r1, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

[ 1871.312434][T31834] debugfs: Directory '31834-5' with parent 'kvm' already present!
10:16:11 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

10:16:11 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x13, 0xfffffffffffffffe, 0x3)

10:16:11 executing program 1:
r0 = socket$unix(0x1, 0x40000000001, 0x0)
bind$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r1 = socket$netlink(0x10, 0x3, 0x81000000004)
write(r1, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29)

10:16:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x17, &(0x7f0000000240), 0xc)

10:16:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

10:16:12 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

[ 1876.894679][T11848] kworker/dying (11848) used greatest stack depth: 50848 bytes left
10:16:12 executing program 5:
unshare(0x20400)
r0 = memfd_create(&(0x7f0000000000)='wlan0*{{\x00', 0x0)
readahead(r0, 0x0, 0x0)

10:16:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x395, 0x0, 0x0, 0x51c5)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)="789356e39e", 0x0, 0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:16:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4000880)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6f84}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60000095}, 0x1)

[ 1877.312744][    C0] sd 0:0:1:0: [sg0] tag#5190 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1877.323864][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB: Test Unit Ready
[ 1877.330501][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.342627][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.352690][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.362983][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.373250][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.383125][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.392935][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.402663][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.412505][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.422361][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.432199][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.442003][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.451938][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:16:12 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'batadv0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$inet_mtu(r0, 0x0, 0x32, &(0x7f0000000200)=0x5, 0x4)

10:16:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

10:16:12 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

[ 1877.461800][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.471728][    C0] sd 0:0:1:0: [sg0] tag#5190 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.632297][    C0] sd 0:0:1:0: [sg0] tag#5191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1877.642153][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB: Test Unit Ready
[ 1877.648942][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.659101][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.669029][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.678873][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.688759][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.698575][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.708531][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.718358][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.728198][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.738057][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.747889][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.757735][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.767590][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.777399][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1877.787224][    C0] sd 0:0:1:0: [sg0] tag#5191 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
10:16:19 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

10:16:19 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1, 0x0)
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000001100)=""/253, 0xfd}], 0x16f, 0x4)

10:16:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x7e00000000000000)

10:16:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4000880)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6f84}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60000095}, 0x1)

10:16:19 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

10:16:19 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
r1 = socket(0x10, 0x5, 0xa0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x0, 0x2, 0x401, 0xf3, 0x12, 0xff8c}, 0x1c)
sendto$inet(r0, 0x0, 0x3f7, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)=0x7fff)
socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000052001f0014f9f407000904000a00071008000100ffffffff0800000000000000", 0x24)
socket(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc)
r4 = gettid()
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
prctl$PR_SET_PTRACER(0x59616d61, r4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r5)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getpid()
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00')
r6 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
ptrace$setopts(0x4206, r4, 0x0, 0x0)

[ 1884.406520][    C0] sd 0:0:1:0: [sg0] tag#5211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1884.416227][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB: Test Unit Ready
[ 1884.422810][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.432668][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.442622][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.452525][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.462466][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.472430][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.482346][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.492180][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.502028][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.511858][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.521923][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.531762][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.541638][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:16:19 executing program 5:
unshare(0x20400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000000))

[ 1884.551485][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.561408][    C0] sd 0:0:1:0: [sg0] tag#5211 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
10:16:19 executing program 2:
r0 = socket$inet6(0xa, 0x80803, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040))

10:16:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4000880)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6f84}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60000095}, 0x1)

10:16:19 executing program 1:
keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}})

[ 1884.852291][    C0] sd 0:0:1:0: [sg0] tag#5212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1884.862037][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB: Test Unit Ready
[ 1884.868796][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.878636][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.888527][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.898372][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.908246][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.918093][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.927966][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.937808][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.947805][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.957639][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.967536][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.977610][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1884.987633][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:16:19 executing program 2:
r0 = socket$inet6(0xa, 0x80803, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040))

10:16:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x23, 0x829, 0x0, 0x0, {0x2806, 0xe00000000000000, 0x74000000}}, 0x14}, 0x1, 0x1c689}, 0x0)

[ 1884.997477][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1885.007376][    C0] sd 0:0:1:0: [sg0] tag#5212 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
10:16:26 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
close(r4)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0xffff, {0x40, 0x7, 0x1}}, 0x9c)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
clone(0x4000000, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f00000002c0)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d238d4f5a649bcccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88")

10:16:26 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003006708000800030004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

10:16:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, 0x0, 0x4000880)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6f84}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x60000095}, 0x1)

10:16:26 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x319, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0)

10:16:26 executing program 2:
r0 = socket$inet6(0xa, 0x80803, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040))

10:16:26 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
r1 = dup2(r0, r0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
write$selinux_attr(r1, 0x0, 0x0)

[ 1891.042711][T31986] IPv6: Can't replace route, no match found
[ 1891.048760][    C0] sd 0:0:1:0: [sg0] tag#5213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1891.048933][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB: Test Unit Ready
[ 1891.065197][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.067060][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1891.075251][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.094555][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.102482][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1891.104416][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.104503][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.104589][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.143087][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.152958][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.162706][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.172640][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.182485][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:16:26 executing program 2:
r0 = socket$inet6(0xa, 0x80803, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10000032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040))

10:16:26 executing program 5:
r0 = socket$inet(0xa, 0x80805, 0x0)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x98)

[ 1891.192322][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.202205][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.212042][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1891.221931][    C0] sd 0:0:1:0: [sg0] tag#5213 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
10:16:26 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003006708000800030004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

10:16:26 executing program 2:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x90, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {}]}, 0x108)

10:16:26 executing program 0:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0)

[ 1891.418393][T32001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:26 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003006708000800030004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[ 1891.547804][T32008] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1891.556817][T32008] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1891.641696][T32013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:35 executing program 4:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4)
setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000000), 0x4)

10:16:35 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, 0x16, 0x100000000401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

10:16:35 executing program 0:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0)

10:16:35 executing program 5:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x8})

10:16:35 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003006708000800030004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

10:16:35 executing program 1:
r0 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, r0)

[ 1900.443158][T32031] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1900.451961][T32031] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1900.470593][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:35 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c8, &(0x7f0000000040)=[{&(0x7f0000000540)="2e0000001c008109e00f80ecdb4cb9f207c804a00d0000008808cefb0a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

10:16:35 executing program 5:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x80000000000000bd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000008400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

10:16:35 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003600)={0x8, 0x0, [{0x0, 0x1000, &(0x7f0000000500)=""/4096}, {0x0, 0x7e, &(0x7f0000000000)=""/126}, {0x0, 0xdb, &(0x7f0000000240)=""/219}, {0x0, 0x76, &(0x7f0000000440)=""/118}, {0x0, 0xfffffffffffffcb7, &(0x7f0000000340)=""/252}, {0x0, 0x1000, &(0x7f0000001500)=""/4096}, {0x0, 0x1000, &(0x7f0000002500)=""/4096}, {0x0, 0xfc, &(0x7f0000003500)=""/252}]})

10:16:35 executing program 0:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0)

10:16:35 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4)
syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0)
io_setup(0x1, &(0x7f0000000100)=<r3=>0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="83f535032d3b14360b10eaf49eed7a705a2e0c27ee4aa565acc6c9c647a7aa57c6c931893dde05f03c", 0x29}], 0x1}}], 0x1, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x52})
io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r1, &(0x7f0000000080), 0x101b2}])

[ 1900.683974][T32043] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1900.747646][T32051] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1900.757121][T32051] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
10:16:35 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0xd, 0x6, 0x1}, 0x14}}, 0x0)

10:16:41 executing program 0:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0)

10:16:41 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c8, &(0x7f0000000040)=[{&(0x7f0000000540)="2e0000001c008109e00f80ecdb4cb9f207c804a00d0000008808cefb0a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

10:16:41 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00004b4000/0x1000)=nil, 0x1000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/100, 0x64)
read(r0, &(0x7f0000000400)=""/100, 0x64)

10:16:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000b40)=@acquire={0x200, 0x17, 0x109, 0x0, 0x0, {{@in=@loopback, 0x0, 0xff}, @in=@multicast1, {@in=@loopback, @in6=@initdev}, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb8}}, [@algo_auth={0xa4, 0x1, {{'xcbc-aes-neon\x00'}, 0x2e0, "3ec354919bcc71fb5a6e2d9b35d2b36aa6945d281d1883ea8bd1452e5bdd4bd2c1722bb5e9356ed7196fb3c1374149b2333f8a73135918c901523b45967894a9c380ad517eeb4b8640f3160bc84313d12aa4d592cd0020ae94d44d4b"}}, @lastused={0xc, 0xf, 0x4}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e21, @in=@rand_addr=0xeb}}, @policy_type={0xc}]}, 0x200}, 0x1, 0x0, 0x0, 0x840}, 0x40000)

10:16:41 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty}, 0x172)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x3e, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

10:16:41 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00')
mkdirat$cgroup(r0, &(0x7f00000005c0)='syz1\x00', 0x1ff)

[ 1906.929591][T32078] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1906.941142][T32077] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1906.950297][T32077] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
10:16:42 executing program 3:
r0 = epoll_create1(0x0)
unshare(0x24020400)
tee(r0, 0xffffffffffffffff, 0x87, 0x0)

10:16:42 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0x40044104, 0x0)

10:16:42 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c8, &(0x7f0000000040)=[{&(0x7f0000000540)="2e0000001c008109e00f80ecdb4cb9f207c804a00d0000008808cefb0a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

10:16:42 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x33, {0x33, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2a1996b20e8db2d431626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x86200)

10:16:42 executing program 0:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x400)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000a40), 0x0)
write$binfmt_elf32(r3, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)
sendfile(r3, r1, &(0x7f0000000240), 0x2)

[ 1907.199048][T32093] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
10:16:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0))

10:16:42 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
socketpair(0x11, 0xa, 0x5, &(0x7f0000002580))

10:16:42 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1c8, &(0x7f0000000040)=[{&(0x7f0000000540)="2e0000001c008109e00f80ecdb4cb9f207c804a00d0000008808cefb0a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0)

[ 1907.484024][T12117] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1907.521008][T32112] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1907.733081][T12117] usb 6-1: Using ep0 maxpacket: 8
[ 1907.853304][T12117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1907.865116][T12117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1907.878269][T12117] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1907.887492][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1907.897223][T12117] usb 6-1: config 0 descriptor??
[ 1908.375427][T12117] corsair 0003:1B1C:1B34.0027: unknown main item tag 0x3
[ 1908.382806][T12117] corsair 0003:1B1C:1B34.0027: unknown main item tag 0xd
[ 1908.390874][T12117] corsair 0003:1B1C:1B34.0027: failed to start in urb: -90
[ 1908.402349][T12117] corsair 0003:1B1C:1B34.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0
[ 1908.576619][T12117] usb 6-1: USB disconnect, device number 68
[ 1909.353243][T11896] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1909.593212][T11896] usb 6-1: Using ep0 maxpacket: 8
[ 1909.713352][T11896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1909.724423][T11896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1909.737484][T11896] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1909.746731][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1909.756697][T11896] usb 6-1: config 0 descriptor??
[ 1910.056257][T11896] corsair 0003:1B1C:1B34.0028: unknown main item tag 0x3
[ 1910.063836][T11896] corsair 0003:1B1C:1B34.0028: unknown main item tag 0xd
[ 1910.071725][T11896] corsair 0003:1B1C:1B34.0028: failed to start in urb: -90
[ 1910.081920][T11896] corsair 0003:1B1C:1B34.0028: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0
[ 1910.217031][T12117] usb 6-1: USB disconnect, device number 69
10:16:47 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
sendfile(r2, r3, 0x0, 0x7ffff000)

10:16:47 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x80001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88)
mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5)

10:16:47 executing program 2:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x22, 0x2, 0x22)
close(r3)

10:16:47 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x300f, 0x4}})

10:16:47 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xd7, 0x0, &(0x7f0000000000))

10:16:47 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x33, {0x33, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2a1996b20e8db2d431626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x86200)

[ 1912.124867][T32126] delete_channel: no stack
10:16:47 executing program 3:
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902680002010000000904000001020d0000052406000105240000000d240f0100000000000000000006391a0000000c241b0000000000000000000905810300000000000904010100020d00000904010102020d0000090582020000000000090503020000000000"], 0x0)

10:16:47 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0)

10:16:47 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:16:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x0, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:16:47 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246)
unshare(0x28020400)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000002c0))

[ 1912.383558][T11896] usb 6-1: new high-speed USB device number 70 using dummy_hcd
10:16:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6c0d1)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x0, 0x0, 0x0)

[ 1912.563219][T12117] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1912.613238][T11759] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1912.635858][T11896] usb 6-1: Using ep0 maxpacket: 8
[ 1912.641523][T23921] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1912.773395][T11896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1912.785304][T11896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1912.798435][T11896] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1912.807620][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1912.813098][T12117] usb 2-1: Using ep0 maxpacket: 32
[ 1912.818597][T11896] usb 6-1: config 0 descriptor??
[ 1912.863423][T11759] usb 1-1: Using ep0 maxpacket: 8
[ 1912.883335][T23921] usb 4-1: Using ep0 maxpacket: 16
[ 1912.963410][T12117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1912.975171][T12117] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[ 1912.983479][T11759] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[ 1912.984519][T12117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1912.992567][T11759] usb 1-1: config 0 has no interface number 0
[ 1913.006302][T12117] usb 2-1: config 0 descriptor??
[ 1913.007101][T11759] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[ 1913.021318][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1913.030272][T23921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1913.042041][T23921] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping
[ 1913.051582][T23921] usb 4-1: config 1 interface 1 has no altsetting 0
[ 1913.059798][T11759] usb 1-1: config 0 descriptor??
[ 1913.213530][T23921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1913.223046][T23921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.231118][T23921] usb 4-1: Product: syz
[ 1913.235675][T23921] usb 4-1: Manufacturer: syz
[ 1913.240487][T23921] usb 4-1: SerialNumber: syz
[ 1913.284816][T23921] cdc_ncm 4-1:1.0: skipping garbage
[ 1913.290200][T23921] cdc_ncm 4-1:1.0: bind() failure
[ 1913.316271][T11896] corsair 0003:1B1C:1B34.0029: unknown main item tag 0x3
[ 1913.324032][T11896] corsair 0003:1B1C:1B34.0029: unknown main item tag 0xd
[ 1913.331876][T11896] corsair 0003:1B1C:1B34.0029: failed to start in urb: -90
[ 1913.342708][T11896] corsair 0003:1B1C:1B34.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0
[ 1913.494065][T23921] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1913.506955][T23921] usb 4-1: USB disconnect, device number 91
[ 1913.537882][T11978] usb 6-1: USB disconnect, device number 70
[ 1913.543343][T11759] airspy 1-1:0.131: Board ID: 00
[ 1913.549414][T11759] airspy 1-1:0.131: Firmware version: 
[ 1913.733667][T12117] usb 2-1: string descriptor 0 read error: -71
[ 1913.753494][T12117] uclogic 0003:5543:0047.002A: failed retrieving string descriptor #200: -71
[ 1913.762520][T12117] uclogic 0003:5543:0047.002A: failed retrieving pen parameters: -71
[ 1913.770867][T12117] uclogic 0003:5543:0047.002A: failed probing pen v2 parameters: -71
[ 1913.779305][T12117] uclogic 0003:5543:0047.002A: failed probing parameters: -71
[ 1913.787002][T12117] uclogic: probe of 0003:5543:0047.002A failed with error -71
[ 1913.798532][T12117] usb 2-1: USB disconnect, device number 60
[ 1914.253236][T11978] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1914.414541][T11759] airspy 1-1:0.131: usb_control_msg() failed -71 request 0f
[ 1914.423937][T11759] airspy 1-1:0.131: Registered as swradio16
[ 1914.430008][T11759] airspy 1-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[ 1914.444643][T11759] usb 1-1: USB disconnect, device number 59
[ 1914.473268][T12117] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1914.493273][T11978] usb 4-1: Using ep0 maxpacket: 16
[ 1914.613172][T11978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1914.624355][T11978] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping
[ 1914.633631][T11978] usb 4-1: config 1 interface 1 has no altsetting 0
[ 1914.723298][T12117] usb 2-1: Using ep0 maxpacket: 32
[ 1914.803421][T11978] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1914.812711][T11978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1914.820969][T11978] usb 4-1: Product: syz
[ 1914.825276][T11978] usb 4-1: Manufacturer: syz
[ 1914.829936][T11978] usb 4-1: SerialNumber: syz
[ 1914.873419][T12117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1914.884808][T12117] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[ 1914.894091][T12117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1914.905179][T11978] cdc_ncm 4-1:1.0: skipping garbage
[ 1914.910664][T11978] cdc_ncm 4-1:1.0: bind() failure
[ 1914.926022][T12117] usb 2-1: config 0 descriptor??
[ 1915.093691][T11978] cdc_mbim: probe of 4-1:1.1 failed with error -71
[ 1915.104377][T11978] usb 4-1: USB disconnect, device number 92
[ 1915.183145][T11759] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1915.343758][T12117] usb 2-1: string descriptor 0 read error: -71
[ 1915.363983][T12117] uclogic 0003:5543:0047.002B: failed retrieving string descriptor #200: -71
[ 1915.373235][T12117] uclogic 0003:5543:0047.002B: failed retrieving pen parameters: -71
[ 1915.381487][T12117] uclogic 0003:5543:0047.002B: failed probing pen v2 parameters: -71
[ 1915.390101][T12117] uclogic 0003:5543:0047.002B: failed probing parameters: -71
[ 1915.397938][T12117] uclogic: probe of 0003:5543:0047.002B failed with error -71
[ 1915.429641][T12117] usb 2-1: USB disconnect, device number 61
[ 1915.443369][T11759] usb 1-1: Using ep0 maxpacket: 8
[ 1915.573290][T11759] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[ 1915.581578][T11759] usb 1-1: config 0 has no interface number 0
[ 1915.587883][T11759] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[ 1915.597138][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1915.606934][T11759] usb 1-1: config 0 descriptor??
[ 1915.903281][T11759] airspy 1-1:0.131: Board ID: 00
[ 1915.908350][T11759] airspy 1-1:0.131: Firmware version: 
[ 1915.953401][T11759] airspy 1-1:0.131: usb_control_msg() failed -71 request 11
[ 1915.963575][T11759] airspy 1-1:0.131: Registered as swradio16
[ 1915.969550][T11759] airspy 1-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[ 1915.991580][T11759] usb 1-1: USB disconnect, device number 60
10:16:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1f2, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000066000b0500002067002000edffffff00", @ANYRES32=r3, @ANYRES64=r3], 0x74}}, 0x10000)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x3, 0x300000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0)

10:16:54 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x303, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000840)=""/96, 0x60}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

10:16:54 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x33, {0x33, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2a1996b20e8db2d431626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x86200)

10:16:54 executing program 1:
setrlimit(0x5bfa6ed2960dfc7d, &(0x7f0000000000))

10:16:54 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3f000000}, 0x1c)

10:16:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@timestamp={0x44, 0x4}]}}, @icmp=@timestamp_reply={0x44, 0xa}}}}}, 0x0)

10:16:54 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3}, {0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x9, 0x2}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:16:54 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x10, 0x80003, 0xc)
sendmsg(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="24000000020107081dfffd946fa2830020200a0009001200000b0000000000000000ff7e", 0x39a}], 0x1}, 0x0)

10:16:54 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x303, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000840)=""/96, 0x60}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

[ 1919.423676][T32210] netlink: 'syz-executor.0': attribute type 18 has an invalid length.
[ 1919.431917][T32210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
10:16:54 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27)
read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d)

[ 1919.474825][T11759] usb 6-1: new high-speed USB device number 71 using dummy_hcd
10:16:54 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x303, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000840)=""/96, 0x60}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

10:16:54 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27)
read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d)

[ 1919.713115][T11759] usb 6-1: Using ep0 maxpacket: 8
[ 1919.834651][T11759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1919.846393][T11759] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1919.859470][T11759] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1919.868731][T11759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1919.880065][T11759] usb 6-1: config 0 descriptor??
[ 1920.366155][T11759] corsair 0003:1B1C:1B34.002C: unknown main item tag 0x3
[ 1920.373724][T11759] corsair 0003:1B1C:1B34.002C: unknown main item tag 0xd
[ 1920.381614][T11759] corsair 0003:1B1C:1B34.002C: failed to start in urb: -90
[ 1920.391552][T11759] corsair 0003:1B1C:1B34.002C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0
[ 1920.574968][T11759] usb 6-1: USB disconnect, device number 71
[ 1923.378815][T32234] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1926.254925][T32235] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'.
10:17:01 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2f9, 0x0, &(0x7f0000000280)=[@acquire, @acquire, @request_death, @release, @decrefs, @dead_binder_done, @clear_death, @acquire_done={0x40406301}, @free_buffer], 0x1000001ed, 0x0, 0x0})

10:17:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3}, {0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x9, 0x2}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:17:01 executing program 2:
r0 = socket(0x10, 0x803, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x303, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0)
process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000840)=""/96, 0x60}], 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400})

10:17:01 executing program 0:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3)
write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES64, @ANYRES16, @ANYPTR64, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT], @ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYPTR, @ANYRES32], @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYPTR, @ANYRESDEC], @ANYRES64, @ANYPTR64, @ANYRESHEX, @ANYRES32, @ANYRESHEX], @ANYRESHEX, @ANYPTR, @ANYRES64], 0xfffffcf1)
fcntl$addseals(r0, 0x409, 0x0)

10:17:01 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27)
read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d)

10:17:01 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x33, {0x33, 0x0, "90861c9b5edf0ef70a3e257eef9f911bdeb7c22db7b1ae26c9d6080ec08dd0465102cbd7b197d2a1996b20e8db2d431626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x86200)

10:17:01 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRESOCT, @ANYPTR], 0x27)
read(r3, &(0x7f0000000380)=""/225, 0xfffffd0d)

10:17:01 executing program 2:
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$inet(r0, &(0x7f0000000e40), 0xfffffffffffffd77, 0x4000000, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10)

10:17:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3}, {0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x9, 0x2}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1926.774454][T12117] usb 6-1: new high-speed USB device number 72 using dummy_hcd
10:17:01 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3)
ioctl$TCSETAF(r1, 0x5408, 0x0)

10:17:01 executing program 2:
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0)

10:17:02 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f})
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x8d0519e64bafee0a, 0x40000000000031, 0xffffffffffffffff, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0)

[ 1927.016106][T12117] usb 6-1: Using ep0 maxpacket: 8
[ 1927.138691][T12117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1927.149827][T12117] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1927.162976][T12117] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1927.172116][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1927.198596][T12117] usb 6-1: config 0 descriptor??
[ 1927.686018][T12117] corsair 0003:1B1C:1B34.002D: unknown main item tag 0x3
[ 1927.693508][T12117] corsair 0003:1B1C:1B34.002D: unknown main item tag 0xd
[ 1927.701356][T12117] corsair 0003:1B1C:1B34.002D: failed to start in urb: -90
[ 1927.710328][T12117] corsair 0003:1B1C:1B34.002D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.5-1/input0
[ 1927.892231][T12117] usb 6-1: USB disconnect, device number 72
10:17:07 executing program 4:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev'}, 0x2c, 0x0)
add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x23f2, 0xfffffffffffffffe)

10:17:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x3}, {0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x9, 0x2}]})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:17:07 executing program 3:
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)

10:17:07 executing program 2:
r0 = socket(0x1e, 0x4, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x8000)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000001c0))
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x80)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000340)=""/94)
fremovexattr(r0, 0x0)
gettid()
connect$caif(r1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0), 0x10)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300))
readv(r2, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1)
connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
read$rfkill(r2, &(0x7f0000000080), 0x8)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000002c0), &(0x7f00000003c0)=0xc)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3d}, 0x4)

10:17:07 executing program 0:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc020662a, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000001000000cc98a4c29f1647ea8cfcb48d22"])

10:17:07 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0)
exit(0x0)

[ 1932.735488][T32284] binder: 32251:32284 ioctl c0306201 20000080 returned -14
10:17:07 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x8, 0x100000001})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x2, 0xe0})

10:17:08 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="e231749c4b807e05433766e45b45fcfde79f3cec73e5c98054", 0x19}], 0x1)

10:17:08 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x5eb857)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xfffffffffffffe48)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@local, r3}, 0x14)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000), 0x4)
openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x111181, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socket$inet_sctp(0x2, 0x0, 0x84)
sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0)

10:17:08 executing program 3:
r0 = epoll_create1(0x0)
r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhci\x00', 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc0000004})
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0)

10:17:08 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:17:08 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x3, 0x0, 0x0, @time, {}, {}, @queue}], 0x30)

10:17:12 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0)

10:17:12 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "cb7b"}, @global=@item_012={0x2, 0x1, 0x2, "08c9"}]}}, 0x0}, 0x0)

10:17:12 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x386}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0xf, &(0x7f0000000380)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}]}, 0x4, [{0x2, &(0x7f0000000580)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

10:17:12 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000974ffa406d042d097035000000010902240001dce4fa753502ec0fe730c85e20d879000000000904640001e0cce600090500000000000000090400000000000000"], 0x0)

10:17:12 executing program 0:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xc, 0x4, 0x0, 0x0, 0x0, 0x2, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {[@broadcast]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, 0x0)

10:17:12 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000530000005305a4d9b1ce6a1541a5687a7efbc2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

10:17:12 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\x05\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100))
sendfile(r3, r1, 0x0, 0x80)

10:17:12 executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x21, 0x72, 0xcd, 0x8, 0x582, 0xfffe, 0x3239, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x0, 0x1, 0xff, 0xc8, 0xe2, 0x0, [], [{{0x9, 0x5, 0xf, 0x1f}}]}}]}}]}}, 0x0)

[ 1937.313073][T12117] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[ 1937.323147][T11978] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1937.333268][T32167] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1937.343419][T28493] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1937.503142][T11759] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1937.563512][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 1937.683774][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1937.695253][T11978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1937.708829][T11978] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[ 1937.718134][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.727651][T32167] usb 3-1: config 220 has an invalid descriptor of length 53, skipping remainder of the config
[ 1937.738445][T32167] usb 3-1: config 220 has 0 interfaces, different from the descriptor's value: 1
[ 1937.747923][T32167] usb 3-1: New USB device found, idVendor=046d, idProduct=092d, bcdDevice=35.70
[ 1937.757440][T32167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.767070][T28493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1937.778239][T28493] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1937.783033][T11759] usb 1-1: Using ep0 maxpacket: 8
[ 1937.791425][T28493] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40
[ 1937.805904][T28493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.815118][T12117] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1937.825300][T12117] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1937.837699][T11978] usb 6-1: config 0 descriptor??
[ 1937.853488][T28493] usb 4-1: config 0 descriptor??
[ 1937.874313][T12117] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1937.944648][T11759] usb 1-1: config 0 has an invalid interface number: 226 but max is 0
[ 1937.953210][T11759] usb 1-1: config 0 has no interface number 0
[ 1937.959396][T11759] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1937.971039][T11759] usb 1-1: New USB device found, idVendor=0582, idProduct=fffe, bcdDevice=32.39
[ 1937.980473][T11759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1937.991953][T11759] usb 1-1: config 0 descriptor??
[ 1938.114322][T32167] usb 3-1: string descriptor 0 read error: -71
[ 1938.128101][T32167] usb 3-1: USB disconnect, device number 39
[ 1938.237653][T11759] usb 1-1: USB disconnect, device number 61
[ 1938.325899][T11978] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x5
[ 1938.333568][T11978] corsair 0003:1B1C:1B3E.002E: unknown main item tag 0x4
[ 1938.340851][T11978] corsair 0003:1B1C:1B3E.002E: collection stack underflow
[ 1938.348395][T11978] corsair 0003:1B1C:1B3E.002E: item 0 2 0 12 parsing failed
[ 1938.356400][T11978] corsair 0003:1B1C:1B3E.002E: parse failed
[ 1938.362545][T11978] corsair: probe of 0003:1B1C:1B3E.002E failed with error -22
[ 1938.388101][T28493] uclogic 0003:2179:0053.002F: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0
[ 1938.572575][T11978] usb 4-1: USB disconnect, device number 93
[ 1938.581379][T11759] usb 6-1: USB disconnect, device number 73
[ 1938.653417][T12117] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1938.662593][T12117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1938.873631][T23921] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1938.954985][T12117] cdc_ether: probe of 2-1:1.0 failed with error -22
[ 1938.970117][T12117] usb 2-1: USB disconnect, device number 62
[ 1939.033595][T11896] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1939.243586][T23921] usb 3-1: config 220 has an invalid descriptor of length 53, skipping remainder of the config
[ 1939.254338][T23921] usb 3-1: config 220 has 0 interfaces, different from the descriptor's value: 1
[ 1939.263732][T23921] usb 3-1: New USB device found, idVendor=046d, idProduct=092d, bcdDevice=35.70
[ 1939.273056][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.282340][T11896] usb 1-1: Using ep0 maxpacket: 8
[ 1939.363188][T28493] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1939.371114][T11978] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1939.403384][T11896] usb 1-1: config 0 has an invalid interface number: 226 but max is 0
[ 1939.411634][T11896] usb 1-1: config 0 has no interface number 0
[ 1939.417936][T11896] usb 1-1: config 0 interface 226 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1939.429096][T11896] usb 1-1: New USB device found, idVendor=0582, idProduct=fffe, bcdDevice=32.39
[ 1939.429136][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.432372][T11896] usb 1-1: config 0 descriptor??
[ 1939.563404][T23921] usb 3-1: string descriptor 0 read error: -71
[ 1939.575591][T23921] usb 3-1: USB disconnect, device number 40
[ 1939.663248][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 1939.685614][T11896] usb 1-1: USB disconnect, device number 62
[ 1939.723306][T28493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1939.734592][T28493] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1939.747696][T28493] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40
[ 1939.756919][T28493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.768666][T28493] usb 4-1: config 0 descriptor??
[ 1939.823548][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1939.834789][T11978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1939.847863][T11978] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[ 1939.857292][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.867236][T11978] usb 6-1: config 0 descriptor??
10:17:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda0602000000ffe80001040000040d001800ea1100120005000000", 0x29}], 0x1)

10:17:15 executing program 2:
getrandom(0x0, 0x0, 0x6)

10:17:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000230035faffffff00000000000400000204001000b115f8b9206ac3d785781200000000c477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b05253b4ff87ab2f7aebd159832fe75ae1c31960a608d6330509a05c0f5092b27c5cd2f6d2d57a845689fb0526d8a36bc3cc14c93dfb9f6ecfb24e0ffa0f86eb138162c019155756"], 0x18}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
close(r0)

10:17:15 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "cb7b"}, @global=@item_012={0x2, 0x1, 0x2, "08c9"}]}}, 0x0}, 0x0)

[ 1940.234345][T28493] usbhid 4-1:0.0: can't add hid device: -71
[ 1940.240579][T28493] usbhid: probe of 4-1:0.0 failed with error -71
[ 1940.253792][T11978] usbhid 6-1:0.0: can't add hid device: -71
[ 1940.260012][T11978] usbhid: probe of 6-1:0.0 failed with error -71
[ 1940.321060][T11978] usb 6-1: USB disconnect, device number 74
[ 1940.336597][T28493] usb 4-1: USB disconnect, device number 94
[ 1940.753089][T28493] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1941.113317][T28493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1941.124376][T28493] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1941.137350][T28493] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40
[ 1941.146585][T28493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1941.156520][T28493] usb 4-1: config 0 descriptor??
[ 1941.639592][T28493] uclogic 0003:2179:0053.0030: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0
[ 1941.841681][T28493] usb 4-1: USB disconnect, device number 95
10:17:17 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKRRPART(r0, 0x1265, 0x0)

10:17:17 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, 0x0)
r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
fchown(r0, 0x0, 0x0)

10:17:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x3cb)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f455c410600010005010d4da5921d8fee0e0dfd81da"], 0x16)
close(r3)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
write$FUSE_DIRENTPLUS(r4, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)

10:17:17 executing program 2:
r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1)
r2 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r2, &(0x7f0000000040)="06", 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0)
r3 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

10:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000230035faffffff00000000000400000204001000b115f8b9206ac3d785781200000000c477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b05253b4ff87ab2f7aebd159832fe75ae1c31960a608d6330509a05c0f5092b27c5cd2f6d2d57a845689fb0526d8a36bc3cc14c93dfb9f6ecfb24e0ffa0f86eb138162c019155756"], 0x18}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
close(r0)

10:17:17 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

10:17:17 executing program 0:
r0 = getpgrp(0x0)
prlimit64(r0, 0x0, 0x0, 0xfffffffffffffffe)

10:17:17 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x2, 0xff00000000000000, 0x0, 0x15}, [@ldst={0x3fd}]}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48)

10:17:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000230035faffffff00000000000400000204001000b115f8b9206ac3d785781200000000c477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b05253b4ff87ab2f7aebd159832fe75ae1c31960a608d6330509a05c0f5092b27c5cd2f6d2d57a845689fb0526d8a36bc3cc14c93dfb9f6ecfb24e0ffa0f86eb138162c019155756"], 0x18}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
close(r0)

[ 1942.423841][T32420] debugfs: File '32419' in directory 'proc' already present!
10:17:17 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "cb7b"}, @global=@item_012={0x2, 0x1, 0x2, "08c9"}]}}, 0x0}, 0x0)

10:17:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)='-0', 0x2}], 0x1)

10:17:17 executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x47, &(0x7f0000000680)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x11, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x11, 0x0, [], "d3c904fd8888ac5f07"}}}}}}, 0x0)

[ 1942.833388][T28493] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1943.193306][T28493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1943.204525][T28493] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1943.217597][T28493] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40
[ 1943.226863][T28493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1943.236554][T28493] usb 4-1: config 0 descriptor??
[ 1943.724648][T28493] uclogic 0003:2179:0053.0031: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0
[ 1943.922811][T28493] usb 4-1: USB disconnect, device number 96
10:17:23 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00')
read(r0, 0x0, 0x0)

10:17:23 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xde, 0x0, 0x40, 0x0, 0x0, 0x0, 0xff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:17:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800130800000000a90300000200000004000000080005001600000000000001f36b6744254ffe2e417304795bd3bfc6afb407dcb7d4380144abbbd96a81b4bc9481b4358416561939062c20f394e5b4b574000000000c6d757a3cc10ed9abb13edfa687bdd02808a2605d1b73d76ea549e2012287087c9acc01ec20b742f70000000000080076dc99133f08000000232b013034197c9ff810f6f56c338fe8f6f900f8a14c6fd77505d76a2b096b4570a56849c0f3d8164537", @ANYRES32=0x0], 0x20}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0)

10:17:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xd162, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f00000001c0))

10:17:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000230035faffffff00000000000400000204001000b115f8b9206ac3d785781200000000c477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b05253b4ff87ab2f7aebd159832fe75ae1c31960a608d6330509a05c0f5092b27c5cd2f6d2d57a845689fb0526d8a36bc3cc14c93dfb9f6ecfb24e0ffa0f86eb138162c019155756"], 0x18}}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
close(r0)

10:17:23 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "cb7b"}, @global=@item_012={0x2, 0x1, 0x2, "08c9"}]}}, 0x0}, 0x0)

10:17:23 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @local, 0x1}, 0x10)

10:17:23 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x40000000002, 0x0)
write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18}, 0x71)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0x6, "011308d834ff3a30e1a729834f0eccc2a4aaf56bfd6b0dbbd7ca8632f52c9d4b5a4f2e8a3c37d7908920cb4a658c95b60871374a38e6a8297d9a2d01637d62af"})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
getpeername$tipc(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0)

10:17:23 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc))
r3 = syz_open_pts(r2, 0x0)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000))

[ 1948.755772][T28493] usb 4-1: new high-speed USB device number 97 using dummy_hcd
10:17:23 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f00000000c0)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:17:24 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:17:24 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f00000000c0)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:17:24 executing program 1:
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mem\x00', 0x0, 0x0)

[ 1949.133780][T28493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1949.144924][T28493] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1949.158087][T28493] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40
[ 1949.167650][T28493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1949.239549][T28493] usb 4-1: config 0 descriptor??
[ 1949.722410][T28493] uclogic 0003:2179:0053.0032: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input0
[ 1949.921259][T28493] usb 4-1: USB disconnect, device number 97
10:17:30 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000409000/0x4000)=nil, 0x4000)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

10:17:30 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f00000000c0)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:17:30 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)

10:17:30 executing program 2:
socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154002008178040016000a0012000200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0)

10:17:30 executing program 1:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x52, 0xffffffff, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}})

10:17:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = dup3(r1, r0, 0x0)
r3 = gettid()
close(r1)
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000240)={r1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000140), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r6, r5, r6}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000480)="a02d47f1fa4f", 0x6})
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x100, 0x9200)

[ 1955.688288][    C1] sd 0:0:1:0: [sg0] tag#720 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1955.697984][    C1] sd 0:0:1:0: [sg0] tag#720 CDB: Test Unit Ready
[ 1955.704672][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.714492][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.724329][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.734182][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.743991][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.753747][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.763819][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.773614][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.783386][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.793126][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.802755][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.812607][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.822360][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:17:30 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f00000000c0)='G\xc3$\x05ju\xc3PL\x00\x94\xf7\x1a#\x85x\xa2Br{HS\x00\xd8\x1fl\xfd\vk\xbf\x83\x16m\xca\x0e\xa6\xe2#\x9a\xe5\xc0\x9d\xde\xf2\x01\x00\x00\x00\x00\x00\x00\x00c(\xf2}\x1d', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:17:30 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
fadvise64(r0, 0x0, 0x0, 0x4)

[ 1955.832161][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.841881][    C1] sd 0:0:1:0: [sg0] tag#720 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.925099][T23921] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1955.938378][    C0] sd 0:0:1:0: [sg0] tag#5199 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[ 1955.948155][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB: Test Unit Ready
[ 1955.954845][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.964627][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.974410][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.984233][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1955.994051][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.003834][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.013671][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.023449][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.033274][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.043147][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.053010][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.062736][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
10:17:31 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=@acquire={0x128, 0x17, 0x301, 0x0, 0x0, {{@in6=@mcast2}, @in=@dev, {@in=@multicast1, @in=@multicast2}, {{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb5}}}, 0x128}}, 0x0)

10:17:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2, 0x1000000}, [@nested={0x18, 0x0, [@typed={0xd, 0x1, @ipv6=@loopback={0xfeffffff9effffff}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0)

10:17:31 executing program 3:
add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0xfffffffffffffffe)

[ 1956.072580][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.082373][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1956.092158][    C0] sd 0:0:1:0: [sg0] tag#5199 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
10:17:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r2)

10:17:31 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90)

[ 1956.260361][T32534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1956.373237][T23921] usb 2-1: Using ep0 maxpacket: 8
[ 1956.493383][T23921] usb 2-1: config 0 has an invalid interface number: 164 but max is 0
[ 1956.501675][T23921] usb 2-1: config 0 has no interface number 0
[ 1956.508463][T23921] usb 2-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1956.519715][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1956.531412][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1956.543053][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1956.554469][T23921] usb 2-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1956.568373][T23921] usb 2-1: config 0 interface 164 has no altsetting 0
[ 1956.663410][T23921] usb 2-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1956.672660][T23921] usb 2-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1956.681101][T23921] usb 2-1: Product: syz
[ 1956.686638][T23921] usb 2-1: config 0 descriptor??
[ 1956.843133][T23921] iforce 2-1:0.164: usb_submit_urb failed: -110
[ 1956.863176][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1956.883127][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1956.903268][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1956.923203][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1956.943633][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.103352][T23921] iforce 2-1:0.164: usb_submit_urb failed: -110
[ 1957.123523][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.143603][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.163503][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.169816][T23921] input input83: Limiting number of effects to 32 (device reports 232)
[ 1957.193208][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.213430][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.233429][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.253363][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1957.260890][T23921] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.164/input/input83
[ 1957.387516][T11978] usb 2-1: USB disconnect, device number 63
[ 1957.393625][    C0] iforce 2-1:0.164: iforce_usb_irq - usb_submit_urb failed with result -19
[ 1958.183178][T23921] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1958.423174][T23921] usb 2-1: Using ep0 maxpacket: 8
[ 1958.543269][T23921] usb 2-1: config 0 has an invalid interface number: 164 but max is 0
[ 1958.551780][T23921] usb 2-1: config 0 has no interface number 0
[ 1958.558247][T23921] usb 2-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30
[ 1958.569533][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1958.581007][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024
[ 1958.592550][T23921] usb 2-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1958.603966][T23921] usb 2-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35
[ 1958.617484][T23921] usb 2-1: config 0 interface 164 has no altsetting 0
[ 1958.703282][T23921] usb 2-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01
[ 1958.712491][T23921] usb 2-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0
[ 1958.721040][T23921] usb 2-1: Product: syz
[ 1958.726683][T23921] usb 2-1: config 0 descriptor??
[ 1958.883279][T23921] iforce 2-1:0.164: usb_submit_urb failed: -110
[ 1958.903193][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1958.923397][T23921] iforce 2-1:0.164: usb_submit_urb failed: -32
[ 1958.943544][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1958.963421][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1958.983320][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.003329][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.023276][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.043216][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.063184][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.083197][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.103172][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.123176][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.143296][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.163163][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.183181][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.203321][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.223254][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.243203][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.263181][T23921] iforce 2-1:0.164: usb_submit_urb failed: -71
[ 1959.269461][T23921] input input84: Timeout waiting for response from device.
[ 1959.281402][T23921] usb 2-1: USB disconnect, device number 64
10:17:37 executing program 4:
r0 = socket(0x40000000015, 0x5, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0)
poll(&(0x7f0000000480)=[{r1}], 0x1, 0x0)

10:17:37 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}], 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:17:37 executing program 3:
add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0xfffffffffffffffe)

10:17:37 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="da511d82144faaca414231354bdd0d748f0a1dd081d4afa96bef1ba72590cc145c9166d4c3b5b0f279326c35bd7360ef55979ce1b2c8452733f0486f754dce3c9f4707c5b355217669bcace6f1c873563042a66ddd98ba4c01591d8125de1d1c7e60b66d4f72d9c976ea84ccadf13f7bbf3ebb17c77f1a84a2bd1ddf2cf228f8c4d04b21bd1adcdd5d603ed620281953a5dabdc60b80dbed5eb2f5f6b6f544daf855173a31443e16efa417e70fafa91796e1f93cfd94d40bc671192611e29831e0bc5d9dd0024810"})

10:17:37 executing program 2:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0xd, &(0x7f00000001c0)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f427e00000000000000000002000000", 0x38}])

10:17:37 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x821, 0x0, 0x0, {0xa}, [@nested={0xc, 0x0, [@typed={0x8, 0xa, @ipv4=@multicast1}]}]}, 0x20}}, 0x0)

10:17:38 executing program 1:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x4, 0x200032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000013000)=0x191)

10:17:38 executing program 3:
add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0xfffffffffffffffe)

10:17:38 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000906090368fe07002b00000001000a0014000200450001070300001419001a001200000000000100"/57, 0x39}], 0x1)

10:17:38 executing program 2:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
set_mempolicy(0x4001, &(0x7f0000000100)=0x80000001, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

[ 1963.094343][T32577] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.5'.
10:17:38 executing program 3:
add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0xfffffffffffffffe)

10:17:38 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6a2f5d0023f47bb711c410379bfb36a3f6a3"], 0x0, 0x12}, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:17:44 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x5eb857)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
creat(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000040))
fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x0, 0x7, @rand_addr="2b0775416dc1f2d7bdc477a3fed7c0bd"}}}, 0x90)
syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0)

10:17:44 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1801fed9e7ff2420048ea908e", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1e0}}]}, 0x34}}, 0x0)

10:17:44 executing program 2:
unshare(0x20400)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(r0, 0x40046103, &(0x7f0000000540)={0x0, {0x2, 0x0, @broadcast}, {}, {0x2, 0x0, @broadcast}})

10:17:44 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)="fd"})

10:17:44 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb673afdbb990f785575192e2d0d83538c57b4f1a09301363a8520a54a95a0a13f4aea47f126d4a9e0a1e40656b37c0d183212629269c8c45420de69b142e25d2d06"])
r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1)

10:17:44 executing program 1:
r0 = socket$inet(0x2, 0x200000000003, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x19)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0x28a)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8)

[ 1969.324276][T32609] PKCS7: Unknown OID: [5] (bad)
[ 1969.329299][T32609] PKCS7: Only support pkcs7_signedData type
10:17:44 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60093a0600083a00fe8000000000000000000000000000bfff0200000000000000000000000000010000000000089078"], 0x0)

10:17:44 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, r1, 0x0)

10:17:44 executing program 2:
unshare(0x600)
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x3b65, 0x0)

10:17:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00\x02\x00\x1d\xff\xff\xfe\x00', 0x19, 0x1, 0x218, [0x20000440, 0x0, 0x0, 0x20000470, 0x20000628], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000500000000000000000065716c0000000002000000000000000000000000000000f9ff0000000000000065727370616e300000000000000000007465616d5f736c6176b1f83100000000aaaaaaaaaabb000000000000aaaaaaaaaaaa0000000000000000e00000005001000088010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000636f6e6e627974657300000000001badf12700000000000000000000000000001800000000000000000000000000000000e2ffffffffffff0200000000000000736e61740000000000000000000000000000000000000000000000000000000010000000000000000180c2000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000200000000000000000006172707265706c790000000000400000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x290)

10:17:44 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60093a0600083a00fe8000000000000000000000000000bfff0200000000000000000000000000010000000000089078"], 0x0)

10:17:44 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x3}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 1969.771582][T32630] xt_connbytes: cannot load conntrack support for proto=7
10:17:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x28}}, 0x0)

[ 1970.146625][T32647] Started in network mode
[ 1970.151083][T32647] Own node identity 2, cluster identity 1
[ 1970.157365][T32647] 32-bit node address hash set to 2
[ 1975.536167][T32653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
10:17:51 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x9)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1)
write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5)

10:17:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60093a0600083a00fe8000000000000000000000000000bfff0200000000000000000000000000010000000000089078"], 0x0)

10:17:51 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
sendfile(r0, r0, 0x0, 0x24000000)

10:17:51 executing program 3:
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

10:17:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x28}}, 0x0)

10:17:51 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xc9, 0xb1, 0xe2, 0x10, 0x2770, 0x930b, 0xb838, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0xb0, 0xa4, 0xe3}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001780)={0xac, &(0x7f00000011c0)={0x0, 0x0, 0x6, "0f4912ac89f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:17:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x28}}, 0x0)

10:17:51 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
setrlimit(0x7, &(0x7f0000a9cff8))
accept4(r0, 0x0, 0x0, 0x0)

10:17:51 executing program 1:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup2(r4, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:17:51 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60093a0600083a00fe8000000000000000000000000000bfff0200000000000000000000000000010000000000089078"], 0x0)

10:17:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x28}}, 0x0)

[ 1976.926266][T23921] usb 3-1: new high-speed USB device number 41 using dummy_hcd
10:17:52 executing program 5:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffffffffffffbc7000ffffffff0000fffc0c00000000000000000000015b659a62290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf501fb1bb949869c200f0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5000d"], 0x83}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x7, 0x0, "2b6a4b8ff6d9887f5a01f291a7c275509ef66639137dc37262c7a7463563aa66f3fa30d22184c3bd444069c018f8b769d5a2755cdcf68b55f18b5fe28e2600629f992aef924b7bb5c1a7b98865a02302"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)

[ 1977.173219][T23921] usb 3-1: Using ep0 maxpacket: 16
[ 1977.293339][T23921] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 1977.301492][T23921] usb 3-1: config 0 has no interface number 0
[ 1977.307928][T23921] usb 3-1: New USB device found, idVendor=2770, idProduct=930b, bcdDevice=b8.38
[ 1977.317311][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1977.327541][T23921] usb 3-1: config 0 descriptor??
[ 1977.378711][T23921] gspca_main: sq930x-2.14.0 probing 2770:930b
[ 1977.803208][T23921] gspca_sq930x: ucbus_write failed -71
[ 1977.808968][T23921] sq930x: probe of 3-1:0.69 failed with error -71
[ 1977.818537][T23921] usb 3-1: USB disconnect, device number 41
[ 1978.563075][T11978] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1978.813138][T11978] usb 3-1: Using ep0 maxpacket: 16
[ 1978.943283][T11978] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 1978.951569][T11978] usb 3-1: config 0 has no interface number 0
[ 1978.957997][T11978] usb 3-1: New USB device found, idVendor=2770, idProduct=930b, bcdDevice=b8.38
[ 1978.967179][T11978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1978.977236][T11978] usb 3-1: config 0 descriptor??
[ 1979.027944][T11978] gspca_main: sq930x-2.14.0 probing 2770:930b
[ 1979.233576][T11978] gspca_sq930x: reg_r 001f failed -71
[ 1979.239189][T11978] sq930x: probe of 3-1:0.69 failed with error -71
[ 1979.248722][T11978] usb 3-1: USB disconnect, device number 42
10:17:57 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000d0f000)={0xffffffffffffffff, &(0x7f0000999fe5)}, 0x16e)

10:17:57 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x9)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1)
write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5)

10:17:57 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x52b5, 0x0)
socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r2, &(0x7f0000000100), 0x8)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140))

10:17:57 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, &(0x7f0000001300), &(0x7f0000000100)=0x60)

10:17:57 executing program 1:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000080)="1b0000001e0025eaa87865f51ef6580a000000000000f20182ab00", 0x289)

10:17:57 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
dup2(r2, r0)
r3 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000700)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffffffffffff9b, 0x0, 0x0})

[ 1982.971572][T32704] debugfs: File '32703' in directory 'proc' already present!
10:17:58 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000004c0)={0x0, &(0x7f0000000480)})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004, 0x485})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000440))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1983.028244][T32704] binder_alloc: 32703: binder_alloc_buf, no vma
[ 1983.034931][T32704] binder: 32703:32704 ioctl c0306201 20000080 returned -14
10:17:58 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x52b5, 0x0)
socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r2, &(0x7f0000000100), 0x8)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140))

10:17:58 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x400)
ioctl$void(r0, 0x5451)

10:17:58 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0)

10:17:58 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0x8004510a, &(0x7f0000000000))

10:17:58 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x52b5, 0x0)
socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r2, &(0x7f0000000100), 0x8)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140))

10:17:58 executing program 0:
rt_sigaction(0x0, &(0x7f0000000280)={&(0x7f0000000200)="26640f71d21ac4c3f960d179c4c3056e55b800660f380ac2c4e2e12b8c08feefffff26d8c3c4c27d33dfd9f1c4c2fd206709676f", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32=0x0], @ANYRESHEX, @ANYRES64, @ANYRESHEX], 0x8eedf70e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read(r2, &(0x7f00000000c0)=""/19, 0x2b2)

10:18:04 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080))
dup3(r0, r1, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/107)

10:18:04 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x82)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
r5 = dup3(r2, r3, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x8080aea1, &(0x7f0000000140))
dup2(r5, r4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
dup3(r6, r7, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x8080aea1, &(0x7f0000000140))
dup2(0xffffffffffffffff, r8)
r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x210000, &(0x7f0000000280), 0x2, r9, 0x4})
pipe2(&(0x7f0000000140)={<r10=>0xffffffffffffffff}, 0x0)
ioctl$KVM_GET_CPUID2(r10, 0xc008ae91, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_PDEATHSIG(0x1, 0x0)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000040))
r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10:18:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)

10:18:04 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x9)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1)
write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5)

10:18:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000004c0)={0x0, &(0x7f0000000480)})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004, 0x485})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000440))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:18:04 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x52b5, 0x0)
socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0)
write$eventfd(r2, &(0x7f0000000100), 0x8)
mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140))

10:18:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)

10:18:04 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x40096101, &(0x7f0000000040))

10:18:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000004c0)={0x0, &(0x7f0000000480)})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004, 0x485})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000440))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1989.581402][  T302] QAT: Device 0 not found
[ 1989.612013][  T303] QAT: Device 0 not found
10:18:04 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x5111, 0x0)

10:18:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000004c0)={0x0, &(0x7f0000000480)})
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004, 0x485})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000440))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:18:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)

10:18:04 executing program 2:
r0 = socket$kcm(0x11, 0x100000000003, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc={0x27, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="9e4301003e00000000000000ac14", 0xe}], 0x1}, 0x0)

10:18:11 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000002c0)=0x9)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x200000d7}], 0x1)
write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5)

10:18:11 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0x1}, 0x3c)

10:18:11 executing program 0:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a075f1dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

10:18:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)

10:18:11 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4)
setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
close(r0)

10:18:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0)
read(r0, &(0x7f0000000240)=""/244, 0xf4)

10:18:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000068020000000000000400000080"])

10:18:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0)
read(r0, &(0x7f0000000240)=""/244, 0xf4)

10:18:11 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='c', 0x300, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0)

10:18:11 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000000)="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", 0xfc)

10:18:11 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002e80)=[{&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x2, 0x0)

10:18:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0)
ioctl$BLKROGET(r1, 0x80041285, &(0x7f00000000c0))

10:18:18 executing program 5:
unshare(0x2000400)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x200400, 0x0)
inotify_add_watch(r0, 0x0, 0x80000000)

10:18:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0)
read(r0, &(0x7f0000000240)=""/244, 0xf4)

10:18:18 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82, 0x0)
write$FUSE_INTERRUPT(r0, 0x0, 0x0)

10:18:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012001000010069703665727370616e0000002000020008001700000000000400120008001600020000000800180082550000"], 0x54}}, 0x0)

10:18:18 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x14)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10:18:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa1)

10:18:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0)
read(r0, &(0x7f0000000240)=""/244, 0xf4)

10:18:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x1174f40bcd53118f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x1174f40bcd53118f})

10:18:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000002400010f00"/20, @ANYRES32=r3, @ANYBLOB="00000000fffffffff2ffff00060005004000000014000100706669666f5f686561645f64726f70004aff020000000000"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)

10:18:18 executing program 3:
r0 = socket(0x1e, 0x2, 0x0)
bind(r0, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000004000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80)

10:18:18 executing program 5:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2)
close(r0)
timerfd_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)

10:18:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x2, 0x3, 0x19)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r2 = socket$inet(0x2, 0x3, 0x19)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8)
setsockopt$sock_int(r1, 0x1, 0x34, &(0x7f0000000140), 0x523e12c16d5c9f3e)

10:18:19 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x5, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c)

[ 2004.106646][  T408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
10:18:19 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b5080da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bcb860d6a0b61193d4a1cb622431d42fee5e9153", 0xa6}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 2004.151314][  T408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2004.184293][  T416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
10:18:19 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0)
unshare(0x24020400)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

[ 2004.218618][  T416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
10:18:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0045520, 0x717000)

10:18:26 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x26, 0xab, 0xd4, 0x8, 0xdbe4, 0x5dc1, 0x1486, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0xef, 0x1, 0x1}}]}}]}}, 0x0)

10:18:26 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1}, 0x0)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0xf9, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0)

10:18:26 executing program 4:
clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000040))
ptrace(0x10, r0)
ptrace$setopts(0x4200, r0, 0x0, 0x300022)

10:18:26 executing program 5:
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="30580201f10cb8b56c96d27c44d58e94ea51a7dfc5b792e80d948239b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697863e6ebd80f75ca00"/90, 0x5a, 0xfffffffffffffffd)

10:18:26 executing program 0:
unshare(0x400)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200400, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x20000000, 0x3, 0x2})

[ 2011.019649][  T442] PKCS8: Unsupported PKCS#8 version
10:18:26 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

[ 2011.061050][  T442] PKCS8: Unsupported PKCS#8 version
10:18:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071108000000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:18:26 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x1, 0x0, @buffer={0xee, 0x0, 0x0}, &(0x7f0000000040)="fa", 0x0, 0x0, 0x4, 0x0, 0x0})

10:18:26 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000080)=0x100, 0x4)

[ 2011.253165][T11978] usb 4-1: new high-speed USB device number 98 using dummy_hcd
10:18:26 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071108000000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:18:26 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit(0x0)
dup2(r0, r1)

[ 2011.505183][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2011.623416][T11978] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 2011.631720][T11978] usb 4-1: config 0 has no interface number 0
[ 2011.638147][T11978] usb 4-1: New USB device found, idVendor=dbe4, idProduct=5dc1, bcdDevice=14.86
[ 2011.648322][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2011.658282][T11978] usb 4-1: config 0 descriptor??
[ 2011.709845][T11978] usb 4-1: bad CDC descriptors
[ 2011.717332][T11978] usb 4-1: bad CDC descriptors
[ 2011.906316][T11978] usb 4-1: USB disconnect, device number 98
[ 2012.683181][T11978] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2012.923227][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2013.043321][T11978] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[ 2013.051707][T11978] usb 4-1: config 0 has no interface number 0
[ 2013.058170][T11978] usb 4-1: New USB device found, idVendor=dbe4, idProduct=5dc1, bcdDevice=14.86
[ 2013.067386][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2013.077139][T11978] usb 4-1: config 0 descriptor??
[ 2013.116270][T11978] usb 4-1: bad CDC descriptors
[ 2013.122745][T11978] usb 4-1: bad CDC descriptors
[ 2013.316723][T11978] usb 4-1: USB disconnect, device number 99
10:18:33 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x45, 0xad, 0x8b, 0x8, 0x1631, 0x6200, 0x3950, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0x0, 0x0, 0x8d, 0x7d, 0x32}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

10:18:33 executing program 5:
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x200000)
fsync(r0)

10:18:33 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

10:18:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500810000001f004203000008000800170006e7fe7e280000001100fffdba16a0aa1c0900000000000012000000000000eff24d8238cfa40e000000bf54", 0x4c}], 0x1}, 0x0)

10:18:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071108000000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:18:33 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

[ 2018.349831][  T485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
10:18:33 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071108000000000009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48)

10:18:33 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0xf0c887bdf013d536, 0x0)

10:18:33 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
sendfile(r0, r0, 0x0, 0x100)
sendfile(r0, r0, &(0x7f0000000140), 0x800000002)

10:18:33 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4)

10:18:33 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940}, 0x20)

10:18:33 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
ioctl(r0, 0x2040084149, 0x0)

10:18:40 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4)

10:18:40 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
openat$cgroup_type(r1, 0x0, 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'cpu'}]}, 0x11)
write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
openat$cgroup_procs(r1, 0x0, 0x2, 0x0)

10:18:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$inet_mreq(r2, 0x0, 0x2, &(0x7f0000000000)={@multicast2}, 0x8)

10:18:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\t\xac\x0f\x00'}]}, 0x269}}, 0x0)

10:18:40 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

10:18:40 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x43e)
write$binfmt_script(r0, &(0x7f0000000dc0)={'#! ', './file0'}, 0x7d)
close(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000e00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000180)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'])

10:18:40 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4)

10:18:40 executing program 0:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x200)
listen(r0, 0x10001)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
close(r0)

10:18:40 executing program 2:
r0 = socket(0x100000400000010, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r0, &(0x7f0000000280)="240000004e001f0014f9f4070109040002600710080001000100000008009437c56e0000", 0x307)

10:18:41 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

10:18:41 executing program 3:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$bt_hci(r0, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4)

10:18:41 executing program 0:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f00000024c0)=@hci, 0x7fffef80, &(0x7f0000002980), 0x0, &(0x7f0000002a00)}}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f0000004840), 0x1f3, &(0x7f00000048c0)}}], 0x2, 0x0)
sendmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}}], 0x306, 0xc0)

10:18:41 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x7, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_dev$mouse(0x0, 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x200004)
sendfile(r0, r1, 0x0, 0x80001d00c0d0)

10:18:47 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/239)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
r3 = dup2(r2, r2)
ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/239)

10:18:47 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000003c0)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @link_local, 'syz_tun\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="2465c0e574ab", 'veth0_to_team\x00'}}, 0x1e)

10:18:47 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

10:18:47 executing program 3:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

10:18:47 executing program 0:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xa})

10:18:47 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0xffff}, &(0x7f0000000080)=0x8)

10:18:47 executing program 1:
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

10:18:47 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)

10:18:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:18:47 executing program 3:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000})

10:18:47 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

10:18:47 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x0, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
close(r3)

10:18:54 executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0xe4, 0x78, 0x40, 0x2357, 0x107, 0xe68d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001800)={0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100000000324d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:18:54 executing program 5:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2)

10:18:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000100)={'bridge_slave_1\x00'})
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb)

10:18:54 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7, 0x200, 0x6, 0x7, 0x0, 0x7}}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @loopback}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getpeername$packet(r3, 0x0, &(0x7f00000008c0))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000680)=""/116, &(0x7f0000000700)=0x74)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10:18:54 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c)

10:18:54 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc001102c], [0xc1]})

10:18:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet6(0xa, 0x803, 0x1)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000006300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0)

10:18:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0xc520252f5c136887, 0x0, 0x0, {{}, 0x0, 0x800b, 0x0, {0x8}}}, 0x24}}, 0x0)

10:18:54 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="000040000000fbdbdf250f000000080002000400040008000600040002001c000200080001000000000004000400080002000000000004000400700004000c00070008000300000000003c00070008000400040000000000010000000000080001000033240008000100000000000800010004000000080002000000000008000400040000000c00010073797a31000000000c00210073797a30000000000c00010073797a3000000000280007000c00030000000000000000000c002d017ffd554182525b1b040000000000000000000c08"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x10d002)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440))
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000006c0)={0x3, &(0x7f00000002c0)=[{}, {}, {}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:18:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000100)={'bridge_slave_1\x00'})
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb)

10:18:54 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x15000000000000, 0x485, 0x0, 0x0)

10:18:54 executing program 5:
r0 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$sock_timeval(r0, 0x1, 0x28, &(0x7f0000000000)={0x0, 0x2710}, 0x10)

10:19:01 executing program 4:
r0 = socket$packet(0x11, 0x1000000000002, 0x300)
syz_emit_ethernet(0xffb6, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffff63fffffffffdffffff004500fec30000000000009078ac14ffbbe000000100000000ca880478"], 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

10:19:01 executing program 3:
r0 = eventfd(0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000080))

10:19:01 executing program 2:
clone(0x1000000000011, &(0x7f0000000140), 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
waitid(0x0, 0x0, 0x0, 0x420000004, 0x0)

10:19:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000100)={'bridge_slave_1\x00'})
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb)

10:19:01 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x5}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:19:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1001})

10:19:01 executing program 3:
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0)
readv(r0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/67, 0x43}], 0x1)

[ 2046.674807][  T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
10:19:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x23, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = dup2(r0, r2)
dup3(r5, r1, 0x0)

10:19:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlink(0x0, 0x0)
syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000100)={'bridge_slave_1\x00'})
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\x00'}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb)

[ 2046.947874][  T682] debugfs: Directory '682-4' with parent 'kvm' already present!
10:19:02 executing program 2:
r0 = memfd_create(&(0x7f0000000140)='\x00', 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x5011, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00')

10:19:02 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000003, 0x1, 0xc0010000], [0xc1]})

10:19:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x82b}, 0x1c}}, 0x0)

[ 2047.248237][  T712] kvm [709]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 2047.264303][  T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2051.853381][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2051.859462][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2051.863645][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2051.871285][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2051.933313][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2051.939700][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2051.945979][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2051.952030][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2051.958247][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2051.964387][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:19:08 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f000087d000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, "d858834181332e435893f760968f541b42c41d09f53229e1f8000000000000aa85a715229c059f60f5165acb313a01cea64458f71aa48ae177e2e4fc748f1a5499840c5abde9e600"}, 0x286)

10:19:08 executing program 1:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0})

10:19:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @local}})

10:19:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000003, 0x1, 0xc0010000], [0xc1]})

10:19:08 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000480)=0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000500)=""/72, 0x48}], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000680)={0x50, 0xc1dd1f079e48b80e, 0x7, {0x7, 0x1f, 0x1, 0x8a3200, 0x0, 0x63bf, 0x0, 0x7ff}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:19:08 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, 0xce)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

10:19:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0})
recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001700)=""/253, 0xfd}], 0x1, &(0x7f0000001940)=""/234, 0xf}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
close(r1)
close(r2)

[ 2053.912542][  T735] kvm [726]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
10:19:09 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20)

10:19:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000003, 0x1, 0xc0010000], [0xc1]})

10:19:09 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eb0800180001ac0f000586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0)

[ 2054.133549][  T742] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2054.143396][T23921] usb 2-1: new high-speed USB device number 65 using dummy_hcd
10:19:09 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00')
sendfile(r1, r2, 0x0, 0x40)

10:19:09 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000480)=0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000500)=""/72, 0x48}], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000680)={0x50, 0xc1dd1f079e48b80e, 0x7, {0x7, 0x1f, 0x1, 0x8a3200, 0x0, 0x63bf, 0x0, 0x7ff}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2054.247517][  T750] kvm [748]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
[ 2054.277083][  T752] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.3'.
10:19:09 executing program 2:
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)

[ 2054.513336][T23921] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac
[ 2054.522514][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2054.551176][T23921] usb 2-1: config 0 descriptor??
[ 2054.622390][T23921] pwc: Samsung MPC-C10 USB webcam detected.
[ 2055.703179][T23921] pwc: recv_control_msg error -71 req 02 val 2c00
[ 2055.723638][T23921] pwc: recv_control_msg error -71 req 04 val 1000
[ 2055.743196][T23921] pwc: recv_control_msg error -71 req 04 val 1300
[ 2055.763216][T23921] pwc: recv_control_msg error -71 req 04 val 1400
[ 2055.783199][T23921] pwc: recv_control_msg error -71 req 02 val 2000
[ 2055.803376][T23921] pwc: recv_control_msg error -71 req 02 val 2100
[ 2055.823355][T23921] pwc: recv_control_msg error -71 req 02 val 2200
[ 2055.843383][T23921] pwc: recv_control_msg error -71 req 06 val 0600
[ 2055.864308][T23921] pwc: recv_control_msg error -71 req 04 val 1500
[ 2055.883260][T23921] pwc: recv_control_msg error -71 req 02 val 2500
[ 2055.903483][T23921] pwc: recv_control_msg error -71 req 02 val 2400
[ 2055.923363][T23921] pwc: recv_control_msg error -71 req 02 val 2600
[ 2055.945178][T23921] pwc: recv_control_msg error -71 req 02 val 2900
[ 2055.963431][T23921] pwc: recv_control_msg error -71 req 02 val 2800
[ 2055.983357][T23921] pwc: recv_control_msg error -71 req 04 val 1100
[ 2056.003389][T23921] pwc: recv_control_msg error -71 req 04 val 1200
[ 2056.010980][T23921] pwc: Registered as video39.
[ 2056.018474][T23921] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85
[ 2056.054046][T23921] usb 2-1: USB disconnect, device number 65
[ 2056.542995][T23921] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 2056.903224][T23921] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac
[ 2056.912583][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2056.922174][T23921] usb 2-1: config 0 descriptor??
[ 2056.967994][T23921] pwc: Samsung MPC-C10 USB webcam detected.
[ 2057.213468][T23921] pwc: recv_control_msg error -71 req 02 val 2b00
[ 2057.233305][T23921] pwc: recv_control_msg error -71 req 02 val 2700
[ 2057.253310][T23921] pwc: recv_control_msg error -71 req 04 val 1700
[ 2057.273290][T23921] pwc: recv_control_msg error -71 req 02 val 2c00
[ 2057.293284][T23921] pwc: recv_control_msg error -71 req 04 val 1000
[ 2057.313267][T23921] pwc: recv_control_msg error -71 req 04 val 1300
[ 2057.333374][T23921] pwc: recv_control_msg error -71 req 04 val 1400
[ 2057.353319][T23921] pwc: recv_control_msg error -71 req 02 val 2000
[ 2057.373558][T23921] pwc: recv_control_msg error -71 req 02 val 2100
[ 2057.393335][T23921] pwc: recv_control_msg error -71 req 02 val 2200
[ 2057.413412][T23921] pwc: recv_control_msg error -71 req 06 val 0600
[ 2057.433286][T23921] pwc: recv_control_msg error -71 req 04 val 1500
[ 2057.453260][T23921] pwc: recv_control_msg error -71 req 02 val 2500
[ 2057.473268][T23921] pwc: recv_control_msg error -71 req 02 val 2400
[ 2057.493312][T23921] pwc: recv_control_msg error -71 req 02 val 2600
[ 2057.513296][T23921] pwc: recv_control_msg error -71 req 02 val 2900
[ 2057.533396][T23921] pwc: recv_control_msg error -71 req 02 val 2800
[ 2057.553240][T23921] pwc: recv_control_msg error -71 req 04 val 1100
[ 2057.573089][T23921] pwc: recv_control_msg error -71 req 04 val 1200
[ 2057.580549][T23921] pwc: Registered as video39.
[ 2057.586883][T23921] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86
[ 2057.602426][T23921] usb 2-1: USB disconnect, device number 66
10:19:15 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendto(r0, &(0x7f0000002140)="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"/4167, 0x2183ee183e8cb18a, 0x404c0f1, 0x0, 0xffffffffffffffcf)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)

10:19:15 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000003, 0x1, 0xc0010000], [0xc1]})

10:19:15 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0x81, 0x57, 0x40, 0x1b80, 0xe755, 0x1e97, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x1, 0x1b, 0xd5, 0xc6, 0x0, [], [{{0x7, 0x5, 0x83, 0xe0d5d1e99ce80e0d}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002540)={0x2c, &(0x7f0000002300)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0})

10:19:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [], [{0xffffffff}]})
io_setup(0x14, &(0x7f0000000100)=<r1=>0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000005, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001})
io_submit(r1, 0x8, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000080), 0xa}])

10:19:15 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000480)=0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000500)=""/72, 0x48}], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000680)={0x50, 0xc1dd1f079e48b80e, 0x7, {0x7, 0x1f, 0x1, 0x8a3200, 0x0, 0x63bf, 0x0, 0x7ff}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:19:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x10000000004)
write(r0, &(0x7f0000000140)="2700000014000707030e0000120f0a0010000100f5ef7936c373c02acaaac3e8010822829dfe00", 0x27)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x9, 0x2)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0xfffffffffffffffd}}, 0xf230114a63db806f)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="920303000000a2", 0x7}], 0x1)

[ 2060.202413][  T789] kvm [787]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
10:19:15 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x2711, 0x0, &(0x7f000033bffc))

10:19:15 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5)
add_key$keyring(&(0x7f0000000700)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x0, 0x0)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000480)=0x800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000500)=""/72, 0x48}], 0x1, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000680)={0x50, 0xc1dd1f079e48b80e, 0x7, {0x7, 0x1f, 0x1, 0x8a3200, 0x0, 0x63bf, 0x0, 0x7ff}}, 0x50)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:19:15 executing program 5:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x74, 0x1a, 0xde, 0x8, 0x586, 0x341f, 0xe797, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x8a}}]}}]}}]}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x2ba, &(0x7f0000000400)=[@assoc={0x18}], 0x18}], 0x49249249249272b, 0x0)

10:19:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x30d, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x0)

[ 2060.435130][T11896] usb 4-1: new high-speed USB device number 100 using dummy_hcd
10:19:15 executing program 1:
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
write(r0, &(0x7f0000000040)="2400000021002551075c0165ff0ffc020200000500100f0007e1000c0800180000000000", 0x24)

10:19:15 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045113, &(0x7f0000000000))

[ 2060.753079][T28493] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 2060.803409][T11896] usb 4-1: config 0 has an invalid interface number: 97 but max is 0
[ 2060.811575][T11896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2060.823011][T11896] usb 4-1: config 0 has no interface number 0
[ 2060.829468][T11896] usb 4-1: config 0 interface 97 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2060.840954][T11896] usb 4-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=1e.97
[ 2060.850303][T11896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2060.860587][T11896] usb 4-1: config 0 descriptor??
[ 2060.908414][T11896] em28xx 4-1:0.97: New device   @ 480 Mbps (1b80:e755, interface 97, class 97)
[ 2060.918346][T11896] em28xx 4-1:0.97: Audio interface 97 found (Vendor Class)
[ 2061.013077][T28493] usb 6-1: Using ep0 maxpacket: 8
[ 2061.133359][T28493] usb 6-1: New USB device found, idVendor=0586, idProduct=341f, bcdDevice=e7.97
[ 2061.142857][T28493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2061.152440][T28493] usb 6-1: config 0 descriptor??
[ 2061.163554][T11896] em28xx 4-1:0.97: unknown em28xx chip ID (0)
[ 2061.226212][T11896] em28xx 4-1:0.97: Config register raw data: 0xf1
[ 2061.232746][T11896] em28xx 4-1:0.97: I2S Audio (3 sample rate(s))
[ 2061.239217][T11896] em28xx 4-1:0.97: No AC97 audio processor
[ 2061.428511][T11896] usb 4-1: USB disconnect, device number 100
[ 2061.583359][T28493] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0
[ 2061.592113][T28493] rtl8192cu: Chip version 0x10
[ 2061.793233][T28493] rtl_usb: No output end points found
[ 2061.799006][T28493] usb 6-1: This Realtek USB WiFi dongle (0x0586:0x341f) is untested!
[ 2061.807440][T28493] usb 6-1: Please report results to Jes.Sorensen@gmail.com
[ 2061.873211][T28493] usb 6-1: Unsupported USB TX end-points
[ 2061.878970][T28493] usb 6-1: Fatal - failed to identify chip
[ 2061.885542][T28493] rtl8xxxu: probe of 6-1:0.0 failed with error -524
[ 2061.903942][T28493] usb 6-1: USB disconnect, device number 75
[ 2062.193234][T11896] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2062.263046][T28493] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 2062.503043][T28493] usb 6-1: Using ep0 maxpacket: 8
[ 2062.563328][T11896] usb 4-1: config 0 has an invalid interface number: 97 but max is 0
[ 2062.571531][T11896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2062.581803][T11896] usb 4-1: config 0 has no interface number 0
[ 2062.588068][T11896] usb 4-1: config 0 interface 97 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2062.599272][T11896] usb 4-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=1e.97
[ 2062.608591][T11896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.618455][T11896] usb 4-1: config 0 descriptor??
[ 2062.623566][T28493] usb 6-1: New USB device found, idVendor=0586, idProduct=341f, bcdDevice=e7.97
[ 2062.623649][T28493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2062.643432][T28493] usb 6-1: config 0 descriptor??
[ 2062.668744][T11896] em28xx 4-1:0.97: New device   @ 480 Mbps (1b80:e755, interface 97, class 97)
[ 2062.678278][T11896] em28xx 4-1:0.97: Audio interface 97 found (Vendor Class)
[ 2062.943473][T11896] em28xx 4-1:0.97: unknown em28xx chip ID (0)
[ 2062.983467][T11896] em28xx 4-1:0.97: Config register raw data: 0xf1
[ 2062.990203][T11896] em28xx 4-1:0.97: I2S Audio (3 sample rate(s))
[ 2062.996687][T11896] em28xx 4-1:0.97: No AC97 audio processor
[ 2063.103222][T28493] rtl8192cu: Chip version 0x10
[ 2063.147480][T11978] usb 4-1: USB disconnect, device number 101
[ 2063.333423][T28493] rtl_usb: No output end points found
[ 2063.339242][T28493] usb 6-1: This Realtek USB WiFi dongle (0x0586:0x341f) is untested!
[ 2063.347627][T28493] usb 6-1: Please report results to Jes.Sorensen@gmail.com
[ 2063.413454][T28493] usb 6-1: Unsupported USB TX end-points
[ 2063.419269][T28493] usb 6-1: Fatal - failed to identify chip
[ 2063.426087][T28493] rtl8xxxu: probe of 6-1:0.0 failed with error -524
[ 2063.438533][T28493] usb 6-1: USB disconnect, device number 76
10:19:24 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8)

10:19:24 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07681dfffd946fa2830020200a0009007100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

10:19:24 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendto(r0, &(0x7f0000002140)="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"/4167, 0x2183ee183e8cb18a, 0x404c0f1, 0x0, 0xffffffffffffffcf)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)

10:19:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb6}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:19:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, {0x0, 0x3ff, 0x7, 0x4, 0x1, 0x1, 0x0, 0x0, 0x2, 0xfffd, 0x5, 0x1, 0x0, 0x0, "d0a44ae9d50202523de23acfe28759f8930ccbeaab9786a8a971db1ed0cf088c"}})

10:19:24 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x29)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = socket$unix(0x1, 0x2, 0x0)
close(r0)
connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0)
sendmmsg(r2, &(0x7f0000000040), 0x13, 0x0)

10:19:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xd, 0x4)

10:19:24 executing program 0:
capset(&(0x7f0000000180)={0x400019980330}, &(0x7f0000000200))
r0 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, 0x0)

10:19:24 executing program 1:
set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

10:19:24 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x180)

10:19:25 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(r0, &(0x7f0000000580)="240000001e001f0214f9f4ff080000000000000000000000000000000400000000000000", 0x24)

10:19:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x2, [{0xcd}]})

10:19:25 executing program 2:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, [0xe]})

[ 2070.160886][  T855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
10:19:25 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB='^'], 0x2}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2070.430937][  T869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
10:19:33 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendto(r0, &(0x7f0000002140)="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"/4167, 0x2183ee183e8cb18a, 0x404c0f1, 0x0, 0xffffffffffffffcf)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)

10:19:33 executing program 1:
set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

10:19:33 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x272, 0x0, 0x30}, 0x98)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0xfc, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)

10:19:33 executing program 2:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, [0xe]})

10:19:33 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x49, 0x1}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @fwd={0x8}]}, {0x0, [0x0, 0xbe]}}, &(0x7f00000000c0), 0x44}, 0x20)
stat(&(0x7f0000000240)='./file0\x00', 0x0)
getegid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(0xffffffffffffffff)
getgid()
lsetxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500))
getgid()
getgid()
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0)

10:19:33 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x229}}], 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00')
preadv(r0, &(0x7f00000017c0), 0x20b, 0x0)

10:19:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@flushpolicy={0x38, 0x12, 0x4e326d0846e0c13d, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in6=@dev, @in=@empty}}]}, 0x38}, 0x8}, 0x0)

10:19:33 executing program 1:
set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

10:19:33 executing program 2:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, [0xe]})

10:19:33 executing program 0:
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2d, 0x2e, 0x70, 0x40, 0x1397, 0xbd, 0xa8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x20, 0xee, 0xc7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0)

10:19:33 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x2c3, 0x0)

10:19:33 executing program 3:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00\xc6c\x89\xf2\xa6\x9c\xb1\xc9\x01\xe9\x95\xfa\xe8\x00\f\xe8\x95\x01\xde\xb2\x10r9`:\xc9e\x9a\xc0q\xc8a\xeb\n#\xfcY\xaf\"c\x82\x04\x00\x00\x001!\xb4\x8dY\x9d\xa3\x00\xf5\xedA0\x94')
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sendfile(r4, r3, 0x0, 0x8001)

[ 2078.743235][T23921] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2079.103139][T23921] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2079.114055][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11
[ 2079.125425][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024
[ 2079.136953][T23921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2079.150049][T23921] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.8f
[ 2079.159285][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2079.168863][T23921] usb 1-1: config 0 descriptor??
[ 2079.219089][T23921] usb 1-1: invalid MIDI EP
[ 2079.223858][T23921] usb 1-1: snd-bcd2000: error during probing
[ 2079.230723][T23921] snd-bcd2000: probe of 1-1:0.0 failed with error -22
[ 2079.416751][T23921] usb 1-1: USB disconnect, device number 63
[ 2080.193032][T23921] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 2080.563338][T23921] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2080.574140][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11
[ 2080.585508][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 1024
[ 2080.596766][T23921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2080.610400][T23921] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= a.8f
[ 2080.619782][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2080.629617][T23921] usb 1-1: config 0 descriptor??
[ 2080.678967][T23921] usb 1-1: invalid MIDI EP
[ 2080.683654][T23921] usb 1-1: snd-bcd2000: error during probing
[ 2080.690486][T23921] snd-bcd2000: probe of 1-1:0.0 failed with error -22
[ 2080.875272][T23921] usb 1-1: USB disconnect, device number 64
10:19:38 executing program 1:
set_mempolicy(0x4003, &(0x7f0000000040)=0x10003, 0x101)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x23, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

10:19:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x14, 0x2, [@tunl6_policy=[@IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}]]}}}]}, 0x44}}, 0x0)

10:19:38 executing program 2:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, [0xe]})

10:19:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0xc4}}, 0x0)

10:19:38 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
sendto(r0, &(0x7f0000002140)="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"/4167, 0x2183ee183e8cb18a, 0x404c0f1, 0x0, 0xffffffffffffffcf)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10)

10:19:38 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c)
sendfile(r1, r0, 0x0, 0x81)

[ 2083.321806][  T942] netlink: 'syz-executor.3': attribute type 31 has an invalid length.
[ 2083.339229][  T941] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
10:19:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0xc4}}, 0x0)

10:19:38 executing program 0:
unshare(0x2000400)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

10:19:38 executing program 2:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000c3f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000401000/0x3000)=nil, 0x2)

[ 2083.592483][  T949] netlink: 'syz-executor.3': attribute type 31 has an invalid length.
10:19:38 executing program 2:
unshare(0x400)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x5)

10:19:38 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffff6}, 0x48)

10:19:38 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0xc4}}, 0x0)

[ 2083.897842][  T966] netlink: 'syz-executor.3': attribute type 31 has an invalid length.
10:19:44 executing program 2:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x16, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00')
preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff)

10:19:44 executing program 0:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x9909cb, 0x3})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
dup3(r1, r0, 0x0)

10:19:44 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010000000000000000f5fe010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001f000800080000000000"], 0xc4}}, 0x0)

10:19:44 executing program 1:
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000043d2e740085d2c1300000000000109022b000100000000090480000130021c00090400000000000000080b63eb71f17571080b7e037def49aedf2728"], 0x0)

10:19:44 executing program 5:
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@nfc={0x27, 0xa, 0x0, 0x6}, 0x80, 0x0}, 0x0)

10:19:44 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0)

[ 2089.612428][  T981] netlink: 'syz-executor.3': attribute type 31 has an invalid length.
10:19:44 executing program 3:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

10:19:44 executing program 0:
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
readahead(r0, 0x0, 0x0)

10:19:44 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:19:44 executing program 3:
unshare(0x400)
r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x0)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa2}}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)

10:19:44 executing program 2:
open_tree(0xffffffffffffffff, 0x0, 0x0)

10:19:45 executing program 0:
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0xd78}, {0x4}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x72f2}], 0x1)

[ 2089.943772][T28493] usb 2-1: new high-speed USB device number 67 using dummy_hcd
10:19:45 executing program 5:
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@lsrr={0x83, 0xb, 0x9680, [@multicast1, @dev]}, @rr={0x7, 0x2}]}}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0)

10:19:45 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x1d5, 0x20000800, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040)="2fa99586fe26d821c6b86782544e6cdef3d5b8471b74bee0ddccd5bcdf012c3bb8a28e459f05b13d3bebf0f8a3b15682ac09", 0x32, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1)

10:19:45 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00')
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHF\xd7\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247)
sendfile(r1, r0, 0x0, 0x1f7)

[ 2090.182625][    C0] net_ratelimit: 2 callbacks suppressed
[ 2090.182662][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 2090.323642][T28493] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 2090.332076][T28493] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 2090.341431][T28493] usb 2-1: config 0 has no interface number 1
[ 2090.347732][T28493] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2090.361115][T28493] usb 2-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00
[ 2090.370329][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2090.415968][T28493] usb 2-1: config 0 descriptor??
[ 2090.421137][T28493] usb 2-1: Interface #128 referenced by multiple IADs
[ 2090.689283][T28493] usb 2-1: USB disconnect, device number 67
[ 2091.473012][T23921] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 2091.833222][T23921] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 2091.841499][T23921] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 2091.850911][T23921] usb 2-1: config 0 has no interface number 1
[ 2091.857227][T23921] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2091.870588][T23921] usb 2-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00
[ 2091.879823][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2091.889673][T23921] usb 2-1: config 0 descriptor??
[ 2091.894989][T23921] usb 2-1: Interface #128 referenced by multiple IADs
[ 2092.151911][T23921] usb 2-1: USB disconnect, device number 68
10:19:47 executing program 0:
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0xd78}, {0x4}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x72f2}], 0x1)

10:19:47 executing program 5:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x1ff)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x10d, 0x34000}], 0x10}}], 0x2, 0x0)

10:19:54 executing program 2:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980001})

10:19:54 executing program 3:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000290000003e000000070000000000000088000000000000002900000004000000000e000000000000000100c20400000005040103c20400003f0305020001c2040000010001020000040100fb4b63a7051ea8044768c1f4f7186182d0615a61249593db54cc7ce9bfc638a5bc0707962b9f22f9b0233e426e18da9da72ce57c9890ac368cf4f9ccd48bc2c054c72ee873f63776864b461fec2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32], 0xc4}}], 0x1, 0x0)

10:19:54 executing program 1:
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000043d2e740085d2c1300000000000109022b000100000000090480000130021c00090400000000000000080b63eb71f17571080b7e037def49aedf2728"], 0x0)

10:19:54 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x53, 0x0, 0xbb, 0x8, 0x6f8, 0x3003, 0x256f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0xe, 0x9a, 0x39}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x1, "03"}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x0, 0xc1, {0xc1, 0x0, "50203fce697abec6d89242fea342a0157cfc57560bd2359b2ae126cb415422337446c994efdcdfc7815e29d3f8af76fa65c92be580f09597b544467105fd0b3ce0681e97fba912e85a87cb4dcd0f2758328d68bf23e4fb7481a89e4f91f9810271abd877e38fc31cab53bab057b3bf84712cac9a4405fa10e1cb55cb363874de5e121569f4e7778e95075bbc2f3a5063ce417ff889f27168232fa6a0dd0bd55dfff9b35d2bf8bbc10029134cb03cc35c687774f04147d1cfb5831386499222"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:19:54 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0)

10:19:54 executing program 0:
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0xd78}, {0x4}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x72f2}], 0x1)

10:19:54 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10981, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpgid(0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r5, r6}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000)
r7 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2}, 0x1c2)
r8 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x0)
sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0)
r10 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_QUERYSTD(r10, 0x8008563f, &(0x7f0000000000)=<r11=>0x0)
ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000300)=r11)
ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000140)=r11)
read$eventfd(r0, 0x0, 0x0)

10:19:54 executing program 0:
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{0x4, 0xd78}, {0x4}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x4, 0x72f2}], 0x1)

10:19:54 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket(0x11, 0x2, 0x0)
setsockopt(r1, 0x107, 0x2000000000001, &(0x7f0000d52ff0)="0f0000000100000000000000000001cc", 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

[ 2099.317373][ T1063] device bond0 entered promiscuous mode
[ 2099.323273][ T1063] device bond_slave_0 entered promiscuous mode
[ 2099.329848][ T1063] device bond_slave_1 entered promiscuous mode
[ 2099.341847][ T1063] netlink: 'syz-executor.3': attribute type 6 has an invalid length.
[ 2099.352747][ T1062] device bond0 left promiscuous mode
[ 2099.359163][ T1062] device bond_slave_0 left promiscuous mode
[ 2099.365599][ T1062] device bond_slave_1 left promiscuous mode
10:19:54 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0x98}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x80ffff]}, 0x48)

[ 2099.395839][ T1063] device bond0 entered promiscuous mode
[ 2099.401543][ T1063] device bond_slave_0 entered promiscuous mode
[ 2099.405672][T23921] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 2099.408288][ T1063] device bond_slave_1 entered promiscuous mode
[ 2099.423485][ T1062] device bond0 left promiscuous mode
[ 2099.429019][ T1062] device bond_slave_0 left promiscuous mode
[ 2099.435424][ T1062] device bond_slave_1 left promiscuous mode
[ 2099.453921][T28493] usb 2-1: new high-speed USB device number 69 using dummy_hcd
10:19:54 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0xdb, 0x0, 0xffffffffffffffff, 0x0, [0x15f], 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x3c)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")

10:19:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4000000000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd0000001000010006030800fcff0000040e05a5", 0x58}], 0x1)

[ 2099.656764][T23921] usb 6-1: Using ep0 maxpacket: 8
10:19:54 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='io.stat\x00\xcf,\x96\xcb\xee\xc7\xacVC\x15\xb9\xf6\x9eK>\f\xfc\xbe\xaa\x00\x84\x0fV9\xaa\xcb\x162\xaf\x00\x00\xfc', 0x0, 0x0)
r2 = socket$inet(0x2b, 0x1, 0x0)
unshare(0x20400)
poll(&(0x7f0000000000)=[{r2}, {r1}], 0x2, 0x0)

10:19:54 executing program 3:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x7fffffff, 0xa}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})

[ 2099.777145][T23921] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[ 2099.785576][T23921] usb 6-1: config 0 has no interface number 0
[ 2099.791861][T23921] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[ 2099.801185][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2099.890891][T28493] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 2099.899387][T28493] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 2099.908598][T28493] usb 2-1: config 0 has no interface number 1
[ 2099.911594][T23921] usb 6-1: config 0 descriptor??
[ 2099.914934][T28493] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2099.915059][T28493] usb 2-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00
[ 2099.915146][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2099.959269][T23921] gspca_main: ov534_9-2.14.0 probing 06f8:3003
[ 2099.971409][T28493] usb 2-1: config 0 descriptor??
[ 2099.976971][T28493] usb 2-1: Interface #128 referenced by multiple IADs
[ 2100.236240][T11896] usb 2-1: USB disconnect, device number 69
10:19:55 executing program 1:
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000043d2e740085d2c1300000000000109022b000100000000090480000130021c00090400000000000000080b63eb71f17571080b7e037def49aedf2728"], 0x0)

[ 2101.063095][T11896] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 2101.423251][T11896] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 2101.431622][T11896] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 2101.441044][T11896] usb 2-1: config 0 has no interface number 1
[ 2101.447342][T11896] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2101.460746][T11896] usb 2-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00
[ 2101.469964][T11896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2101.480146][T11896] usb 2-1: config 0 descriptor??
[ 2101.485390][T11896] usb 2-1: Interface #128 referenced by multiple IADs
[ 2101.732153][T28493] usb 2-1: USB disconnect, device number 70
[ 2101.903732][T23921] gspca_ov534_9: reg_r err -71
[ 2102.253414][T23921] gspca_ov534_9: Unknown sensor 0000
[ 2102.253666][T23921] ov534_9: probe of 6-1:0.212 failed with error -22
[ 2102.271892][T23921] usb 6-1: USB disconnect, device number 77
[ 2102.783133][T23921] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 2103.023102][T23921] usb 6-1: Using ep0 maxpacket: 8
[ 2103.143361][T23921] usb 6-1: config 0 has an invalid interface number: 212 but max is 0
[ 2103.152636][T23921] usb 6-1: config 0 has no interface number 0
[ 2103.160000][T23921] usb 6-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=25.6f
[ 2103.169738][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2103.180322][T23921] usb 6-1: config 0 descriptor??
[ 2103.228860][T23921] gspca_main: ov534_9-2.14.0 probing 06f8:3003
10:19:58 executing program 5:
socket$packet(0x11, 0x80a, 0x300)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c)
sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, [{}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0)

[ 2103.415905][T23921] gspca_ov534_9: reg_w failed -71
[ 2103.456036][    C0] IPv4: Oversized IP packet from 127.0.0.1
[ 2103.517942][    C1] IPv4: Oversized IP packet from 127.0.0.1
[ 2103.923139][T23921] gspca_ov534_9: Unknown sensor 0000
[ 2103.923326][T23921] ov534_9: probe of 6-1:0.212 failed with error -22
[ 2103.939242][T23921] usb 6-1: USB disconnect, device number 78
[ 2105.933407][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2105.939875][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2105.943626][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2105.952114][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2106.013524][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2106.019762][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2106.026349][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2106.033034][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:20:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0xfff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:02 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0)

10:20:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='io.stat\x00\xcf,\x96\xcb\xee\xc7\xacVC\x15\xb9\xf6\x9eK>\f\xfc\xbe\xaa\x00\x84\x0fV9\xaa\xcb\x162\xaf\x00\x00\xfc', 0x0, 0x0)
r2 = socket$inet(0x2b, 0x1, 0x0)
unshare(0x20400)
poll(&(0x7f0000000000)=[{r2}, {r1}], 0x2, 0x0)

10:20:02 executing program 1:
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000043d2e740085d2c1300000000000109022b000100000000090480000130021c00090400000000000000080b63eb71f17571080b7e037def49aedf2728"], 0x0)

10:20:02 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x7e, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x2be, 0x0}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000040), 0x1b3)

10:20:02 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10981, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpgid(0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r5, r6}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000)
r7 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2}, 0x1c2)
r8 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x0)
sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0)
r10 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_QUERYSTD(r10, 0x8008563f, &(0x7f0000000000)=<r11=>0x0)
ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000300)=r11)
ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000140)=r11)
read$eventfd(r0, 0x0, 0x0)

10:20:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='io.stat\x00\xcf,\x96\xcb\xee\xc7\xacVC\x15\xb9\xf6\x9eK>\f\xfc\xbe\xaa\x00\x84\x0fV9\xaa\xcb\x162\xaf\x00\x00\xfc', 0x0, 0x0)
r2 = socket$inet(0x2b, 0x1, 0x0)
unshare(0x20400)
poll(&(0x7f0000000000)=[{r2}, {r1}], 0x2, 0x0)

[ 2107.674420][ T1117] kvm: pic: single mode not supported
[ 2107.674438][ T1117] kvm: pic: level sensitive irq not supported
[ 2107.693577][ T1117] kvm: pic: non byte read
[ 2107.709771][ T1117] kvm: pic: non byte write
[ 2107.718236][ T1117] kvm: pic: single mode not supported
10:20:02 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x7e, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x2be, 0x0}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000040), 0x1b3)

[ 2107.718254][ T1117] kvm: pic: level sensitive irq not supported
[ 2107.755200][ T1117] kvm: pic: non byte read
[ 2107.792536][ T1117] kvm: pic: non byte write
[ 2107.836138][ T1117] kvm: pic: non byte read
[ 2107.841185][ T1117] kvm: pic: non byte write
[ 2107.858924][ T1117] kvm: pic: non byte read
10:20:02 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='io.stat\x00\xcf,\x96\xcb\xee\xc7\xacVC\x15\xb9\xf6\x9eK>\f\xfc\xbe\xaa\x00\x84\x0fV9\xaa\xcb\x162\xaf\x00\x00\xfc', 0x0, 0x0)
r2 = socket$inet(0x2b, 0x1, 0x0)
unshare(0x20400)
poll(&(0x7f0000000000)=[{r2}, {r1}], 0x2, 0x0)

[ 2107.885454][ T1117] kvm: pic: non byte write
[ 2107.891694][ T1117] kvm: pic: non byte read
[ 2107.898614][ T1117] kvm: pic: non byte write
[ 2107.904248][T28493] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 2107.916783][ T1117] kvm: pic: non byte read
[ 2107.935537][ T1117] kvm: pic: non byte write
[ 2107.947313][ T1117] kvm: pic: non byte read
[ 2107.952697][ T1117] kvm: pic: non byte write
[ 2107.960616][ T1117] kvm: pic: non byte read
[ 2107.974106][ T1117] kvm: pic: non byte write
10:20:03 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x7e, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x2be, 0x0}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000040), 0x1b3)

[ 2107.993547][ T1117] kvm: pic: non byte read
[ 2108.004285][ T1117] kvm: pic: non byte write
[ 2108.024278][ T1117] kvm: pic: non byte read
[ 2108.045929][ T1117] kvm: pic: non byte write
10:20:03 executing program 0:
mknod$loop(&(0x7f0000000380)='./file1\x00', 0x2000, 0xffffffffffffffff)

10:20:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1)

[ 2108.344288][T28493] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[ 2108.352613][T28493] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 2108.362811][T28493] usb 2-1: config 0 has no interface number 1
[ 2108.369533][T28493] usb 2-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2108.382845][T28493] usb 2-1: New USB device found, idVendor=5d08, idProduct=132c, bcdDevice= 0.00
[ 2108.392067][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2108.426102][T28493] usb 2-1: config 0 descriptor??
[ 2108.431965][T28493] usb 2-1: Interface #128 referenced by multiple IADs
10:20:03 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x7e, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x2be, 0x0}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$evdev(r0, &(0x7f0000000040), 0x1b3)

[ 2108.691886][T28493] usb 2-1: USB disconnect, device number 71
10:20:09 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x4, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000066, 0x0)

10:20:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1)

10:20:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0xfff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:09 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'bro-teH\x00\x00\x00H\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243426c7d2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38)

10:20:09 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10981, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpgid(0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r5, r6}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000)
r7 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2}, 0x1c2)
r8 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x0)
sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0)
r10 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_QUERYSTD(r10, 0x8008563f, &(0x7f0000000000)=<r11=>0x0)
ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000300)=r11)
ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000140)=r11)
read$eventfd(r0, 0x0, 0x0)

10:20:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010140}]})

[ 2114.035212][ T1159] ebt_among: dst integrity fail: 3cd
[ 2114.075779][ T1170] ebt_among: dst integrity fail: 3cd
10:20:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1)

[ 2114.102241][ T1163] kvm: pic: single mode not supported
[ 2114.102257][ T1163] kvm: pic: level sensitive irq not supported
[ 2114.127486][ T1163] picdev_read: 53 callbacks suppressed
[ 2114.127503][ T1163] kvm: pic: non byte read
10:20:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)

10:20:09 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000})

[ 2114.205633][ T1163] picdev_write: 53 callbacks suppressed
[ 2114.205650][ T1163] kvm: pic: non byte write
[ 2114.265986][ T1163] kvm: pic: single mode not supported
[ 2114.266005][ T1163] kvm: pic: level sensitive irq not supported
[ 2114.303991][ T1163] kvm: pic: non byte read
10:20:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1)

[ 2114.373711][ T1163] kvm: pic: non byte write
[ 2114.379011][ T1163] kvm: pic: non byte read
[ 2114.403319][ T1163] kvm: pic: non byte write
[ 2114.435770][ T1163] kvm: pic: non byte read
10:20:09 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)=0x10)

10:20:09 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000})

[ 2114.457859][ T1163] kvm: pic: non byte write
[ 2114.484005][ T1163] kvm: pic: non byte read
[ 2114.533927][ T1163] kvm: pic: non byte write
[ 2114.584125][ T1163] kvm: pic: non byte read
[ 2114.602591][ T1163] kvm: pic: non byte write
[ 2114.675102][ T1163] kvm: pic: non byte read
[ 2114.692471][ T1163] kvm: pic: non byte write
[ 2114.724285][ T1163] kvm: pic: non byte read
[ 2114.739960][ T1163] kvm: pic: non byte write
[ 2114.764474][ T1163] kvm: pic: non byte read
[ 2114.769319][ T1163] kvm: pic: non byte write
[ 2114.777271][ T1163] kvm: pic: non byte read
[ 2114.782055][ T1163] kvm: pic: non byte write
10:20:16 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x17c, 0x0}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000000000000000000000000000723b13fb689f9d7276af"])
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000780)=""/4096, 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:16 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000})

10:20:16 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)=0x10)

10:20:16 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10981, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getpgid(0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@mcast2, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x0, 0xc, r5, r6}, {0x80000000, 0x51, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x8}, {0xffffffffffffff82, 0x7, 0xfffffffffffffff8, 0x7f}, 0x3f, 0x0, 0x4, 0x0, 0x3}, {{@in6=@empty, 0x4d2, 0x51}, 0x2, @in6=@empty, 0x34ff, 0x2, 0x1, 0x0, 0x1, 0x7fff, 0xb1}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0)
shutdown(r2, 0x1)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000)
r7 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r7, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2}, 0x1c2)
r8 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x0)
sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x8000, 0x0)
r10 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0)
ioctl$VIDIOC_QUERYSTD(r10, 0x8008563f, &(0x7f0000000000)=<r11=>0x0)
ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000000300)=r11)
ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000140)=r11)
read$eventfd(r0, 0x0, 0x0)

10:20:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0xfff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:16 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10)

10:20:16 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x6000000})

10:20:16 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)=0x10)

[ 2121.440914][ T1208] kvm: pic: single mode not supported
[ 2121.440931][ T1208] kvm: pic: level sensitive irq not supported
[ 2121.459094][ T1208] picdev_read: 36 callbacks suppressed
[ 2121.459108][ T1208] kvm: pic: non byte read
[ 2121.494745][ T1208] picdev_write: 36 callbacks suppressed
[ 2121.494762][ T1208] kvm: pic: non byte write
[ 2121.543752][ T1208] kvm: pic: single mode not supported
[ 2121.543768][ T1208] kvm: pic: level sensitive irq not supported
[ 2121.551115][ T1208] kvm: pic: non byte read
[ 2121.597094][ T1208] kvm: pic: non byte write
[ 2121.603450][ T1208] kvm: pic: non byte read
[ 2121.610893][ T1208] kvm: pic: non byte write
[ 2121.634157][ T1208] kvm: pic: non byte read
10:20:16 executing program 0:
unshare(0x8040400)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000000)=""/24, 0xffffffbb, 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0)

10:20:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x110001)
write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7}, 0x7)

[ 2121.644038][ T1208] kvm: pic: non byte write
[ 2121.666287][ T1208] kvm: pic: non byte read
[ 2121.677197][ T1208] kvm: pic: non byte write
10:20:16 executing program 1:
r0 = socket(0x15, 0x80005, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)=0x10)

[ 2121.714181][ T1208] kvm: pic: non byte read
[ 2121.753471][ T1208] kvm: pic: non byte write
[ 2121.780147][ T1208] kvm: pic: non byte read
10:20:16 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r1=>0x0, <r2=>0x0})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x33c)

[ 2121.878690][ T1208] kvm: pic: non byte write
[ 2121.920932][ T1208] kvm: pic: non byte read
10:20:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x37, "599398fda0d14383287403eb7f6d3e94e6cbf9058dfdbafb46fdc37aeca86ba8", "c47a68b27871aead244bea7ebc8dc3c0c34ef476864e4d92cc0bd0b5f641b1bf", "64121c8e5b52392108deec1333df308e16975920b2c2d43d0c2d0138c6b82c2b", "a5f582a16744d0ad25f520d215a49750d17b7ad25dfa4d897307901d8f75b4ee", "b3ac1c3e989631f623b254dc3d2f12ecc2cadc4830bb87d30c7d899ceaae6a7f", "e2497a20409062b95d0fd378"}})

[ 2121.993794][ T1208] kvm: pic: non byte write
[ 2121.998888][ T1208] kvm: pic: non byte read
[ 2122.013622][ T1208] kvm: pic: non byte write
[ 2122.020332][ T1208] kvm: pic: non byte read
[ 2122.035023][ T1208] kvm: pic: non byte write
10:20:17 executing program 1:
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x1f}}}}}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

10:20:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @dev}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10)
close(r0)

10:20:17 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x806, 0x8}}}}}}, 0x0)

10:20:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0xfffffffd}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @ioapic={0x1000}})
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x0, 0xfff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2122.367007][ T1252] device vet entered promiscuous mode
[ 2122.393934][ T1252] device vet left promiscuous mode
[ 2122.442110][ T1256] kvm: pic: single mode not supported
[ 2122.442126][ T1256] kvm: pic: level sensitive irq not supported
[ 2122.454146][ T1256] kvm: pic: single mode not supported
[ 2122.460360][ T1256] kvm: pic: level sensitive irq not supported
[ 2122.466117][T23921] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 2122.863218][T23921] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[ 2122.871332][T23921] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[ 2122.879654][T23921] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 2122.888799][T23921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2122.899964][T23921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2122.910102][T23921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2122.919999][T23921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2122.929318][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2124.073392][T23921] cdc_ncm 2-1:1.0: bind() failure
[ 2124.083493][T23921] cdc_ncm 2-1:1.1: bind() failure
[ 2124.094845][T23921] usb 2-1: USB disconnect, device number 72
[ 2124.833134][T23921] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 2125.193230][T23921] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[ 2125.201307][T23921] usb 2-1: config 1 has an invalid interface number: 1 but max is 0
[ 2125.209633][T23921] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[ 2125.218797][T23921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2125.229869][T23921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2125.239778][T23921] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2125.249629][T23921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2125.258884][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2125.603549][T23921] cdc_ncm 2-1:1.0: bind() failure
[ 2125.633591][T23921] cdc_ncm: probe of 2-1:1.1 failed with error -71
[ 2125.653444][T23921] cdc_mbim: probe of 2-1:1.1 failed with error -71
[ 2125.673641][T23921] usbtest: probe of 2-1:1.1 failed with error -71
[ 2125.684305][T23921] usb 2-1: USB disconnect, device number 73
10:20:21 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0xa, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef)

10:20:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0xff, 0x0, 0x8}})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040))

10:20:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:20:21 executing program 0:
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0/bus\x00', 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x1f, 0x0, 0x0, 0x0, 0xf6}}], 0x40000000000023d, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x243, 0x0)

10:20:21 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000001c0))

10:20:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
timer_create(0xb, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000180))

10:20:21 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6, 0x0, 0xa}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

10:20:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7", 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018000000000000001701000402000000efff000000000000"], 0x30}], 0x1, 0x0)

10:20:21 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
openat$cgroup_ro(r0, &(0x7f00000000c0)='mem\x00\x01y7SwaS.\x06\x95r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd3\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
lseek(r1, 0x20400000, 0x0)
read(r1, &(0x7f0000000180)=""/97, 0x61)
mremap(&(0x7f00007f0000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
mprotect(&(0x7f0000465000/0x600000)=nil, 0x600000, 0x0)
write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x2000008f)

10:20:21 executing program 2:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r0, &(0x7f00000001c0), 0x1, 0x21)

10:20:21 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000001c0))

10:20:21 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, 0xffffffffffffffff)

10:20:27 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x6)
lseek(r0, 0x0, 0x4)

10:20:27 executing program 3:
keyctl$restrict_keyring(0x5, 0xffffffffffffffff, 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x177, 0xfffffffffffffffe)
keyctl$update(0x2, r0, &(0x7f0000000240)="db", 0x1)

10:20:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)

10:20:27 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xfe95, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x1e, 0x301, 0x0, 0x0, {0xffffff1f}}, 0xfeae}}, 0x0)
recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0}}], 0x300, 0x2, 0x0)

10:20:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xc0, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xa0, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x8c, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={[], [], @multicast2}}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x655}, @IFLA_GRE_TOS={0x8, 0x9, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r2}], @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0xc0}}, 0x0)

10:20:27 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000001c0))

10:20:28 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x282, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x2, 0xf16, 0xfffffffffffffffb})

[ 2132.914014][ T1321] netlink: 'syz-executor.2': attribute type 24 has an invalid length.
[ 2132.927435][ T1321] batman_adv: Cannot find parent device
10:20:28 executing program 3:
r0 = gettid()
getpriority(0x1, r0)

10:20:28 executing program 2:
r0 = socket(0x22, 0x2, 0x4)
recvfrom$packet(r0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0)

10:20:28 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f00000001c0))

10:20:28 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6, &(0x7f0000000480)={r1, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x100)

10:20:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000018008cebb571aed362a100000a00c90000000008000000008f"], 0xc0}}, 0x0)

10:20:28 executing program 3:
r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0xf3, &(0x7f0000000700)={&(0x7f00000001c0)={'sm3\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xfe\x00\x00\x00\x00\x00\x00\x00\x02\x00'}})

10:20:28 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000903b9f087d07100488f50000000109021b0001000000000904470001349467000905850b08e2000000035ca339488f860ea467969fad18bee5339cdca8ecb6d20f38e6183393c1b70b87b1aa96bdc7a9eb713dfe19bc43c794955f9edf92a9157c3d1bbd78159c10a764b03a0c8dd9ed141134cfe9382b232b5dd2306602a3e9dda0044f66c28f1f9014e28a4a420598b6c2339005da76a9cd58d9fbfc7a5f5a830f"], 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)

[ 2133.793232][T28493] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2134.033212][T28493] usb 3-1: Using ep0 maxpacket: 8
[ 2134.163217][T28493] usb 3-1: config 0 has an invalid interface number: 71 but max is 0
[ 2134.171451][T28493] usb 3-1: config 0 has no interface number 0
[ 2134.177875][T28493] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2134.189078][T28493] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=f5.88
[ 2134.198320][T28493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.207800][T28493] usb 3-1: config 0 descriptor??
[ 2134.463955][T28493] powermate: Expected payload of 3--6 bytes, found 520 bytes!
[ 2134.472436][T28493] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.71/input/input87
[ 2134.496836][T28493] usb 3-1: USB disconnect, device number 43
[ 2134.503194][    C1] powermate 3-1:0.71: powermate_irq - usb_submit_urb failed with result: -19
[ 2134.503297][    C1] powermate: config urb returned -71
[ 2134.503312][    C1] powermate: usb_submit_urb(config) failed
[ 2135.233122][T28493] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2135.483110][T28493] usb 3-1: Using ep0 maxpacket: 8
[ 2135.603311][T28493] usb 3-1: config 0 has an invalid interface number: 71 but max is 0
[ 2135.611877][T28493] usb 3-1: config 0 has no interface number 0
[ 2135.618314][T28493] usb 3-1: config 0 interface 71 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2135.629468][T28493] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=f5.88
[ 2135.638720][T28493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2135.648199][T28493] usb 3-1: config 0 descriptor??
[ 2135.903512][T28493] powermate: Expected payload of 3--6 bytes, found 520 bytes!
[ 2135.912024][T28493] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.71/input/input88
[ 2135.930261][T28493] usb 3-1: USB disconnect, device number 44
[ 2135.936558][    C1] powermate 3-1:0.71: powermate_irq - usb_submit_urb failed with result: -19
[ 2135.936660][    C1] powermate: config urb returned -71
[ 2135.936675][    C1] powermate: usb_submit_urb(config) failed
10:20:36 executing program 1:
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14}, 0x14)
fcntl$setpipe(r0, 0x407, 0x80005)

10:20:36 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
dup2(r2, r0)

10:20:36 executing program 0:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0)

10:20:36 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x1)
ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$int_in(r0, 0x800060c0045006, &(0x7f0000000140)=0x9)

10:20:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = gettid()
waitid(0x2, r1, &(0x7f00000000c0), 0x20000002, 0x0)

10:20:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0)
ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1})
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000340)={0x6, 0x1})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x0, 0x0, 0xffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000700)}], 0x1, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)=""/59, &(0x7f0000000540)=0x3b)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 2141.215625][ T1375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2141.227345][ T1376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
10:20:36 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x8000a0, &(0x7f00000000c0)="1f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="d1"})

10:20:36 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x172f, 0x38, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)

10:20:36 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xbe, 0x0, 0x0, 0x0, 0x4}, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080))

10:20:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:36 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000506050368fe07002b0000000e430a001400020045b300070300001419001a00120002000e0001000600030000000000000000f769", 0x39}], 0x1)

[ 2141.798064][ T1413] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[ 2141.806678][ T1413] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'.
10:20:36 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:36 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

[ 2141.955500][T23921] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 2142.323482][T23921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2142.334679][T23921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2142.347664][T23921] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40
[ 2142.356954][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2142.367030][T23921] usb 2-1: config 0 descriptor??
[ 2142.846782][T23921] waltop 0003:172F:0038.0033: unknown main item tag 0x0
[ 2142.856242][T23921] waltop 0003:172F:0038.0033: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0
[ 2143.047715][T23921] usb 2-1: USB disconnect, device number 74
[ 2143.813152][T28493] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 2144.183228][T28493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2144.194436][T28493] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2144.207547][T28493] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40
[ 2144.216807][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2144.226683][T28493] usb 2-1: config 0 descriptor??
[ 2144.531785][T28493] waltop 0003:172F:0038.0034: unknown main item tag 0x0
[ 2144.541167][T28493] waltop 0003:172F:0038.0034: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0
[ 2144.606394][T23921] usb 2-1: USB disconnect, device number 75
10:20:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

10:20:41 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1c, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[@routing={0x0, 0x0, 0x0, 0xad}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

10:20:41 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xbe, 0x0, 0x0, 0x0, 0x4}, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080))

10:20:41 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x5}, {0x6, 0x0, 0x0, 0x7fffffff}]})

10:20:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xa1}, 0x1e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2146.534648][ T1440] usb usb2: usbfs: process 1440 (syz-executor.1) did not claim interface 0 before use
10:20:41 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xbe, 0x0, 0x0, 0x0, 0x4}, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080))

10:20:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

10:20:41 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:41 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:41 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0)

10:20:41 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0xbe, 0x0, 0x0, 0x0, 0x4}, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080))

10:20:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil})
ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040))

10:20:47 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:47 executing program 4:
waitid(0x83b895581628fca4, 0x0, 0x0, 0x4000000a, 0x0)

10:20:47 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:47 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082)
r1 = memfd_create(&(0x7f0000000140)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)="f6936e1fc377a1db8d4924aa77bf07744a8b8ecc88a83cdcd8c65f5172c40d733f749ed023dacbd6025db13c84aed4cda381b7b4ca07036a0c0bbeaa3ca49ec48cb320b5f8e04808228a0d103b73e3aab4de764e7949ae459b3e5cc80dc5baa117512ee1230a31b8869731f4db3bf8", 0x6f}, {&(0x7f0000000180)="6532fe011189abb722054857ff65", 0xe}], 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x2000005)

10:20:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, 0x0)

10:20:47 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x2)
write(0xffffffffffffffff, &(0x7f0000000000)="fc00000048000700ab0925ee090007000a060000000000000001369321000100ff0100000005d00000000000000398996c92770411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bb6b07e4f40000000000005a32e280fc83ab82f605f70c9ddef245c1bc79ebbaa08a", 0x88)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000240)=0x1)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/195, 0x57}], 0x1)
write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[], 0xf5)

10:20:48 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

10:20:48 executing program 3:
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)=0x5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)

10:20:48 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:48 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0xf, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0)

10:20:48 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x0, 0x0, 0x32314d59}})

10:20:48 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:52 executing program 4:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
ftruncate(r0, 0x208200)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:20:52 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x82, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f0000001340)=""/248}, 0x18)

10:20:52 executing program 2:
clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x4)
ptrace(0x4208, r0)

10:20:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = getpid()
pause()
ptrace(0x10, r3)
ptrace$getsig(0x2, r3, 0xffffffffff600003, 0x0)

10:20:52 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000000), 0x4)

10:20:52 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10:20:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002000))

10:20:52 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)='X', 0x1, 0xfffffffffffffffe)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55)

[ 2157.276667][ T1546] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure
10:20:52 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0x4004743d, &(0x7f0000001080)=""/246)

10:20:52 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [{[@rand_addr]}, {}]}, @timestamp={0x44, 0x4}]}}, @icmp=@info_reply}}}}, 0x0)

10:20:52 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

[ 2157.292254][ T1547] encrypted_key: key user:syz not found
[ 2157.443117][T23921] usb 2-1: new high-speed USB device number 76 using dummy_hcd
10:20:52 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

[ 2157.693295][T23921] usb 2-1: Using ep0 maxpacket: 8
[ 2157.823435][T23921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2157.834678][T23921] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[ 2157.843952][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2157.853729][T23921] usb 2-1: config 0 descriptor??
[ 2157.952178][ T1567] ptrace attach of "/root/syz-executor.3"[1530] was attempted by "/root/syz-executor.3"[1567]
[ 2158.332873][T23921] wacom 0003:17EF:6004.0035: unknown main item tag 0x0
[ 2158.343345][T23921] wacom 0003:17EF:6004.0035: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.1-1/input0
[ 2158.528836][T23921] usb 2-1: USB disconnect, device number 76
[ 2159.303166][T23921] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 2159.543053][T23921] usb 2-1: Using ep0 maxpacket: 8
[ 2159.663297][T23921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2159.674515][T23921] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[ 2159.683722][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2159.693164][T23921] usb 2-1: config 0 descriptor??
[ 2159.993052][T23921] wacom 0003:17EF:6004.0036: unknown main item tag 0x0
[ 2160.003328][T23921] wacom 0003:17EF:6004.0036: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.1-1/input0
[ 2160.128281][T28493] usb 2-1: USB disconnect, device number 77
10:20:59 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

10:20:59 executing program 4:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002140)={0x2, 0x0, @multicast1}, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='cmdline\x00')
preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0)

10:20:59 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="660f3882bc4fd40f20c06635020000000f22c00f01caf30f1276d42e0f01c566b9800000c00f326635000400000f300fc73dbaf80c66b8beab658e66efbafc0cedc432baa100ec", 0x47}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x302, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:20:59 executing program 2:
unshare(0x20400)
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r0, 0x10004529, 0x0)

10:20:59 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10:20:59 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000001140)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x04=F\xd2\xc5}WN\x85pc\xa7\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93<s\x18\xb7\xbc\xc3\xc5o\xd7\x0fu4(c\xa4\xd6u\xe8/\xaaO\xa4\xff\xea\xb1\x96\xdbIW\x9c\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\xce#yI\x95\x02\xa9\x8dg\x03\x14q\xac\xffre\xb1!\x8b\xf8\x17\x16\x98\xb9\xb5\x8b!R\xbb\xc5R\x8b,\xfa\xb1\xc0\xec\x17\xb9\x17\x89\v\xd7i\xeb\x1c\x8b$\xd3\xa3q\'8\x167\x13\x89\x8c\x95\xbc\xc6\x16jW\xc7Q_}0+\x0f9\xe5/2\xda.\x94I\xa7\xd6\v0Z\xd5Y\xda\xc4\x8d\x00\xf2\xcfz\xdc\b\nK}\xb4\x19n\x91^`\xcf]=\x86\xe9\xd1L\x16\xbf\xd0\x02\x11\xd9X\xb4?&\xf6\x94d\x0f\xd5\xabv')
r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00U\xe9{\x04\xa75\r\xa9\r\x99\xe8[{\xbd\\X}\xee\xc2\x99\xebv\x10PCN?\xa6\xde\xf1ko\x8a\xbf\xc27\xbc\xee\xbe\xfd\xec\xf4\xab\xf2\xf5\xec@\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xcc\x88|\x86j\xdd3\xada\xe7\x01\xe1?m\x83S,\xccoQc\vG\x1d\xea\x9f\x1c!\xf6\x17\xb4b\x9c\x8f}\xcc~\x878\x1e\xe3\xfdq%\\\xc0f\x00\x80\xadcPZw\xd4w\x99*aG\x1b\x14\xda\xed1\xed41\x06\x8c\a\x18\x00\xa3\n\xc3\xd5\xbb\xa9]{\xfa-\xba\x11\xdbNH6T\"\x14\xcc\x1b\x1b&x;\xc4W\xe1\x11\xe3\xd0\x05W\xfb\x95f\xa2C\x96\xbe\'\xe6\xce\x1d\xf4\xa3|\x14\xa7NE\xb8\xc9\xeeD\xfb\x87\xf4:\xcb\x8c\x0eIt\x8e\xf4\x98``\xf4\x16]Y\x15\xba\xbf\xd8\x9c\xfe/\x1a8\xa6\x85\x85\x01\xce\xae\xa7\xd9)\x16\xd6O&\xf0\xc4\xf2\x8c\xaf\x9f\x82\xc4\xe2\x17\xfdg\xa0\xf2\x12\xe6e:\xb9B[\xa4\xce\xbb{$Z,\xf0aDm\x88\xc1\x9ca\x1d\xcc\xdfKsh\x826\xf0F\x95\x00\x00\x00\x00\x00\x00\x00\x0e\xaa\xbb\xf0`\xf6\x1e\xc7\xcb\x80\xd1`\xf3\xfc\xdb', 0x0, 0x0)
preadv(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000040)=""/76, 0x4c}], 0x2, 0x2000107c)

10:20:59 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

10:20:59 executing program 3:
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
keyctl$get_persistent(0x3, r1, 0x0)
request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='.system,\x00', 0x0)

10:20:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]]}}}]}, 0x48}}, 0x0)

[ 2164.588362][ T1603] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 2164.633584][T28493] usb 2-1: new high-speed USB device number 78 using dummy_hcd
10:20:59 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040d80472f3400000000001090224000100000080090400000903010000092100050000000100090581030000000000"], 0x0)

10:20:59 executing program 3:
unshare(0x400)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x4000d, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}})

10:20:59 executing program 2:
r0 = fsopen(&(0x7f0000000600)='securityfs\x00', 0x0)
close(r0)

10:20:59 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
read$FUSE(r0, &(0x7f0000000180), 0x1000)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0xb, @raw_data="43553038966ad6665a58829547f4459bd30dbd0cbc20c3ae5cfcf9841bf9aef9737e1d534c8a23663fb565ef3e8951fb62feb03476ffc16672fe4f0cad18287a4e747ee1adb4ec7c59ccd65fcc0f78997a25e1c8548473196b7f0efa33a94bd2d2fd67979f982b10ff227c35b6384e72e051a109c77b4e2a139ae93abaac547869b173d6ba776981bda24b773478876cc51bb5ae649fcdc08107230bfbfb92d3d7d5a03d4eccc7c4d44d428c3e844055e72ff179ec28d517f753487dfd62b180fee148710b7394cd"})

[ 2164.884415][T28493] usb 2-1: Using ep0 maxpacket: 8
[ 2165.013405][T28493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2165.024531][T28493] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[ 2165.033801][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.046034][T28493] usb 2-1: config 0 descriptor??
[ 2165.065029][T23921] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 2165.423303][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2165.434629][T23921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2165.447634][T23921] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40
[ 2165.456837][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2165.466607][T23921] usb 1-1: config 0 descriptor??
[ 2165.509100][T23921] usbhid 1-1:0.0: can't add hid device: -22
[ 2165.515598][T23921] usbhid: probe of 1-1:0.0 failed with error -22
[ 2165.528725][T28493] wacom 0003:17EF:6004.0037: unknown main item tag 0x0
[ 2165.550917][T28493] wacom 0003:17EF:6004.0037: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.1-1/input0
[ 2165.706759][T23921] usb 1-1: USB disconnect, device number 65
[ 2165.746653][T11896] usb 2-1: USB disconnect, device number 78
[ 2166.503065][T11896] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 2166.863366][T11896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2166.874535][T11896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2166.887520][T11896] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40
[ 2166.896756][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2166.906337][T11896] usb 1-1: config 0 descriptor??
[ 2166.948544][T11896] usbhid 1-1:0.0: can't add hid device: -22
[ 2166.955107][T11896] usbhid: probe of 1-1:0.0 failed with error -22
[ 2167.145298][T11896] usb 1-1: USB disconnect, device number 66
10:21:06 executing program 4:
r0 = socket$inet(0x2, 0x2, 0x0)
sendto$inet(r0, &(0x7f0000000140)="6812334f6743a747f8bf094356", 0xffb0, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

10:21:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000003560b700ef"])
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x19, 0x2, [{0x483}]})

10:21:06 executing program 2:
unshare(0x400)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001c00)={0xffffffffffffffff, 0x0, 0x0}, 0x1)

10:21:06 executing program 5:
r0 = socket$l2tp(0x18, 0x1, 0x1)
getsockopt$packet_buf(r0, 0x111, 0x0, 0x0, 0xfffffffffffffffd)

10:21:06 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10:21:06 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

10:21:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6d83e56aa9f17265}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:21:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
close(r1)

10:21:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800000800, 0x0, 0xff, 0x100000000000001}, 0x20)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xc8, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x800, 0x2, 0x0, 0x0, 0xdb}, 0x247)

[ 2171.851350][ T1654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2171.893800][T28493] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 2171.921915][ T1661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
10:21:07 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf4, 0x30, 0x20, 0xe20, 0x101, 0x1773, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa9, 0x68, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1e}}]}}]}}]}}, 0x0)

10:21:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800000800, 0x0, 0xff, 0x100000000000001}, 0x20)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xc8, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x800, 0x2, 0x0, 0x0, 0xdb}, 0x247)

10:21:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x400000b0}]})

[ 2172.163613][T28493] usb 2-1: Using ep0 maxpacket: 8
[ 2172.294967][T28493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2172.306193][T28493] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[ 2172.315470][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2172.372095][T28493] usb 2-1: config 0 descriptor??
[ 2172.413221][T11896] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2172.653209][T11896] usb 3-1: Using ep0 maxpacket: 32
[ 2172.773289][T11896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[ 2172.783404][T11896] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73
[ 2172.792563][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2172.802547][T11896] usb 3-1: config 0 descriptor??
[ 2172.847181][T11896] pegasus_notetaker: probe of 3-1:0.0 failed with error -12
[ 2172.868392][T28493] wacom 0003:17EF:6004.0038: unknown main item tag 0x0
[ 2172.894047][T28493] wacom 0003:17EF:6004.0038: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.1-1/input0
[ 2173.046789][T11896] usb 3-1: USB disconnect, device number 45
[ 2173.070822][T28493] usb 2-1: USB disconnect, device number 79
[ 2173.813164][T11896] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2174.053142][T11896] usb 3-1: Using ep0 maxpacket: 32
[ 2174.173298][T11896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[ 2174.183175][T11896] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73
[ 2174.192350][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2174.202135][T11896] usb 3-1: config 0 descriptor??
[ 2174.247210][T11896] pegasus_notetaker: probe of 3-1:0.0 failed with error -12
[ 2174.445426][T11896] usb 3-1: USB disconnect, device number 46
10:21:14 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x181042, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x7b)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)=0x40000)

10:21:14 executing program 0:
open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000030c0), 0xfffffed0)

10:21:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800000800, 0x0, 0xff, 0x100000000000001}, 0x20)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xc8, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x800, 0x2, 0x0, 0x0, 0xdb}, 0x247)

10:21:14 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xfd, 0x3d, 0x8b, 0x8, 0x959, 0x2bd0, 0xd2ec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x83, 0xad, 0x2e}}]}}]}}, 0x0)

10:21:14 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x40029}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x29, {0x29, 0x0, "90a6895aefd79b87429d14ba8a6a2c922a8bb666b2dfea61dcba9f5bf786627df702a30d6479aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10:21:14 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e00000010008108040f80ecdb4cb9c00a480e1810000000e8bd6efb120009000e002100400000ff050005bf0086", 0x2e}], 0x1}, 0x0)

10:21:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800000800, 0x0, 0xff, 0x100000000000001}, 0x20)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xc8, &(0x7f00000000c0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x800, 0x2, 0x0, 0x0, 0xdb}, 0x247)

[ 2179.045940][ T1694] netlink: 'syz-executor.2': attribute type 33 has an invalid length.
10:21:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfea6)

10:21:14 executing program 0:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0)

10:21:14 executing program 2:
memfd_create(0xfffffffffffffffe, 0x0)

[ 2179.303724][T28493] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 2179.311659][T11978] usb 6-1: new high-speed USB device number 79 using dummy_hcd
10:21:14 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f00000003c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001400)={0xf0f000, 0x0, "3d3eb9ee73710d44aaa69020b92b3413549707be7c2d09afdb7a2bca43abe321"})

10:21:14 executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x8e, 0xa2, 0x35, 0x0, 0x41e, 0x4007, 0x674d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5f, 0xc9, 0x3e, 0x0, [], [{}]}}]}}]}}, 0x0)
r0 = semget$private(0x0, 0x207, 0x0)
semop(r0, &(0x7f0000000140)=[{0x0, 0x23}], 0x1)
semop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1)
semctl$IPC_RMID(r0, 0x0, 0x0)

[ 2179.546261][T28493] usb 2-1: Using ep0 maxpacket: 8
[ 2179.563260][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 2179.673424][T28493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2179.684621][T28493] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00
[ 2179.694004][T28493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2179.703079][T11978] usb 6-1: config 0 has an invalid interface number: 61 but max is 0
[ 2179.711408][T11978] usb 6-1: config 0 has no interface number 0
[ 2179.719443][T11978] usb 6-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=d2.ec
[ 2179.728630][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2179.738263][T28493] usb 2-1: config 0 descriptor??
[ 2179.744357][T11978] usb 6-1: config 0 descriptor??
[ 2179.763367][T11896] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2179.794046][T11978] HFC-S_USB: probe of 6-1:0.61 failed with error -5
[ 2179.989675][T11978] usb 6-1: USB disconnect, device number 79
[ 2180.033339][T11896] usb 1-1: device descriptor read/64, error 18
[ 2180.209231][T28493] wacom 0003:17EF:6004.0039: unknown main item tag 0x0
[ 2180.219480][T28493] wacom 0003:17EF:6004.0039: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.1-1/input0
[ 2180.411712][T28493] usb 2-1: USB disconnect, device number 80
[ 2180.433142][T11896] usb 1-1: device descriptor read/64, error 18
[ 2180.703104][T11896] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 2180.753192][T11978] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 2180.975821][T11896] usb 1-1: device descriptor read/64, error 18
[ 2180.993398][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 2181.123369][T11978] usb 6-1: config 0 has an invalid interface number: 61 but max is 0
[ 2181.131606][T11978] usb 6-1: config 0 has no interface number 0
[ 2181.137998][T11978] usb 6-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=d2.ec
[ 2181.147235][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2181.156943][T11978] usb 6-1: config 0 descriptor??
[ 2181.208716][T11978] HFC-S_USB: probe of 6-1:0.61 failed with error -5
[ 2181.363207][T11896] usb 1-1: device descriptor read/64, error 18
[ 2181.406645][T23921] usb 6-1: USB disconnect, device number 80
[ 2181.483482][T11896] usb usb1-port1: attempt power cycle
[ 2182.193017][T11896] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 2182.463166][T11896] usb 1-1: device descriptor read/64, error 18
10:21:20 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x0)
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, 0x0)

10:21:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_timeval(r1, 0x1, 0x32, &(0x7f0000000200), 0x10)

10:21:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x3a, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000100100001007564703a73797a304000000044000400200001000a000000000000000000000000000000000000000000000100800000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0)

10:21:20 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x20208000005, 0x1, @name="2d552915796b8edf5068c8c0e538cfaef56fafda6e8769e7375d0a93208e3c0e"})

10:21:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x7, 0x0, 0x7}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x80ffff}]})

10:21:20 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_GET_STATUS64(r0, 0x4c03, &(0x7f00000004c0))

[ 2185.343839][ T1737] Started in network mode
[ 2185.348458][ T1737] Own node identity 00000000000000000000000000000001, cluster identity 4711
[ 2185.357926][ T1737] Enabling of bearer <udp:syz0@> rejected, failed to enable media
10:21:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket(0x10, 0x80002, 0x100000000000000c)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000601ed5ef52bd1b6479befc19ba1ad39"], 0x14}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492747, 0x0)

10:21:20 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000000000000100000001000000ec00000004"], 0x15}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0)

10:21:20 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_GET_STATUS64(r0, 0x4c03, &(0x7f00000004c0))

10:21:20 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00l\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)

10:21:20 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0x3, 0x4)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r2=>0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0xd00, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "e9ecd4fd72652bd4e41d4de8219a96e9b77dbfda429e61887728de204fdf7623065c8265f0579734b5a699ff728516a87f480e645c3d2b02d73eefc60e42dfe4"}}, 0x80}}, 0x0)

10:21:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000380)='G', 0x1}], 0x1)

10:21:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x80ffff, 0x4008ae8a}]})

10:21:26 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x800000800000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc)

10:21:26 executing program 2:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2)

10:21:26 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1d34, 0x4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x78, {0x78, 0x0, "055b08e2b94db664517b80748e6597b20f948768d71ae713b641a5630d0becb54c4070509bf8d36eff46a06eaf741e45f63374f1a84942d05dc91b4eb456264eb8618dc70e051ec152cf58e2b12cb934714edcabceac15f68a94ec40cf76e4d40c50cc71edce1b78e0b26b845758e7f37c079735e7ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10:21:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_GET_STATUS64(r0, 0x4c03, &(0x7f00000004c0))

10:21:26 executing program 1:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x34000}], 0x1}, 0x0)

[ 2191.666895][ T1789] misc userio: The device must be registered before sending interrupts
10:21:26 executing program 2:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
unshare(0x20400)
select(0x40, &(0x7f0000001300), 0x0, &(0x7f0000001380)={0x3f}, 0x0)

10:21:26 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='/dev/loop#\x00', 0x4)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_GET_STATUS64(r0, 0x4c03, &(0x7f00000004c0))

10:21:26 executing program 3:
add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000380)="00000000000000053a5b64ccba9e105e693625107704a66edea4217b856780f9ff3f3534fad9ca6f2308684f", 0x2c, 0xfffffffffffffffd)

10:21:27 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)
sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc)

10:21:27 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x108)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1, 0xb6)

10:21:27 executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x2, "4afa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2191.964318][T11978] usb 6-1: new high-speed USB device number 81 using dummy_hcd
10:21:27 executing program 3:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000003ac0)=[{0x0}, {&(0x7f0000002780)=""/109, 0x6d}, {&(0x7f0000002800)=""/208, 0xd0}], 0x3, &(0x7f0000004e80)=[{&(0x7f0000003b40)=""/160, 0xa0}], 0x1, 0x0)

[ 2192.353290][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2192.364461][T11978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2192.377467][T11978] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40
[ 2192.383333][T11896] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 2192.386759][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2192.404002][T11978] usb 6-1: config 0 descriptor??
[ 2192.633157][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 2192.753312][T11896] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 2192.761699][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2192.772109][T11896] usb 1-1: config 0 has no interface number 0
[ 2192.778427][T11896] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2192.789811][T11896] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 2192.799097][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2192.809014][T11896] usb 1-1: config 0 descriptor??
[ 2193.073254][T11896] radio-si470x 1-1:0.128: DeviceID=0x81c2 ChipID=0x4c80
[ 2193.093613][T11978] hid-led: probe of 0003:1D34:0004.003A failed with error -71
[ 2193.104899][T11978] usb 6-1: USB disconnect, device number 81
[ 2193.283161][T11896] radio-si470x 1-1:0.128: software version 129, hardware version 194
[ 2193.503480][T11896] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 2193.853105][T11978] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2194.213320][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2194.224545][T11978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2194.237587][T11978] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40
[ 2194.246839][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2194.256706][T11978] usb 6-1: config 0 descriptor??
[ 2194.603214][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2194.612439][T11896] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 2194.623756][T11896] usb 1-1: USB disconnect, device number 70
[ 2194.674196][T11978] hid-led: probe of 0003:1D34:0004.003B failed with error -71
[ 2194.688222][T11978] usb 6-1: USB disconnect, device number 82
[ 2195.353062][T11896] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 2195.593177][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 2195.713310][T11896] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 2195.721613][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2195.731924][T11896] usb 1-1: config 0 has no interface number 0
[ 2195.738182][T11896] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2195.749542][T11896] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 2195.758788][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2195.768647][T11896] usb 1-1: config 0 descriptor??
[ 2196.033219][T11896] radio-si470x 1-1:0.128: DeviceID=0x3b7a ChipID=0x5880
[ 2196.073131][T11896] radio-si470x 1-1:0.128: software version 59, hardware version 122
[ 2196.113320][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2196.122031][T11896] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 2196.144135][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2196.153808][T11896] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 2196.165128][T11896] usb 1-1: USB disconnect, device number 71
10:21:33 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00\x00\x00\x00\x00\x00\x00\x00\x05', <r1=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14)
syz_emit_ethernet(0x188, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev}, @igmp={0x0, 0x0, 0x0, @local}}}}}, 0x0)

10:21:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x300})
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:21:33 executing program 2:
timer_create(0x0, 0x0, &(0x7f0000000280))
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000a40)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000a80))

10:21:33 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0)
quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

10:21:35 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000004080509fffc7ffffdffff010a0000000c00030084ffffff7d0a00b60c0002000002fa17711104a6"], 0x2c}}, 0x0)

10:21:35 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0)
quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

10:21:35 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f)

10:21:35 executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x2, "4afa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:21:35 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0xffffffffffffff33}, {0x0}, {0x0}, {&(0x7f0000000000)="09000000000036972aac391d87a3a3ba2766", 0x12}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$cont(0x9, r0, 0x0, 0x0)

10:21:36 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0)
quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

10:21:36 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f)

10:21:36 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
fchdir(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0)
quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0))

[ 2201.175734][T11896] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 2201.423148][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 2201.543332][T11896] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 2201.551721][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2201.562162][T11896] usb 1-1: config 0 has no interface number 0
[ 2201.568459][T11896] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2201.579848][T11896] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 2201.589165][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2201.598883][T11896] usb 1-1: config 0 descriptor??
[ 2201.613605][    C1] net_ratelimit: 4 callbacks suppressed
[ 2201.613634][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2201.614025][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2201.619647][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2201.693345][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2201.699584][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2201.706018][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2201.712027][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2201.718411][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2201.724449][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2201.730524][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2201.863263][T11896] radio-si470x 1-1:0.128: DeviceID=0x337a ChipID=0x5880
[ 2202.083254][T11896] radio-si470x 1-1:0.128: software version 51, hardware version 122
[ 2202.303304][T11896] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 2203.403242][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2203.412350][T11896] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 2203.423633][T11896] usb 1-1: USB disconnect, device number 72
10:21:39 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000380), 0x12)

10:21:39 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f)

10:21:39 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000140000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000000f41b0000000000000000000002000000c1ffffff000000000000000105000500000000000a0000f00000000000000000000000000000ffffac141400000000000000000005000600000000000a0090a900000000fe8000000000000000000000000e00"/160], 0xa0}}, 0x0)

10:21:39 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x200}]}, 0x10)
r1 = socket(0x570ae9bd1747373, 0x2, 0x4)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001700)={0x24, 0x14, 0x301, 0x0, 0x0, {0x11, 0x2}, [@nested={0x10, 0x0, [@generic="8dd7fdd2f887937bab"]}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6(0xa, 0x3, 0x6)
r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc)

10:21:43 executing program 1:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}})

10:21:43 executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x2, "4afa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:21:43 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = socket(0x18, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x27, &(0x7f0000000000), 0x20a1562f)

10:21:43 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2)
request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000440)={'\x04\x00z', 0x1}, &(0x7f0000000480)='\x00}H\xbd8\xab\xb2ikC\x9e\x00\x00\x00\x00\x00', 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r3)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0)

10:21:43 executing program 3:
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self//exe\x00', 0x3, 0x0)
r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0)
open(&(0x7f0000000000)='.\x00', 0xc004, 0x0)

10:21:43 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @initdev}, 0xfffffffffffffe88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

10:21:43 executing program 3:
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)

10:21:43 executing program 2:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000))

[ 2208.483597][T11896] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 2208.733061][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 2208.853121][T11896] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 2208.861577][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2208.871938][T11896] usb 1-1: config 0 has no interface number 0
[ 2208.878343][T11896] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2208.889622][T11896] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 2208.898844][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2208.909166][T11896] usb 1-1: config 0 descriptor??
10:21:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0xf6fb5cf, 0x4})

10:21:44 executing program 2:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @remote}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

10:21:44 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @initdev}, 0xfffffffffffffe88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

10:21:44 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="e0", 0x1d1}], 0x131, 0x0)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="de1028cea9927e9780751c6307227da6310f573ccea8f44d6a43a45ebb", 0x1d}, {&(0x7f0000000040)="e6f91bc73240fe586bf45569020f07df0cccc07b7eb7c765d3a7ed7d62f4676ac4731b40d77d1951715a8c7b415515d98f5206d9a641c4a21c7e", 0x3a}, {&(0x7f0000000180)="4a575e0505270825b4d991d5953a9a561436feaba3bd94ff261b026b0ee94714e221ccda81801a4dff48ac8f5273389695d59144c82c0d8ce0a66f3a2fc711c33ad3afa0597b3ee7d0b531d05e7215caff87a0d21b7b04947d560c62d37191aaa24911a3c6c27cfb7bbb4807bdbff2178e7411b4e38836a58d40dac428597dc4dece58bf3257a0", 0x87}, {&(0x7f0000000280)="c16f5dfd88396a1f49f15d6db3fae873e5f08ba74005799419533bfd7e945118f764adee2526e8a6a69882b1b48704fa9de296284bdbcdb86736dfd4d434a51879f5cafe01717a1f51d62115b25e6c8f235dffe3398850abd34f91e30eb5e636683a2e9af548103811ac3c5ca22fca2adf0c12292d61c72c1479502b753a75bd1163bab3a5b9e5dbedd1b170b7efb2c4c54279a9c70ff7a747beaf3233fea01f7aa6d9c047e4cb15a9633648384cc2f0e9c33d25bfc45843e037f786ae8a571d45639301", 0xc4}, {&(0x7f0000000380)="6363b1e16ab6095151f57eea5ac434331406c190d61c8738f05fd8ce06be205f1c630596baf8434756d5a34dfc73d1", 0x2f}], 0x5, 0x0)

[ 2209.173482][T11896] radio-si470x 1-1:0.128: DeviceID=0x3c7a ChipID=0x5880
[ 2209.393143][T11896] radio-si470x 1-1:0.128: software version 60, hardware version 122
[ 2209.613313][T11896] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 2210.723259][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2210.732100][T11896] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 2210.743386][T11896] usb 1-1: USB disconnect, device number 73
10:21:50 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002f80)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="25ba9d375f5a41a9cc5ef96140c07cd4"}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)="c4", 0x1}], 0x1}}], 0x1, 0x0)

10:21:50 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000001500))

10:21:50 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="e0", 0x1d1}], 0x131, 0x0)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="de1028cea9927e9780751c6307227da6310f573ccea8f44d6a43a45ebb", 0x1d}, {&(0x7f0000000040)="e6f91bc73240fe586bf45569020f07df0cccc07b7eb7c765d3a7ed7d62f4676ac4731b40d77d1951715a8c7b415515d98f5206d9a641c4a21c7e", 0x3a}, {&(0x7f0000000180)="4a575e0505270825b4d991d5953a9a561436feaba3bd94ff261b026b0ee94714e221ccda81801a4dff48ac8f5273389695d59144c82c0d8ce0a66f3a2fc711c33ad3afa0597b3ee7d0b531d05e7215caff87a0d21b7b04947d560c62d37191aaa24911a3c6c27cfb7bbb4807bdbff2178e7411b4e38836a58d40dac428597dc4dece58bf3257a0", 0x87}, {&(0x7f0000000280)="c16f5dfd88396a1f49f15d6db3fae873e5f08ba74005799419533bfd7e945118f764adee2526e8a6a69882b1b48704fa9de296284bdbcdb86736dfd4d434a51879f5cafe01717a1f51d62115b25e6c8f235dffe3398850abd34f91e30eb5e636683a2e9af548103811ac3c5ca22fca2adf0c12292d61c72c1479502b753a75bd1163bab3a5b9e5dbedd1b170b7efb2c4c54279a9c70ff7a747beaf3233fea01f7aa6d9c047e4cb15a9633648384cc2f0e9c33d25bfc45843e037f786ae8a571d45639301", 0xc4}, {&(0x7f0000000380)="6363b1e16ab6095151f57eea5ac434331406c190d61c8738f05fd8ce06be205f1c630596baf8434756d5a34dfc73d1", 0x2f}], 0x5, 0x0)

10:21:50 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @initdev}, 0xfffffffffffffe88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

10:21:50 executing program 0:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x1e, 0x95, 0xcd, 0x10, 0x12cf, 0x7111, 0x4808, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x84, 0xb}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0xac, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x2, "4afa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:21:50 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="e0", 0x1d1}], 0x131, 0x0)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="de1028cea9927e9780751c6307227da6310f573ccea8f44d6a43a45ebb", 0x1d}, {&(0x7f0000000040)="e6f91bc73240fe586bf45569020f07df0cccc07b7eb7c765d3a7ed7d62f4676ac4731b40d77d1951715a8c7b415515d98f5206d9a641c4a21c7e", 0x3a}, {&(0x7f0000000180)="4a575e0505270825b4d991d5953a9a561436feaba3bd94ff261b026b0ee94714e221ccda81801a4dff48ac8f5273389695d59144c82c0d8ce0a66f3a2fc711c33ad3afa0597b3ee7d0b531d05e7215caff87a0d21b7b04947d560c62d37191aaa24911a3c6c27cfb7bbb4807bdbff2178e7411b4e38836a58d40dac428597dc4dece58bf3257a0", 0x87}, {&(0x7f0000000280)="c16f5dfd88396a1f49f15d6db3fae873e5f08ba74005799419533bfd7e945118f764adee2526e8a6a69882b1b48704fa9de296284bdbcdb86736dfd4d434a51879f5cafe01717a1f51d62115b25e6c8f235dffe3398850abd34f91e30eb5e636683a2e9af548103811ac3c5ca22fca2adf0c12292d61c72c1479502b753a75bd1163bab3a5b9e5dbedd1b170b7efb2c4c54279a9c70ff7a747beaf3233fea01f7aa6d9c047e4cb15a9633648384cc2f0e9c33d25bfc45843e037f786ae8a571d45639301", 0xc4}, {&(0x7f0000000380)="6363b1e16ab6095151f57eea5ac434331406c190d61c8738f05fd8ce06be205f1c630596baf8434756d5a34dfc73d1", 0x2f}], 0x5, 0x0)

10:21:50 executing program 5:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @initdev}, 0xfffffffffffffe88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

10:21:50 executing program 2:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246)
ioctl$EVIOCGREP(r0, 0x8004745a, &(0x7f0000d1df52)=""/174)

[ 2215.683261][T11896] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 2215.923157][T11896] usb 1-1: Using ep0 maxpacket: 16
[ 2216.043246][T11896] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 2216.051629][T11896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2216.062008][T11896] usb 1-1: config 0 has no interface number 0
[ 2216.068289][T11896] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2216.079545][T11896] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=48.08
[ 2216.088722][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2216.098606][T11896] usb 1-1: config 0 descriptor??
10:21:51 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
write(r0, &(0x7f0000000580)="1b0000001e001f0214f9f4ff080000000000000000000000000001", 0x1b)

10:21:51 executing program 5:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x6d)
listen(r0, 0x0)
listen(r0, 0x0)

10:21:51 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040))
pipe(&(0x7f00000003c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200), 0x0)

10:21:51 executing program 3:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="e0", 0x1d1}], 0x131, 0x0)
vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="de1028cea9927e9780751c6307227da6310f573ccea8f44d6a43a45ebb", 0x1d}, {&(0x7f0000000040)="e6f91bc73240fe586bf45569020f07df0cccc07b7eb7c765d3a7ed7d62f4676ac4731b40d77d1951715a8c7b415515d98f5206d9a641c4a21c7e", 0x3a}, {&(0x7f0000000180)="4a575e0505270825b4d991d5953a9a561436feaba3bd94ff261b026b0ee94714e221ccda81801a4dff48ac8f5273389695d59144c82c0d8ce0a66f3a2fc711c33ad3afa0597b3ee7d0b531d05e7215caff87a0d21b7b04947d560c62d37191aaa24911a3c6c27cfb7bbb4807bdbff2178e7411b4e38836a58d40dac428597dc4dece58bf3257a0", 0x87}, {&(0x7f0000000280)="c16f5dfd88396a1f49f15d6db3fae873e5f08ba74005799419533bfd7e945118f764adee2526e8a6a69882b1b48704fa9de296284bdbcdb86736dfd4d434a51879f5cafe01717a1f51d62115b25e6c8f235dffe3398850abd34f91e30eb5e636683a2e9af548103811ac3c5ca22fca2adf0c12292d61c72c1479502b753a75bd1163bab3a5b9e5dbedd1b170b7efb2c4c54279a9c70ff7a747beaf3233fea01f7aa6d9c047e4cb15a9633648384cc2f0e9c33d25bfc45843e037f786ae8a571d45639301", 0xc4}, {&(0x7f0000000380)="6363b1e16ab6095151f57eea5ac434331406c190d61c8738f05fd8ce06be205f1c630596baf8434756d5a34dfc73d1", 0x2f}], 0x5, 0x0)

[ 2216.366722][T11896] radio-si470x 1-1:0.128: DeviceID=0x387a ChipID=0x5880
[ 2216.573798][T11896] radio-si470x 1-1:0.128: software version 56, hardware version 122
[ 2216.793399][T11896] radio-si470x 1-1:0.128: submitting int urb failed (-90)
[ 2217.893239][T11896] radio-si470x 1-1:0.128: si470x_set_report: usb_control_msg returned -71
[ 2217.902222][T11896] radio-si470x: probe of 1-1:0.128 failed with error -22
[ 2217.913671][T11896] usb 1-1: USB disconnect, device number 74
10:21:57 executing program 1:
unshare(0x20000)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
rmdir(&(0x7f00000000c0)='./file0\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = gettid()
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000540)='ns/mnt\x00')
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
dup2(r1, r3)

10:21:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x2, 0x6})

10:21:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000100)={0x7b, 0x0, [0x0, 0x0, 0x400000b7]})

10:21:57 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040))
pipe(&(0x7f00000003c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200), 0x0)

10:21:57 executing program 0:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0xa, 0x802, 0x88)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b408000000fab771172119000020002000004e5e0000388022"], 0x38}, 0x8000)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xe803}], 0x1}, 0x0)

10:21:57 executing program 0:
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x26, 0xfe, 0xd4, 0x8, 0x72f, 0x2200, 0x91d0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x95, 0x0, 0x2, 0xb, 0xc8, 0x29, 0x0, [], [{{0x9, 0x5, 0x1, 0x12}}, {{0x9, 0x5, 0x8c}}]}}]}}]}}, 0x0)

10:21:57 executing program 5:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0xa4, 0xb2, 0x10, 0x4b3, 0x4001, 0x110, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x11, 0xcb, 0xd4}}]}}]}}, 0x0)

10:21:57 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040))
pipe(&(0x7f00000003c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200), 0x0)

10:21:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')

[ 2223.103305][T11896] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 2223.183286][T23921] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2223.343371][T11896] usb 1-1: Using ep0 maxpacket: 8
[ 2223.433127][T23921] usb 6-1: Using ep0 maxpacket: 16
[ 2223.463374][T11896] usb 1-1: config 0 has an invalid interface number: 149 but max is 0
[ 2223.471685][T11896] usb 1-1: config 0 has no interface number 0
[ 2223.478340][T11896] usb 1-1: config 0 interface 149 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2223.488379][T11896] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=91.d0
[ 2223.497664][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
10:21:58 executing program 4:
unshare(0x40400)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20001, 0x0)
preadv(r0, 0x0, 0x0, 0x0)

10:21:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071")
r1 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x375, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

10:21:58 executing program 2:
prlimit64(0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$vsock_dgram(0x28, 0x2, 0x0)
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x2080080040045010, &(0x7f0000000040))
pipe(&(0x7f00000003c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200), 0x0)

[ 2223.508343][T11896] usb 1-1: config 0 descriptor??
[ 2223.554563][T11896] pn533_usb 1-1:0.149: NFC: Could not find bulk-in or bulk-out endpoint
[ 2223.583485][T23921] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[ 2223.592658][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2223.606060][ T2042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2223.630355][T23921] usb 6-1: config 0 descriptor??
[ 2223.680257][T23921] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 2223.713414][T23921] usb-storage 6-1:0.0: Quirks match for vid 04b3 pid 4001: 2000
[ 2223.775090][T23921] usb 1-1: USB disconnect, device number 75
[ 2223.880881][T11896] usb 6-1: USB disconnect, device number 83
[ 2224.553010][T11896] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2224.653175][T23921] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2224.793028][T11896] usb 1-1: Using ep0 maxpacket: 8
[ 2224.893141][T23921] usb 6-1: Using ep0 maxpacket: 16
[ 2224.913339][T11896] usb 1-1: config 0 has an invalid interface number: 149 but max is 0
[ 2224.921558][T11896] usb 1-1: config 0 has no interface number 0
[ 2224.927955][T11896] usb 1-1: config 0 interface 149 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2224.938133][T11896] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=91.d0
[ 2224.947343][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2224.957069][T11896] usb 1-1: config 0 descriptor??
[ 2224.994618][T11896] pn533_usb 1-1:0.149: NFC: Could not find bulk-in or bulk-out endpoint
[ 2225.033286][T23921] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[ 2225.042440][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2225.052461][T23921] usb 6-1: config 0 descriptor??
[ 2225.096534][T23921] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 2225.106145][T23921] usb-storage 6-1:0.0: Quirks match for vid 04b3 pid 4001: 2000
[ 2225.195457][T23921] usb 1-1: USB disconnect, device number 76
[ 2225.295036][T11896] usb 6-1: USB disconnect, device number 84
10:22:06 executing program 2:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0x0)

10:22:06 executing program 1:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000280)=[@dontfrag={{0x14}}, @flowinfo={{0x14}}, @hoplimit={{0x14}}, @hopopts_2292={{0x148, 0x29, 0x36, {0x0, 0x25, [], [@ra, @generic={0x0, 0xca, "11c05f28f33b30c4bea2edae56254ee664d1ad8b5096f15e87c0a6930ee0473c2effc29f7bd92eb554ac64fa211555b7de3da77da788b5ebfb11fa90c3c36a2924702862677b7210791deb48751feaca12d621c9aec5ab22ea849f1a51acd67e101eba381d2ac33a91e1fd3aacd442992e0275f12889ecdaf767977ab066a2ae3657c5826cc1bcbf9c1f1e1cdc91d33eb31c000be915bd32dfc58f6f02578a7b342cce453d7bed66f72ed08c87f6c4906fd32dcfb5dd504126276cfbde57096e2558c403d7e2ff982149"}, @ra, @enc_lim, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dontfrag={{0x14}}, @flowinfo={{0x14}}, @tclass={{0x14}}, @hoplimit_2292={{0x14}}], 0x2dc}}], 0x2, 0x0)

10:22:06 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000b51000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x6)
lstat(0x0, 0x0)

10:22:06 executing program 0:
r0 = socket$inet(0x2, 0x200000002, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
syz_emit_ethernet(0x140, &(0x7f00003f3fd5)={@random="7525820aedb8", @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0)

10:22:06 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x0, 0x1, {0x4, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}})

10:22:06 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002740)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="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", 0xfb0}, {0x0}], 0x3}, {0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@iv={0x18}, @iv={0x18}, @iv={0x18}], 0x48}], 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8)
socket$inet(0x2, 0x3, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

10:22:07 executing program 2:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0x0)

10:22:07 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0)='?de\x00', 0x0, 0x10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, 0x0)
creat(0x0, 0xc8)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/148)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0)

10:22:07 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r1 = socket$l2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0)

10:22:07 executing program 2:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0x0)

10:22:07 executing program 2:
unshare(0x400)
r0 = socket$unix(0x1, 0x2, 0x0)
shutdown(r0, 0x0)

10:22:07 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0)='?de\x00', 0x0, 0x10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, 0x0)
creat(0x0, 0xc8)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/148)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0)

10:22:07 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x2000100000000d, 0x0, "1700174700"})

10:22:16 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x50)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

10:22:16 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x34}}, 0x0)

10:22:16 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0)='?de\x00', 0x0, 0x10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, 0x0)
creat(0x0, 0xc8)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/148)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0)

10:22:16 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'eyz'}, &(0x7f0000000a80), 0xfffffffffffffffd)

10:22:16 executing program 4:
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

10:22:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0)

10:22:16 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'eyz'}, &(0x7f0000000a80), 0xfffffffffffffffd)

10:22:16 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
unshare(0x400)
ioctl$UI_DEV_SETUP(r0, 0x4008556c, 0x0)

10:22:16 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$kcm(0x29, 0x2, 0x0)
setrlimit(0x1000000000000007, &(0x7f000068d000))
accept4(r3, 0x0, 0x0, 0x0)

10:22:16 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'eyz'}, &(0x7f0000000a80), 0xfffffffffffffffd)

10:22:16 executing program 0:
syz_open_dev$dri(&(0x7f00000000c0)='?de\x00', 0x0, 0x10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x7, 0x0)
creat(0x0, 0xc8)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/148)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0xae, 0x0)

10:22:16 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = fcntl$dupfd(r1, 0x0, r0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x1ed, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0)

10:22:16 executing program 5:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4d, 0x10, 0xc3, 0x10, 0x45ba, 0x92dc, 0x5ce, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0)

[ 2241.943111][T11896] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2242.182995][T11896] usb 6-1: Using ep0 maxpacket: 16
[ 2242.303309][T11896] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 2242.311563][T11896] usb 6-1: config 0 has no interface number 0
[ 2242.318031][T11896] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2242.327879][T11896] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[ 2242.337955][T11896] usb 6-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 2242.347136][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.356955][T11896] usb 6-1: config 0 descriptor??
[ 2242.395248][T11896] usbtmc: probe of 6-1:0.8 failed with error -22
[ 2242.596504][T11978] usb 6-1: USB disconnect, device number 85
[ 2243.383110][T11978] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2243.623008][T11978] usb 6-1: Using ep0 maxpacket: 16
[ 2243.743330][T11978] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 2243.751400][T11978] usb 6-1: config 0 has no interface number 0
[ 2243.757726][T11978] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2243.767527][T11978] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0
[ 2243.777488][T11978] usb 6-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce
[ 2243.786713][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2243.796348][T11978] usb 6-1: config 0 descriptor??
[ 2243.835458][T11978] usbtmc: probe of 6-1:0.8 failed with error -22
[ 2244.035631][T11978] usb 6-1: USB disconnect, device number 86
10:22:23 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x5, 0x0, @buffer={0x10e, 0x0, 0x0}, &(0x7f0000000080)="0008e40200", 0x0, 0xfffffffe, 0x0, 0x0, 0x0})

10:22:23 executing program 3:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'eyz'}, &(0x7f0000000a80), 0xfffffffffffffffd)

10:22:23 executing program 2:
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x3, 0x0, "1b45206a81d2707f8b1faf932c84f3d137fdb5eb0db3cc42254d7cc216b1ec1e"})

10:22:23 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00')
preadv(r2, &(0x7f00000017c0), 0x199, 0x0)

10:22:23 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x40}}, 0x0)

10:22:23 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2000031a, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000240)=""/195}, 0x26)

10:22:23 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0)
r0 = socket$inet(0x10, 0x802, 0x0)
sendmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x3b}}], 0x2, 0x0)

10:22:23 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xdc, 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020bd90102000000000053511c3b2da3"], 0x10}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x100000029, &(0x7f0000000140)=0xe0, 0x4)
recvmmsg(r0, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400})

10:22:23 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x3581)
close(r0)

10:22:23 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x0, 0x0)

10:22:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x14, &(0x7f0000000140), 0x8)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
r6 = dup2(r0, r5)
dup3(r6, r1, 0x0)

10:22:23 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0xff, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x800, 0x0, 0xff}, 0x20)

10:22:30 executing program 1:
r0 = epoll_create1(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x40000001})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

10:22:30 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0)

10:22:30 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000040)=0xc000fff, 0x8)

10:22:30 executing program 5:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0xffffffffffffff2f, 0x0}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000002c0020fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0)

10:22:30 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0)

10:22:30 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@random="cd3997030f02", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "e70600", 0x44, 0x2f, 0x0, @local, @mcast2, {[], @gre}}}}}, 0x0)

10:22:30 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000000)=0x84a, 0x314)
setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000000)=0x84d, 0x4)

10:22:30 executing program 0:
unshare(0x400)
r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0385720, &(0x7f00000000c0))

10:22:30 executing program 5:
r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001)
remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0)

10:22:30 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0xe487aa1e5c003355)
write$P9_RATTACH(r0, &(0x7f0000000200)={0x14}, 0x14)

10:22:30 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x78}}, 0x0)

10:22:31 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000000080)=""/4096, &(0x7f00000011c0)=0x1000)

10:22:39 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x2a}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @dev}, "c8e354c5810e9503"}}}}}, 0x0)

10:22:39 executing program 4:
unshare(0x20400)
r0 = syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$BLKRAGET(r0, 0x1263, 0x0)

10:22:39 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0x4, &(0x7f0000000b00))

10:22:39 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

10:22:39 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a600000ffa84308910000003900070008000c0001f3da1a51726ca2c407b5950000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de", 0x55}], 0x1}, 0x0)

10:22:39 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e5d070bb020000000501"], 0xa)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

10:22:40 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00sy\x005\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000300)='threaded\x00', 0x9)

10:22:40 executing program 0:
r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r0, 0x1, 0x21033831, 0x1, 0x0, 0x0)

10:22:40 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x2a}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @dev}, "c8e354c5810e9503"}}}}}, 0x0)

10:22:40 executing program 2:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000040086000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0)

10:22:40 executing program 5:
r0 = syz_open_dev$sndtimer(&(0x7f0000000680)='/dev/snd/timer\x00', 0x0, 0x0)
unshare(0x8000400)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, 0x0)

10:22:40 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x2a}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @dev}, "c8e354c5810e9503"}}}}}, 0x0)

[ 2265.217963][ T2297] bridge: RTM_NEWNEIGH with invalid state 0x4
10:22:40 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x2a}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @dev}, "c8e354c5810e9503"}}}}}, 0x0)

10:22:47 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0x1}, 0x10000000073, 0x4})
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
r1 = dup2(r0, r0)
ioctl$VIDIOC_QUERYBUF(r1, 0xc004500a, &(0x7f0000000140)={0xc, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'W;Ye'}, 0x0, 0x0, @offset, 0x4})

10:22:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x00\x0f\x00', &(0x7f0000000200)=@ethtool_ringparam={0xf}})

10:22:47 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e5d070bb020000000501"], 0xa)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

10:22:47 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5)

10:22:47 executing program 0:
r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r0, 0x1, 0x21033831, 0x1, 0x0, 0x0)

10:22:47 executing program 4:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/98, 0x0, 0x1000}, 0x18)

10:22:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x4051, r2, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x7}}}, 0x78)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:22:47 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x76, &(0x7f0000000100)={r2}, 0x8)

10:22:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x4051, r2, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x7}}}, 0x78)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:22:47 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x4051, r2, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x7}}}, 0x78)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:22:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x4051, r2, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x7}}}, 0x78)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:22:48 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:48 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:51 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e5d070bb020000000501"], 0xa)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

10:22:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:51 executing program 0:
r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r0, 0x1, 0x21033831, 0x1, 0x0, 0x0)

10:22:52 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYBLOB="c9"], 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:22:52 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x20000000000000a, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000dbb000), &(0x7f0000000000)=0x4)

10:22:52 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:52 executing program 0:
r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
io_uring_enter(r0, 0x1, 0x21033831, 0x1, 0x0, 0x0)

10:22:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x80045530, 0x0)

10:22:52 executing program 3:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x32314d4e, 0xf00, 0x870, 0x0, @stepwise})

10:22:52 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/97, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/156, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0x0, 0xbe, &(0x7f0000000140)=""/190}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000040)=ANY=[])

10:22:52 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000700)={0xf})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040))
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8)

10:23:00 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="580000001400ad", 0x7}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="e5d070bb020000000501"], 0xa)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

10:23:00 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

10:23:00 executing program 5:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00')
setns(r0, 0x0)

10:23:01 executing program 4:
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000000)=[{}, {0x25}, {0x6, 0x0, 0x0, 0x7fffffff}]})

10:23:01 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

10:23:01 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x8, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0})

10:23:01 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:01 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000004c0)={0x0, 0x265})

10:23:01 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

10:23:01 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
unshare(0x400)
fsync(r0)

10:23:02 executing program 5:
r0 = socket(0x2000000000000010, 0x3, 0x0)
write(r0, &(0x7f0000000140)="2400000032001f0014f9f40700090400020007100c000100040000000800000000ccecbf", 0x24)

10:23:02 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[ 2286.984405][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2286.994278][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2287.010501][T11978] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 2287.125570][T23921] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2287.253094][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2287.373313][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2287.373409][T11978] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2287.373488][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2287.493490][T23921] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[ 2287.501787][T23921] usb 1-1: config 0 has no interface number 0
[ 2287.508217][T23921] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[ 2287.517398][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2287.527429][T23921] usb 1-1: config 0 descriptor??
[ 2287.763302][T11978] usb 4-1: palm_os_3_probe - error -110 getting connection information
[ 2287.771872][T11978] visor: probe of 4-1:1.0 failed with error -110
[ 2288.003083][T23921] airspy 1-1:0.131: Board ID: 00
[ 2288.008169][T23921] airspy 1-1:0.131: Firmware version: 
[ 2289.094622][T23921] airspy 1-1:0.131: Registered as swradio16
[ 2289.100685][T23921] airspy 1-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[ 2289.117477][T11978] usb 4-1: USB disconnect, device number 102
[ 2289.296598][T23921] usb 1-1: USB disconnect, device number 77
[ 2290.073174][T23921] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2290.313048][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2290.433159][T23921] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[ 2290.443035][T23921] usb 1-1: config 0 has no interface number 0
[ 2290.449291][T23921] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice= 3.1c
[ 2290.458586][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2290.468105][T23921] usb 1-1: config 0 descriptor??
[ 2290.773258][T23921] airspy 1-1:0.131: Board ID: 00
[ 2290.778353][T23921] airspy 1-1:0.131: Firmware version: 
[ 2290.825059][T23921] airspy 1-1:0.131: usb_control_msg() failed -71 request 11
[ 2290.839219][T23921] airspy 1-1:0.131: Registered as swradio16
[ 2290.846018][T23921] airspy 1-1:0.131: SDR API is still slightly experimental and functionality changes may follow
[ 2290.879834][T23921] usb 1-1: USB disconnect, device number 78
10:23:10 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x420000a77, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000000))
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)
fcntl$setpipe(r1, 0x408, 0x0)
r3 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000013)

10:23:10 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x2c, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0)

10:23:10 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x476)
setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

10:23:11 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
statx(r0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000200))

10:23:11 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:11 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:11 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20)

10:23:11 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10)
write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071010000100feffffff0800000000000000", 0x24)

10:23:11 executing program 5:
r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x0, 0x3e})

10:23:11 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000000)=0x2)

10:23:11 executing program 5:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x0, 0x0, 0x0, 0x2000000000002)
mincore(&(0x7f00009d9000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/56)
socket$inet(0x2, 0x0, 0x0)

10:23:11 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000000)=0x2)

[ 2296.303374][T11978] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 2296.413582][T23921] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2296.543230][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2296.663196][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2296.663335][T11978] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2296.677448][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.793406][T23921] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2296.802555][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2297.043404][T11978] usb 4-1: palm_os_3_probe - error -110 getting connection information
[ 2297.051840][T11978] visor: probe of 4-1:1.0 failed with error -110
[ 2297.183482][T23921] usb 1-1: palm_os_3_probe - error -110 getting connection information
[ 2297.191954][T23921] visor: probe of 1-1:1.0 failed with error -110
[ 2297.212680][T11896] usb 1-1: USB disconnect, device number 79
[ 2297.222346][T23921] usb 4-1: USB disconnect, device number 103
10:23:19 executing program 1:
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00), 0x24, 0x0)
r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0)

10:23:19 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000000)=0x2)

10:23:19 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
prctl$PR_CAPBSET_READ(0x17, 0x0)

10:23:19 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:19 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:19 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi})
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff}, 0xc446d000a917e37d)
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}})
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000340)=""/255)
r3 = gettid()
syz_open_procfs(r3, &(0x7f0000000040)='loginuid\x00')
ptrace$cont(0x3, r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x40000000)

10:23:19 executing program 5:
r0 = socket$inet6(0xa, 0x801, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x24, 0x6, 0x0, @remote, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0x8}]}}}}}}}}, 0x0)

10:23:19 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff})
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8953, &(0x7f0000000000)=0x2)

[ 2304.658240][ T2552] net_ratelimit: 13 callbacks suppressed
[ 2304.658273][ T2552] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
10:23:19 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffae}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfeb8, &(0x7f000000cf3d)=""/195}, 0x48)

10:23:19 executing program 5:
syz_usb_connect(0x0, 0x24f, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0xfb, 0xb9, 0x30, 0x10, 0x424, 0x9d00, 0xb49, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0x68, 0xd8}}]}}]}}, 0x0)

10:23:19 executing program 2:
r0 = socket$inet(0x2, 0x6000000000000003, 0x6)
sendto$inet(r0, &(0x7f0000000100)="dd", 0x1, 0x4009c30, &(0x7f00000001c0), 0x10)

[ 2304.840253][T11978] usb 4-1: new high-speed USB device number 104 using dummy_hcd
10:23:20 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x20, 0x40000000003a, 0x43ff, @rand_addr="7c75cb47ad0e73292a4ec8119fcd69de", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local, [{0x2, 0x1, "86d8f1880d83"}]}}}}}}, 0x0)

[ 2304.953620][T23921] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2304.984255][ T2570] ICMPv6: NA: aa:aa:aa:aa:aa:aa advertised our address fe80::aa on syz_tun!
[ 2305.093558][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2305.163110][T12117] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2305.193196][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2305.213512][T11978] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2305.222754][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.313307][T23921] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2305.322545][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.433383][T12117] usb 6-1: Using ep0 maxpacket: 16
[ 2305.553349][T12117] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 2305.562648][T12117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.572657][T12117] usb 6-1: config 0 descriptor??
[ 2305.614164][T11978] usb 4-1: palm_os_3_probe - error -110 getting connection information
[ 2305.622980][T11978] visor: probe of 4-1:1.0 failed with error -110
[ 2305.693694][T23921] usb 1-1: palm_os_3_probe - error -110 getting connection information
[ 2305.702179][T23921] visor: probe of 1-1:1.0 failed with error -110
[ 2305.715436][T23921] usb 1-1: USB disconnect, device number 80
[ 2305.833353][T12117] smscufx: Failed to read register index 0x00003000
[ 2305.840056][T12117] smscufx: error -71 reading 0x3000 register from device
[ 2305.840820][T12117] smscufx: probe of 6-1:0.0 failed with error -71
[ 2305.865285][T12117] usb 6-1: USB disconnect, device number 87
[ 2305.925877][T11978] usb 4-1: USB disconnect, device number 104
[ 2306.583388][T23921] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 2306.823104][T23921] usb 6-1: Using ep0 maxpacket: 16
[ 2306.953447][T23921] usb 6-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice= b.49
[ 2306.962712][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.988696][T23921] usb 6-1: config 0 descriptor??
[ 2307.263463][T23921] smscufx: Failed to read register index 0x00003000
[ 2307.270178][T23921] smscufx: error -71 reading 0x3000 register from device
[ 2307.270929][T23921] smscufx: probe of 6-1:0.0 failed with error -71
[ 2307.289946][T23921] usb 6-1: USB disconnect, device number 88
10:23:24 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
timer_create(0xfffffffffffffffc, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
timer_gettime(0x0, &(0x7f0000000040))

10:23:24 executing program 2:
syz_usb_connect(0x1, 0x365, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0x12, 0xb8, 0x8, 0xe9c, 0x0, 0xc70e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf4, 0xf4, 0x81, 0x0, [], [{{0x9, 0x5, 0x8c, 0x3, 0xfffe}}]}}]}}]}}, 0x0)

10:23:24 executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x907, 0x1)
syz_usb_connect(0x0, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x8d, 0x53, 0x100000008, 0x82d, 0x100, 0x87c2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x89, 0xa3, 0x52}}]}}]}}, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0)

10:23:24 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)='\x00\x00', 0x2}], 0x1, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246)
ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174)

[ 2309.893282][T23921] usb 3-1: new low-speed USB device number 47 using dummy_hcd
[ 2309.923126][T11978] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 2309.993057][T11896] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2310.163052][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2310.243134][T11896] usb 1-1: Using ep0 maxpacket: 8
[ 2310.253687][T23921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 2310.264948][T23921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8
[ 2310.275984][T23921] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e
[ 2310.283385][T11978] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2310.285206][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.294363][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.304434][T23921] usb 3-1: config 0 descriptor??
[ 2310.360420][T23921] Registered IR keymap rc-streamzap
[ 2310.366873][T23921] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 2310.381406][T23921] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input109
[ 2310.398500][T23921] streamzap 3-1:0.0: Registered  on usb3:47
[ 2310.413549][T11896] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=87.c2
[ 2310.422792][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.559805][T12117] usb 3-1: USB disconnect, device number 47
[ 2310.573179][    C0] streamzap 3-1:0.0: urb terminated, status: -108
[ 2310.673734][T11978] usb 4-1: palm_os_3_probe - error -110 getting connection information
[ 2310.682255][T11978] visor: probe of 4-1:1.0 failed with error -110
[ 2310.803294][T11896] usb 1-1: palm_os_3_probe - error -110 getting connection information
[ 2310.811902][T11896] visor: probe of 1-1:1.0 failed with error -110
[ 2310.825975][T11896] usb 1-1: USB disconnect, device number 81
[ 2311.035528][T12117] usb 4-1: USB disconnect, device number 105
[ 2311.333464][T11896] usb 3-1: new low-speed USB device number 48 using dummy_hcd
[ 2311.695064][T11896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 2311.706404][T11896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 2046, setting to 8
[ 2311.717462][T11896] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=c7.0e
[ 2311.726989][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2311.736887][T11896] usb 3-1: config 0 descriptor??
[ 2311.777516][T11896] Registered IR keymap rc-streamzap
[ 2311.784120][T11896] rc rc0: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 2311.798253][T11896] input: Streamzap PC Remote Infrared Receiver (0e9c:0000) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input110
[ 2311.815278][T11896] streamzap 3-1:0.0: Registered  on usb3:48
[ 2311.975115][T12117] usb 3-1: USB disconnect, device number 48
[ 2311.993036][    C0] streamzap 3-1:0.0: urb terminated, status: -108
10:23:28 executing program 4:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)={{}, "19c95df6fc"}, 0x25)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:23:28 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "0144cd0250f34ca7b07915472cd0719e13da163aaf4d978c8c8df1f45a29570e701824fbbd9e1ca4f565138b96f339a5f67c36d6d24b0bf255a5caaf6e5521072ff76b84fa3f0865bf669c750e19842e0f8ea8d15cf45827268b2d2a46b7dcb62f1324ff936f9ef9fd172f610b69d8ff0f8cfb906e6ded837e0f5975172bf2fe880c5b30a6affbb7acfb123974fb65ac6f2e86a6ef52fb99dafd3bb78b75e3fb04768ab142593285c9b774d73aa1bd208eb596eadac041aa80714bce08b5b8af68d9465d32d05809eff8a6cc23d94208a002462d733e623640a0ba4a083ce1ae9d5b36c946d727b792807b123e4e1380ec24576947cbe60f6fb5fe9576730ecb"}}, 0x110)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x40000000)

10:23:28 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})

10:23:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))

10:23:28 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105502, 0x0)

10:23:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c9f3cd3e"], 0x1}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2313.983114][ T2615] IPVS: ftp: loaded support on port[0] = 21
10:23:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})

10:23:31 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '.em0cgroup@wlan1proc//&\'+\x00'}, 0x1c)

10:23:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))

10:23:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})

10:23:31 executing program 2:
unshare(0x20400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x37)

10:23:31 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f0000000440)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 2317.113211][T11896] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 2317.353234][T11896] usb 6-1: Using ep0 maxpacket: 8
[ 2317.473321][T11896] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[ 2317.482672][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2317.492357][T11896] usb 6-1: config 0 descriptor??
[ 2317.973235][T11896] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 2318.399799][T11896] usb 6-1: USB disconnect, device number 89
[ 2318.945706][   T30] audit: type=1400 audit(1571912614.004:33): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=".em0cgroup@wlan1proc//&" pid=2637 comm="syz-executor.1"
[ 2319.173088][T11896] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 2319.413092][T11896] usb 6-1: Using ep0 maxpacket: 8
[ 2319.533460][T11896] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[ 2319.542675][T11896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2319.552729][T11896] usb 6-1: config 0 descriptor??
[ 2319.853415][T11896] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 2319.936888][T11896] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71)
[ 2319.945611][T11896] gs_usb: probe of 6-1:0.0 failed with error -71
[ 2319.963947][T11896] usb 6-1: USB disconnect, device number 90
10:23:38 executing program 4:
syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x67, 0xfe, 0xa1, 0x40, 0x1235, 0x10, 0xbd18, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x0, 0x0, 0xb6, 0x66, 0x14}}]}}]}}, 0x0)

10:23:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))

10:23:38 executing program 2:
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)={0x0, 0x0, 0x3, "7f81b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:23:38 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f0000000440)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:23:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})

10:23:38 executing program 0:
mknod(&(0x7f0000000140)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0xc0401, 0x0)

10:23:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))

[ 2323.403538][T11896] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2323.443858][T23921] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 2323.643060][T11896] usb 3-1: Using ep0 maxpacket: 32
[ 2323.683291][T23921] usb 6-1: Using ep0 maxpacket: 8
[ 2323.763429][T11896] usb 3-1: config 0 has an invalid interface number: 179 but max is 0
[ 2323.771926][T11896] usb 3-1: config 0 has no interface number 0
[ 2323.778429][T11896] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e
[ 2323.789499][T11896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2323.802294][T11896] usb 3-1: config 0 descriptor??
[ 2323.833610][T23921] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[ 2323.842744][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2323.855634][T23921] usb 6-1: config 0 descriptor??
10:23:38 executing program 1:
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x10d, 0x8000000004, 0x0, 0x0)

10:23:38 executing program 3:
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e048bdfc66a909be38e1127baae09a26c08d0153bd5a49d6748f6c07d75cc2e7eb4367b92abf90b9a39bf8fabddb4b79515fc7194d4df5a0118ca46b1513277f9814b7e341f616a3636d3955333aa7a", 0xd1, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}})

10:23:39 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x4, [0x40000108, 0x0, 0x40000084], [0x3a]})

10:23:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9)
write$binfmt_script(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="03df358b506d6cafc3d31b9573281e87b9d9e03aaade5d7515b73820d2fd72f3c0f7916faff17a4248bd8378ff0d9ff969ea0f351f46a21ca8077f54e4d9973dec1ff001664975f2cb87f71fe734861ef868abdd2005e4a0bef70eee74143987e52c8299fe07ac3613127bea40dc83c27c9d1373965c7764339f396c3befc406a6d396db1b1db182a5ba417a6c4879b5111c64", @ANYRES64, @ANYRESOCT, @ANYBLOB="7d6eefa92389a0a81bfbcbf2462e2bcb7b9c02504e058f"], 0xc9)
sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0)

[ 2324.073766][T11896] rtl8192cu: Chip version 0x0
10:23:39 executing program 0:
mknod(&(0x7f0000000140)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0xc0401, 0x0)

10:23:39 executing program 3:
unshare(0x40600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)

[ 2324.295982][T11896] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1
[ 2324.334138][T23921] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 2324.498680][T11896] usb 3-1: USB disconnect, device number 49
[ 2324.763775][T11896] usb 6-1: USB disconnect, device number 91
[ 2325.283162][T23921] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2325.543167][T23921] usb 3-1: Using ep0 maxpacket: 32
[ 2325.663488][T23921] usb 3-1: config 0 has an invalid interface number: 179 but max is 0
[ 2325.671779][T23921] usb 3-1: config 0 has no interface number 0
[ 2325.678128][T23921] usb 3-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e
[ 2325.687537][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.697687][T23921] usb 3-1: config 0 descriptor??
[ 2325.963312][T23921] rtl8192cu: Chip version 0x0
[ 2326.003280][T23921] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1
[ 2326.149236][T23921] usb 3-1: USB disconnect, device number 50
10:23:45 executing program 0:
mknod(&(0x7f0000000140)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0xc0401, 0x0)

10:23:45 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00001c6000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000689000/0x3000)=nil)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

10:23:45 executing program 4:
r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, r0)

10:23:45 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f0000000440)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:23:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0)

10:23:45 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0)

[ 2330.635108][T23921] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 2330.883172][T23921] usb 6-1: Using ep0 maxpacket: 8
[ 2331.013734][T23921] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[ 2331.023041][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2331.036613][T23921] usb 6-1: config 0 descriptor??
10:23:46 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000001440)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xffffffffffffff80}})

10:23:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0)

10:23:46 executing program 0:
mknod(&(0x7f0000000140)='./bus\x00', 0x2000000000001003, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x20000000000b04, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0xc0401, 0x0)

10:23:46 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfff2)
recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/38, 0x26}], 0x1}}], 0x1, 0x0, 0x0)

10:23:46 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

10:23:46 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 2331.513938][T23921] gs_usb 6-1:0.0: Configuring for 1 interfaces
10:23:46 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

[ 2331.940632][T23921] usb 6-1: USB disconnect, device number 92
10:23:54 executing program 4:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix_mp={0x0, 0x0, 0x32315659}})

10:23:54 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @rand_addr="520941fd90f0be3a2c4fcd7b234a4d5f"}, 0x1c)

10:23:54 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0afc21be2900000047e2252cb7882b9abb2a2f9fb9399e0400c33f00102b0200000089da006a001499b2d1b3a4952f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

10:23:54 executing program 5:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0xac, &(0x7f0000000440)={0x0, 0x0, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:23:54 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x400, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$nbd(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="6744b5df8330800000000000000000006517a42ac4cb7a63d1a97a7e5a5b262420a68931524e892eac4023b714a3202f99f16d060a35ffd21affe238385d4de98c35d691bbffd22502bb2491e68df03f797bff46ffc639efef4a7cc3837f3131e1d5d01bd813189a8de6ce1081b67911ebfb8480a73de97982457cff98fd6e2cdfddf1be8c3d578c2e66b39d29237394f6e2c709fbf78fec77d9609d9edbd28ec5e5a112ba1131437b64766049e04079d3eb31da75370080b03262fede59e1babf8d7415897070eb5248c4c336343a4f8701fb6c5d130e934b9fca2104e03e62f914917e06b675d994e2a545bf50281903781b165e1ee54c2a21b376f1b1c6e611638cb8ae38d972fa947044b27a2a4a7dfa201e9ae6f2073f8e100df5abc22f483841257531635f504e0a178523b8ced9eddac268ab0c2e5ca91b923ce33e2f44e1bf1f81ef6d6536b55976b8c01adf2842510f639916404ed367014e13d4892d78c9c9342c6295e514d55473e8046b151df7ac910619e0f776c6ff7435f7d8a4e3196492383b8f704f2babac1c11a6ce11c777fe7343bf31000001000000000093a764ca702a864e88c8368740002e1b23190b03e5f2855d327aa570235ec0d0ec20bab141454cffc3203df5cdfb798dc3a66094e76230b97eead732e782897e0a6d4bbd130f69a4013aa192def819c20d00c8eb7c3cea241d9d82b6b6205a83f9f43fb18bfcf3edb4653f993cfd0995e8a488a0dd26729eb8b2faea4b64d9d936be95c51826c5bb2917789b13a5c9c917643101ae981d276e59b5fcc01274e3464b44e91af89266a043788cbc5fbe2826dfe0d437e8e725120b65777cf0d4002e2163a6a175b238205465896c7b36c60cf22126ad569d624f06047ac464f38764978d46edad53149a34f68eedeee264307b651d143ede729e83e7dd4570718514c1"], 0x45)
sendfile(r2, r2, &(0x7f0000000200), 0xa198)

[ 2339.893226][T11978] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 2340.143098][T11978] usb 6-1: Using ep0 maxpacket: 8
[ 2340.263426][T11978] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb
[ 2340.272551][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2340.282187][T11978] usb 6-1: config 0 descriptor??
10:23:55 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:23:55 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d54400009b84132000000083de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600", 0x48}], 0x1}, 0x0)
r1 = socket(0x10, 0x200080002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

10:23:55 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-6:6'], 0x5)

10:23:55 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0afc21be2900000047e2252cb7882b9abb2a2f9fb9399e0400c33f00102b0200000089da006a001499b2d1b3a4952f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

[ 2340.518599][ T2808] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'.
10:23:55 executing program 3:
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000040), &(0x7f0000000000)={0x7}, 0x0, &(0x7f0000000ff8)={0x0, 0x989680}, &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8})

[ 2340.595130][ T2817] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'.
10:23:55 executing program 3:
unshare(0x400)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x14)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)

10:23:55 executing program 2:
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
exit(0x0)
sendfile(r0, r0, 0x0, 0x1)

[ 2340.763558][T11978] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 2341.194657][T23921] usb 6-1: USB disconnect, device number 93
10:24:01 executing program 4:
r0 = socket(0x40000000000001e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/59, 0x3b}}], 0x1, 0x0, 0x0)

10:24:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r1, &(0x7f0000000080)="240000001a005f0014f9f4070009040002000000000000225a0000000800190000000000", 0x24)

10:24:01 executing program 2:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00\xd7\xb1\x00\x00\x00\xe4\xff\x01\x00', 0x3c1, 0x1, 0x4, [0x200006c0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00']}, 0x7c)

10:24:01 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0)

10:24:01 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0afc21be2900000047e2252cb7882b9abb2a2f9fb9399e0400c33f00102b0200000089da006a001499b2d1b3a4952f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

10:24:02 executing program 1:
unshare(0x28020400)
r0 = memfd_create(&(0x7f0000000200)='\x00\xeb\x00\x00\x00\x00\x00\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8))
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0x0)

10:24:02 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0)

10:24:02 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe4, 0x97, 0x9d, 0x8, 0xc45, 0x6040, 0x9368, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb6, 0x0, 0x0, 0x6c, 0x94, 0x40}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

10:24:02 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="6d047c005d52994c0afc21be2900000047e2252cb7882b9abb2a2f9fb9399e0400c33f00102b0200000089da006a001499b2d1b3a4952f36def66e54e4c909c01e8c4e61f8a0e814f7e2acdd0063c7caa4"], 0x2)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x5)
wait4(0x0, 0x0, 0x0, 0x0)

10:24:02 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80, 0xfffffffffffffffd}, 'port0\x00\x00\x00\x00\x02\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port1\x00'})

10:24:02 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000100)='/dev/nbd#\x00', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}}}, 0x48)

10:24:02 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0)

[ 2347.940097][T11978] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 2348.183117][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2348.303490][T11978] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[ 2348.311756][T11978] usb 4-1: config 0 has no interface number 0
[ 2348.318176][T11978] usb 4-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68
[ 2348.327457][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2348.337291][T11978] usb 4-1: config 0 descriptor??
[ 2348.378208][T11978] gspca_main: sonixj-2.14.0 probing 0c45:6040
[ 2349.683308][T11978] gspca_sonixj: reg_w1 err -71
[ 2349.688299][T11978] sonixj: probe of 4-1:0.182 failed with error -71
[ 2349.705400][T11978] usb 4-1: USB disconnect, device number 106
[ 2350.433232][T23921] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 2350.673589][T23921] usb 4-1: Using ep0 maxpacket: 8
[ 2350.793296][T23921] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[ 2350.801543][T23921] usb 4-1: config 0 has no interface number 0
[ 2350.808003][T23921] usb 4-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=93.68
[ 2350.817414][T23921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2350.827406][T23921] usb 4-1: config 0 descriptor??
[ 2350.867928][T23921] gspca_main: sonixj-2.14.0 probing 0c45:6040
[ 2351.193370][T23921] gspca_sonixj: reg_w1 err -71
[ 2351.198431][T23921] sonixj: probe of 4-1:0.182 failed with error -71
[ 2351.208207][T23921] usb 4-1: USB disconnect, device number 107
10:24:11 executing program 4:
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000022200202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d430f0100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0)

10:24:11 executing program 2:
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

10:24:11 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x40000000000001, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @empty}, @tcp={{0x0, 0x4e20, 0x42424242, 0x41424344, 0x0, 0x0, 0x5, 0x1a}}}}}}, 0x0)

10:24:11 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x12, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0)

10:24:11 executing program 3:
syz_open_procfs(0x0, &(0x7f00000003c0)='&m\xdfne\x86gp/mcfy,ter6\xfc_5M\xec\xe1\xdb[\xd8\xad\xcf\xcf\x8d\xd3]:\x00\xeaU\xf2E\xea\x14\xbcj\x8b\x92\a\xb3\x80\x0f\x9bA\xfd\xb6l\x887~L\xb9_7\xe2\x024(\xee\x8c\xc770y\xca\xb6V\xe4\x17\xde5\xd2\x9b\xa4\x9ej\\\x19\xe2D`\xe5\v\xeb\x9f\x92i\x89aj\xd2\x12\xd8Mv/\xd7\x1e\xf0\x93\xf1\xf3p\x10\xa8h MW\xa5&\xcb\x02\x87\x11\x0e\xa6 s\xc6\x8d\xd3\xb2\xa4/\x84t\'8w\x8et\xac`\xfc\xb2\xfdz2@\xc7qi\xebV\'\xe6}\x01\b\xf3^\xa5\xf6A\xee\x14\x04\xc7\x9buW;\x98\xc9hI\x9cT\xd4P/D\x8f\x05\t<x\xac3\x86\xe6\xa9\x96\x97*\f\xc0ez')
get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x400, &(0x7f0000ffc000/0x1000)=nil, 0x2)

10:24:11 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = epoll_create1(0x0)
r5 = syz_open_pts(r0, 0x0)
close(r0)
dup2(r4, r5)

10:24:11 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db", 0xf}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

10:24:11 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x58000000}, @random="235c7e39c5e4", [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x86ddffff, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

10:24:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x11, &(0x7f0000ad2000), &(0x7f0000000080)=0x8)

10:24:11 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)

10:24:11 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmsg$sock(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14}}], 0x18}, 0x0)

10:24:11 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0)

[ 2360.523070][T23921] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2360.763128][T23921] usb 5-1: Using ep0 maxpacket: 32
[ 2360.883635][T23921] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2360.894712][T23921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2360.904809][T23921] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 2361.073359][T23921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2361.082658][T23921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2361.090871][T23921] usb 5-1: Product: syz
[ 2361.095199][T23921] usb 5-1: Manufacturer: syz
[ 2361.099831][T23921] usb 5-1: SerialNumber: syz
[ 2361.145557][T23921] cdc_ncm 5-1:1.0: skipping garbage
[ 2361.150877][T23921] cdc_ncm 5-1:1.0: bind() failure
[ 2361.161000][T23921] cdc_ncm 5-1:1.1: bind() failure
10:24:18 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0))

10:24:18 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48)

10:24:18 executing program 3:
r0 = socket$inet6(0xa, 0x80805, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

10:24:18 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x71, &(0x7f00000001c0)={r1}, 0x8)

10:24:18 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0)

10:24:18 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000480)=0x10)

[ 2363.281964][T23921] usb 5-1: USB disconnect, device number 40
10:24:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20600)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d)

10:24:18 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0)

10:24:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@empty}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x0, @in=@remote}]}]}, 0x16c}}, 0x0)

10:24:18 executing program 2:
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000000240)={{0xffffff94}, {0x0, 0x1}, 0xffffffff, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)

10:24:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f235df33e0f0013670f01c40f01c5660f388184c83795da8066b813008ec08fc92892ed0fb0b5001000000fc73336660f38396d00", 0x35}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:18 executing program 0:
r0 = socket(0x10, 0x400000000080803, 0x0)
write(r0, &(0x7f0000001540)="240000001a00d17da53a7c36fef7001d0b49ffed00000080002800faff030001f3ff00", 0x1b6)

10:24:25 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @dev}})

10:24:25 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0)

10:24:25 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)='7', 0x1}], 0x1)

10:24:25 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000000000000004fcff", 0x58}], 0x1)

10:24:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0))
r1 = syz_open_pts(r0, 0x0)
r2 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
dup3(r1, r0, 0x0)
poll(&(0x7f0000000000)=[{r2}], 0x1, 0x0)

10:24:25 executing program 1:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb88023f02408bd95b8295482497c9041f21cfcc"], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000080)="644f9936470f01c80f01c20f01dfb9160800000f3266ba410066ed400fd5a30000000047d9fdc4c31942657601364489d9", 0x31}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180), 0xf0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
r1 = dup2(r0, r0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={0x0, 0x148, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0], 0x1}}, 0x0)
write$cgroup_type(r1, &(0x7f0000000140)='t\x02\x04\x00', 0xfffffefa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)

10:24:25 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x20000000000006}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
sendfile(r2, r3, 0x0, 0x8001)
io_setup(0x3, &(0x7f00000001c0)=<r4=>0x0)
io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}])

10:24:25 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x1000000, &(0x7f00000000c0)="d2"})

[ 2370.929659][ T3014] binder: 3012:3014 ioctl c0306201 20000180 returned -14
10:24:26 executing program 0:
creat(&(0x7f0000000000)='./file0\x00', 0x8)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xbf7f, 0x11, 0x0, 0x27)

10:24:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
unshare(0x2000400)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)

[ 2374.253502][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2374.253704][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2374.259761][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2374.262928][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2374.333334][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2374.339417][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2374.345585][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2374.351525][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2374.357705][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2374.363739][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:24:29 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @dev}})

10:24:29 executing program 5:
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x43, 0xec, 0x9d, 0x8, 0x763, 0x2080, 0xcb47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xbb, 0x3, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2d552b3f4576f05f}}]}}]}}]}}, 0x0)

10:24:29 executing program 2:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0)

10:24:29 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x1b, 0xfffffffffffffffd], [0xc1]})

10:24:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1)
recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0)

[ 2375.133177][T23921] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[ 2375.493169][T23921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2375.504487][T23921] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=cb.47
[ 2375.513782][T23921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2375.523348][T23921] usb 6-1: config 0 descriptor??
[ 2375.823133][T23921] usb 6-1: USB disconnect, device number 94
[ 2376.533111][T11978] usb 6-1: new low-speed USB device number 95 using dummy_hcd
[ 2376.893528][T11978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2376.904792][T11978] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=cb.47
[ 2376.914070][T11978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2376.924930][T11978] usb 6-1: config 0 descriptor??
[ 2377.223617][T11978] usb 6-1: USB disconnect, device number 95
10:24:32 executing program 1:
unshare(0x400)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc08c5114, 0x0)

10:24:32 executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x73, 0x12, 0x60, 0x8, 0xf0d, 0x3594, 0xe1f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x2, 0xff, 0x47, 0xd0, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0x8b}}]}}]}}]}}, 0x0)

10:24:32 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x3, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x90)

10:24:32 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c)
syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)

10:24:32 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x89}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:32 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c)
syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)

10:24:32 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0)
poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0)

[ 2378.103291][T23921] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2378.343197][T23921] usb 3-1: Using ep0 maxpacket: 8
[ 2378.463293][T23921] usb 3-1: config 0 has an invalid interface number: 165 but max is 0
[ 2378.471676][T23921] usb 3-1: config 0 has no interface number 0
[ 2378.478264][T23921] usb 3-1: New USB device found, idVendor=0f0d, idProduct=3594, bcdDevice=e1.f5
[ 2378.487551][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2378.497364][T23921] usb 3-1: config 0 descriptor??
[ 2378.736672][T11978] usb 3-1: USB disconnect, device number 51
[ 2379.513086][T23921] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 2379.753096][T23921] usb 3-1: Using ep0 maxpacket: 8
[ 2379.873326][T23921] usb 3-1: config 0 has an invalid interface number: 165 but max is 0
[ 2379.881698][T23921] usb 3-1: config 0 has no interface number 0
[ 2379.888111][T23921] usb 3-1: New USB device found, idVendor=0f0d, idProduct=3594, bcdDevice=e1.f5
[ 2379.897301][T23921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2379.908223][T23921] usb 3-1: config 0 descriptor??
[ 2380.156894][T11978] usb 3-1: USB disconnect, device number 52
[ 2380.493602][    C1] net_ratelimit: 14 callbacks suppressed
[ 2380.493628][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2380.493728][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2380.499701][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2380.505682][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2380.573413][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2380.579433][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2380.585828][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2380.591891][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2380.598464][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2380.604604][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:24:37 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @dev}})

10:24:37 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c)
syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)

10:24:37 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0)
unshare(0x24020400)
sendmmsg$unix(r0, 0x0, 0x0, 0x0)

10:24:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x89}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:37 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f000001f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002)

10:24:37 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x171, 0x11, 0x58}]}, &(0x7f00000000c0)='gPL\x00', 0x4, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:24:37 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c)
syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)

10:24:37 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040))

10:24:37 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x89}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:37 executing program 2:
mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f0000000000), 0x8)

10:24:38 executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000003b40)={{0x12, 0x1, 0x0, 0x49, 0xdb, 0x2e, 0x8, 0xc45, 0x1010, 0x6d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x62, 0xf0, 0x4, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}]}}]}}]}}, 0x0)

10:24:38 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil})
r3 = eventfd(0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x336, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 2383.383172][T23921] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 2383.633047][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2383.753269][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2383.764472][T23921] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d
[ 2383.773728][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.783431][T23921] usb 1-1: config 0 descriptor??
[ 2383.827198][T23921] yurex 1-1:0.0: Could not submitting URB
[ 2383.833478][T23921] yurex: probe of 1-1:0.0 failed with error -5
[ 2384.026414][T23921] usb 1-1: USB disconnect, device number 82
[ 2384.803082][T23921] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2385.043098][T23921] usb 1-1: Using ep0 maxpacket: 8
[ 2385.163348][T23921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 2385.174547][T23921] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d
[ 2385.183757][T23921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2385.193421][T23921] usb 1-1: config 0 descriptor??
[ 2385.237079][T23921] yurex 1-1:0.0: Could not submitting URB
[ 2385.243429][T23921] yurex: probe of 1-1:0.0 failed with error -5
[ 2385.435256][T23921] usb 1-1: USB disconnect, device number 83
[ 2390.893468][    C1] net_ratelimit: 2 callbacks suppressed
[ 2390.893494][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2390.893749][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2390.899604][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2390.905453][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2390.973347][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2390.979362][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2390.985612][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2390.991741][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 2390.997999][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2391.004024][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:24:46 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x0, @dev}})

10:24:46 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x89}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:24:46 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2)
write$vnet(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0xffe8)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x5, 0xfffffffffffffd09, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a1208f02"}, 0x0, 0x0, @fd, 0x4})

10:24:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

10:24:46 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0x0, 0x2, 0x2, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

10:24:47 executing program 1:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0x72, 0x1f, 0x10, 0x460, 0x4, 0x6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x1, 0xfe, 0x79, 0xc5, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0)

10:24:47 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1, 0x0, 0x40000000003})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6})
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x6})

10:24:47 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='net/softnet_stat\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc))
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r1, 0x0)

10:24:47 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069110000000000003e100000000000009500001d00000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

10:24:47 executing program 5:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x8, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x8, 0x0, r0, 0x0}])

10:24:47 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0x1, 0x3}, 0x20)

10:24:47 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000880)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}}, 0x0)

10:24:55 executing program 4:
seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000000)=[{}, {0x5c}, {0x6, 0x0, 0x0, 0x7fffffff}]})

10:24:55 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8001, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x9, {0x3c24, 0x0, 0x200}})

10:24:55 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x8b3050132fb9b64c, 0x0, 0x0, 0xa01}]}, &(0x7f0000000100)='OPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x16)

10:24:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/10)

10:24:55 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRESOCT], 0x39)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1)

[ 2400.763045][T23921] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 2401.013219][T23921] usb 2-1: Using ep0 maxpacket: 16
[ 2401.133272][T23921] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[ 2401.141453][T23921] usb 2-1: config 0 has no interface number 0
[ 2401.147883][T23921] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[ 2401.158950][T23921] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice= 0.6a
[ 2401.168178][T23921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2401.177738][T23921] usb 2-1: config 0 descriptor??
10:24:56 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$EVIOCGPROP(r0, 0x40047438, 0xfffffffffffffffd)

10:24:56 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0)

10:24:56 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff07}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

10:24:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRESOCT], 0x39)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1)

10:24:56 executing program 0:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf4, 0x30, 0x20, 0xe20, 0x101, 0x1773, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa9, 0x68, 0x62, 0x0, [], [{{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

[ 2401.428567][T23921] usb 2-1: USB disconnect, device number 81
10:24:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRESOCT], 0x39)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1)

10:24:56 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYPTR, @ANYPTR, @ANYRESOCT], 0x39)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/55, 0x37}], 0x1)

[ 2401.763397][T11978] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2401.783403][T11896] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2402.013392][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2402.033236][T11896] usb 1-1: Using ep0 maxpacket: 32
[ 2402.133414][T11978] usb 4-1: config 252 has an invalid interface number: 98 but max is 0
[ 2402.141753][T11978] usb 4-1: config 252 has no interface number 0
[ 2402.148559][T11978] usb 4-1: config 252 interface 98 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 2402.153335][T11896] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73
[ 2402.158751][T11978] usb 4-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=9e.4e
[ 2402.167829][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.176908][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.194343][T11896] usb 1-1: config 0 descriptor??
[ 2402.226158][T11978] mos7840 4-1:252.98: required endpoints missing
[ 2402.237016][T11896] pegasus_notetaker: probe of 1-1:0.0 failed with error -12
[ 2402.426649][T11978] usb 4-1: USB disconnect, device number 108
[ 2402.442783][T11896] usb 1-1: USB disconnect, device number 84
[ 2403.193142][T11978] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 2403.223174][T11896] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2403.443151][T11978] usb 4-1: Using ep0 maxpacket: 8
[ 2403.463087][T11896] usb 1-1: Using ep0 maxpacket: 32
[ 2403.573315][T11978] usb 4-1: config 252 has an invalid interface number: 98 but max is 0
[ 2403.581768][T11978] usb 4-1: config 252 has no interface number 0
[ 2403.588353][T11978] usb 4-1: config 252 interface 98 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 2403.598678][T11978] usb 4-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=9e.4e
[ 2403.603282][T11896] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73
[ 2403.607968][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2403.617168][T11896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2403.637600][T11896] usb 1-1: config 0 descriptor??
[ 2403.666205][T11978] mos7840 4-1:252.98: required endpoints missing
[ 2403.697278][T11896] pegasus_notetaker: probe of 1-1:0.0 failed with error -12
[ 2403.866111][T11978] usb 4-1: USB disconnect, device number 109
[ 2403.909992][T11896] usb 1-1: USB disconnect, device number 85
10:25:00 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x0, 0x0, [], &(0x7f0000000140)={0x98f904}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140))

10:25:00 executing program 5:
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="04fe", 0x2, 0xfffffffffffffffb)

10:25:00 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="f383d122ff78", @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3a, 0xf0ffff, @ipv4={[0x2], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

10:25:00 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:00 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, &(0x7f0000000000))

10:25:03 executing program 1:
unshare(0x8000400)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000140)=0xffffff90)

10:25:03 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100))
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x3)

10:25:03 executing program 0:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

10:25:03 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:03 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

10:25:03 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:08 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {0x0}], 0x2}}], 0x48}, 0x0)

10:25:08 executing program 0:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0)

10:25:08 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

10:25:08 executing program 3:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:08 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)

10:25:13 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000000))

10:25:13 executing program 0:
r0 = socket$kcm(0x2, 0x2, 0x73)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x2, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
r1 = socket$kcm(0x2, 0x2, 0x73)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
close(r1)

10:25:13 executing program 2:
r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x34, 0xc02)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_out(r0, 0x20000000810c5701, &(0x7f0000000000))

10:25:13 executing program 5:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
write$binfmt_script(r1, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT, @ANYBLOB="cd03564800a4d7303b227dcde42d6147714033c3ca9a466926e09f3206a21a47da0296"], 0x40)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0)

10:25:13 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xda, 0x95, 0x74, 0x40, 0x1781, 0x938, 0x9792, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x2, 0x6c, 0x6e, 0x84, 0x0, [], [{{0x9, 0x5, 0x4, 0x3}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0)

10:25:13 executing program 0:
r0 = epoll_create1(0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000700)={0xf})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80000003})

10:25:13 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0)

10:25:13 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x14, 0xa, 0x0, "17606e0f2b5c34c9db5a0f9cc8fbda7643ed12de15d50361a077e48500"})

10:25:13 executing program 0:
unshare(0x28020400)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb61a, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})

10:25:13 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x20000100000000a, &(0x7f0000000200)=0x8, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x8000008800, &(0x7f0000000000)={0xa, 0x200000000004e23, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f0000000d40)="dd", 0x1, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/224, 0xe0, 0x0, 0x0, 0x0)

[ 2418.313289][T11978] usb 4-1: new high-speed USB device number 110 using dummy_hcd
10:25:13 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
io_setup(0x3b24, &(0x7f0000000740)=<r1=>0x0)
io_submit(r1, 0x6c2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000780), 0x4000}])

10:25:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x420000015001})
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags})

[ 2418.703341][T11978] usb 4-1: config 0 has an invalid interface number: 7 but max is 0
[ 2418.711671][T11978] usb 4-1: config 0 has no interface number 0
[ 2418.718341][T11978] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 2418.729357][T11978] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=97.92
[ 2418.738611][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2418.748792][T11978] usb 4-1: config 0 descriptor??
[ 2418.798235][T11978] iguanair: probe of 4-1:0.7 failed with error -12
[ 2418.998261][T11978] usb 4-1: USB disconnect, device number 110
[ 2419.783156][T11978] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 2420.143455][T11978] usb 4-1: config 0 has an invalid interface number: 7 but max is 0
[ 2420.151608][T11978] usb 4-1: config 0 has no interface number 0
[ 2420.157928][T11978] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 2420.168966][T11978] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=97.92
[ 2420.178133][T11978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2420.188215][T11978] usb 4-1: config 0 descriptor??
[ 2420.247866][T11978] iguanair: probe of 4-1:0.7 failed with error -12
[ 2420.445486][T11896] usb 4-1: USB disconnect, device number 111
10:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"a525de06f3a995cf3b591af1740667ca1ee5bb2070956130ffc58f9e3793f2d02a6944eef2870c5d5a4ca0f374bf864031e1cf573a3bd6368c5f509fb1e1be71cae75861fa106caa4d1344515bc89a0bd7a833c19594148804df02d582d93ead67af68569e17f7199999938375b6a640d745c1d83bee1256a63e45be0680c24c62ed7c8c36f8625e0aa1a72eb55e84153238961ea3186d02941c367ba18abccf4fabf2cdf590d614ac3275e4f8d7fb99847754589f33d2f008887689e5fa83acbc1c29492b691feb76df674682dcc950fe552b1d7832ca105f859e17cb9d505e33dca2a68db9b5e9579bba73e27449b589f1dcb74c6fba82089768201cc1bed7a10ff70ba4d0e48fbc46183d5b84741b9a722109c2584a15211ff0d596df04f73bc0667f549b58fbce9b33a40e53c0af7f0842629327f01f217123abf998e367c757d5843b69349c35f6594556a6900de10d259f72a248c3c734f697516e8d3d7c9e3606dd82b50f881515d8071755ce524fbddbe2575ea07af702a76d388b4b7e97e8b4439bb28e2affe287949efcdcebf1f62ec3f7d690cdb693de9af1b7652494880e3197dceb8b2a91641e08ec8aee2a5f98d1da7d6678bf55dcd9a55b227dd300e33beb6764d181bd93666908fdd7efe7403dfdf208f77d8c2bb7be139d614444e0e26e5d0fe5e5666e6fcd01e2d371fc4287b3b15b41a25759c8d10951dc4e7c78fa56d13a05cb91a49b84ee82ead66a07a15fc6661d5f739bd803976861afe57a03bd8b6bc8687c40c7fc98336075b388b2a134c491ed0da0ea3031ab746db54f087599a121222bcc390bb11d36b10c79ba8d990e2a528265b0dd9a3533c01318490872841ce2256a9eb838ab2338bfa69c3eb3b4d417b44d6cf9e87f37973daf63eeb5b8ec1aeb7666f379bd2d4eef22ef1ad13eee7b9e9469530fc7c34452f13e30a223a41207eea735fc8e0d57551ea24620e0ca8d00133e5db654395680feafc9f416000c42ca927fe533683eac3cd14e420da2163fc31329b56aea537b1d39a05bfca99fac418a3bd446d5f862e7f94f70f12b1c6008f92b9c508dc63ff1d35ec75d8db6875030c46b8ec830a61caccc46d9c27b54779e1e31aa9e14209671c14a3d4585a5f578a25396bd8dcc5eadcecdebf0678047dd185bcc0f021c4142688b8c604c61ef1534e6ba9c502401bec3f7a1388a42488df8e3522d2ebdb0499f1c55554290ddea24f934a755c9d671931e94a30db7bc4aa2af746c89b71442f439815007bbc2a12da967887af9d1d7530ed6290fc5e40f4a5b411403d22b8c24b6073447c0f53af961f1d4e9e3c59487f36a589aaa585c3472792d445d32a05855a8f6e066072a932c08a3f63262550d696e0e02b3af021ecb64cb50f2efd783dd6d0d859ed4611005a15be1823e15103028b33d7d463341a0f8"})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:25:21 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x7, 0x4)
bind$inet(r0, &(0x7f0000000100), 0x10)

10:25:21 executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)

10:25:21 executing program 5:
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000066e3bbc83b1741ee"], 0xa)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x2, 0x803, 0xff)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r4 = dup(r3)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)

10:25:21 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
sendfile(r1, r2, 0x0, 0x6f0a77bd)

10:25:21 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newsa={0x22c, 0x10, 0x621, 0x0, 0x0, {{@in=@dev, @in6=@mcast1}, {@in6=@initdev, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0xf4, 0x14, {{'sha224-avx2\x00'}, 0x528, 0x0, "4af63308157f8c9f5419ec5addea0895b10ebad99cce8475f380bffc35c82c8a8fa10000d748ed9c84ca3f1677274b8bc6749a3018f6d08738bea3921845bdc8e4eb20bc58932e606e01b3e31e6c92aeb388cbebae5aeb812ea995bffefd86dd289194b5c1bfbf5932f6484c5eaec05b3bce6a5250e6eb1e1f24201fa75aaeed60aa77f48871c013e2adf2247d7e2a4e4936f43348560eae4800"/165}}, @algo_auth={0x48, 0x1, {{'sha3-256-ce\x00'}, 0xfffffffffffffe05}}]}, 0x22c}}, 0x0)

10:25:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0)

10:25:21 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5)
io_setup(0x7, &(0x7f0000000240)=<r1=>0x0)
io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xff2b}])

10:25:21 executing program 3:
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x10000}, 0x10)
ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)

10:25:21 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f00000000000025000000e4ffff0100010000000000002000020000627c05000500000000200a00000000010000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0)

10:25:21 executing program 2:
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
socket$inet(0x2, 0x3, 0x29)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='hsr0\x00', 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

10:25:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@map={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xdd, &(0x7f0000000240)=""/221, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:25:28 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/52, &(0x7f0000000080)=0x34)

10:25:28 executing program 1:
set_mempolicy(0x1, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x3f)

10:25:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2d5ef1f46ac9ef240d025393e7672d2835b278f141a25859820901040000933f2d7c88322b859b6462fa5bb921c1e193d1ddd2cf2e07000019d2fecf8752e5c2adffdb099afb396eb4bb8e5ff7ca4d0e8054edc2745aee4defcab05d1520759add602f55f5a38fb1d0949e6b28cc8b65500a890dc36dec9eb4775f9c9964f8f122b0a894a2e92f649eb09e1d0000900c587327e87f4c773ce097e710b013"], 0x9e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x631})

10:25:28 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

10:25:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@map={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xdd, &(0x7f0000000240)=""/221, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[ 2433.509558][ T3396] IPVS: length: 52 != 8
10:25:28 executing program 4:
capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8))
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

10:25:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2d5ef1f46ac9ef240d025393e7672d2835b278f141a25859820901040000933f2d7c88322b859b6462fa5bb921c1e193d1ddd2cf2e07000019d2fecf8752e5c2adffdb099afb396eb4bb8e5ff7ca4d0e8054edc2745aee4defcab05d1520759add602f55f5a38fb1d0949e6b28cc8b65500a890dc36dec9eb4775f9c9964f8f122b0a894a2e92f649eb09e1d0000900c587327e87f4c773ce097e710b013"], 0x9e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x631})

10:25:28 executing program 5:
prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

10:25:28 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = fsopen(&(0x7f0000000240)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='ceph\x00', 0x0)
dup2(r0, r2)

10:25:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@map={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xdd, &(0x7f0000000240)=""/221, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:25:28 executing program 5:
r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3ff, 0x2)
write$evdev(r1, &(0x7f0000000180)=[{{0x0, 0x7530}, 0x2, 0x0, 0xb02f}], 0x11e8)
read$rfkill(r0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

10:25:28 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2d5ef1f46ac9ef240d025393e7672d2835b278f141a25859820901040000933f2d7c88322b859b6462fa5bb921c1e193d1ddd2cf2e07000019d2fecf8752e5c2adffdb099afb396eb4bb8e5ff7ca4d0e8054edc2745aee4defcab05d1520759add602f55f5a38fb1d0949e6b28cc8b65500a890dc36dec9eb4775f9c9964f8f122b0a894a2e92f649eb09e1d0000900c587327e87f4c773ce097e710b013"], 0x9e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x631})

10:25:28 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0200017daf4206a00f32ea71c4cbc1d063927ee3d8960f65b27e02000000360c00000015739d53d5"]}, 0x48}}, 0x0)

10:25:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1ff, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=@framed={{}, [@map={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xdd, &(0x7f0000000240)=""/221, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:25:35 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000003c0)=""/246)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x283})

10:25:35 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2d5ef1f46ac9ef240d025393e7672d2835b278f141a25859820901040000933f2d7c88322b859b6462fa5bb921c1e193d1ddd2cf2e07000019d2fecf8752e5c2adffdb099afb396eb4bb8e5ff7ca4d0e8054edc2745aee4defcab05d1520759add602f55f5a38fb1d0949e6b28cc8b65500a890dc36dec9eb4775f9c9964f8f122b0a894a2e92f649eb09e1d0000900c587327e87f4c773ce097e710b013"], 0x9e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x631})

10:25:35 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x339)

10:25:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x3c}}, 0x0)

10:25:37 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

10:25:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4f5b77487e9010400ffffff7a000000001b0000011b2300000503000018030000cc0000298581c300000000060000ab05d67ba913dd0b0000f34f8dfac0dc1695c4f8000ae7b7bbb76baa100400001004001ad32379b87c5ade6e68b6469a2246d81751c2f2d3c00f3f72e211777424e5d4820b060000006b63ffffffffb34109d584ade8cfe8d68c26b8660d88c322cd57e3cd05005d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf0ae20b533f59e92f5d75185b9c665ce0"], 0x1)

10:25:37 executing program 3:
rt_sigsuspend(0x0, 0x0)

10:25:37 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x339)

[ 2442.903521][    C1] net_ratelimit: 3 callbacks suppressed
[ 2442.903546][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 2442.915833][    C1] protocol 88fb is buggy, dev hsr_slave_1
10:25:38 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x91, 0x14, 0x8f, 0x40, 0x411, 0x12, 0x565f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x54, 0x74, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10:25:38 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x339)

10:25:38 executing program 0:
add_key(&(0x7f0000000100)='asymmetric\x00\x00\xf6#\xc1e\xdb\xdd]\xa4\xe5\x16\xfe\xae\x12\x18\x93\x1b\x7fb\xf1\x98\x9ew\x9c\xb3\xe1\x99\x01^o\"M\xc7\x86\xb7\x8bidb\xc7\xde\xc5\x8c\xd0_\xa4\'s\xa0\xaf\np=c\xe1\x96 \xfd\x16[]\x86,\xf75\x05\xbb@\x11Rt`7\xa5\x1f\x9d\x03]\xcfA\x97\xd2e\xf6\xf5\xd2F\xb1B\x12\xdbi\xe7gWD \xfb\x11\xa70\x8e\xb2\x93\x96}\xbdZr\x9b\xb8\xc6\x83:\x85N 6\xd4\xe9\'\x0f\xefL\xef\'\x068\xe5l\x14Bc\xec\xf6\x908\xc9l\x9d8\xf6\x86h\xc2\x15\x13\xe1\x9c\x13\x11\xee\xa8\xee\x94\xc5\x96\t\x98}\x03<\xa3\xc8\xadbM\xbc\\\x89X\xaa\xa4\xe9\x15\x8cXP\xc6\"\x8a\"\xd0\xad\xaa\xbe\x8b\xb5f\xc0i\xd5\xba\xa6N0\xafm\x87\x8c', &(0x7f0000000080), &(0x7f0000000000), 0xfffff, 0xfffffffffffffffd)

10:25:38 executing program 0:
sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{&(0x7f0000001e00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000001f80)="40b6df0436eb6f67273407d815827e5567e0f0d44f482682f559b75109e1f0dcb64eb81564f58db3a0ea3aa9f361fb0941cccd9e99ff9d275b6b1f7f0f300d7363f1ae125569f7f158b3e9915eb8c5d35c67b073cba8a8ac6bacadd579f59d6908bb5ad63ba296527807b3749785a9258c6bdb0dc8bd46eafa36aae29a9a93", 0x7f}], 0x1}}], 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xfffffffffffffffd, @ipv4={[], [], @dev}}}, 0x5c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0xfffffffffffffff7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4)

[ 2443.323493][T23921] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 2443.683280][T23921] usb 4-1: config 0 has an invalid interface number: 206 but max is 0
[ 2443.691749][T23921] usb 4-1: config 0 has no interface number 0
[ 2443.698337][T23921] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f
[ 2443.707555][T23921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2443.717320][T23921] usb 4-1: config 0 descriptor??
[ 2444.408972][T23921] =====================================================
[ 2444.412873][T23921] BUG: KMSAN: uninit-value in batadv_hard_if_event+0x23c0/0x3260
[ 2444.423631][T23921] CPU: 0 PID: 23921 Comm: kworker/0:0 Not tainted 5.4.0-rc3+ #0
[ 2444.426202][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2444.426202][T23921] Workqueue: usb_hub_wq hub_event
[ 2444.426202][T23921] Call Trace:
[ 2444.426202][T23921]  dump_stack+0x191/0x1f0
[ 2444.426202][T23921]  kmsan_report+0x128/0x220
[ 2444.426202][T23921]  __msan_warning+0x73/0xe0
[ 2444.426202][T23921]  batadv_hard_if_event+0x23c0/0x3260
[ 2444.426202][T23921]  ? batadv_hardif_remove_interface+0x3f0/0x3f0
[ 2444.426202][T23921]  raw_notifier_call_chain+0x13d/0x240
[ 2444.426202][T23921]  register_netdevice+0x2126/0x26a0
[ 2444.426202][T23921]  register_netdev+0x93/0xd0
[ 2444.426202][T23921]  rtl8150_probe+0x11ef/0x14a0
[ 2444.426202][T23921]  ? read_bulk_callback+0x1430/0x1440
[ 2444.426202][T23921]  ? read_eprom_word+0xde0/0xde0
[ 2444.426202][T23921]  usb_probe_interface+0xd19/0x1310
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? usb_register_driver+0x860/0x860
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  ? deferred_probe_work_func+0x400/0x400
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_set_configuration+0x309f/0x3710
[ 2444.426202][T23921]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 2444.426202][T23921]  generic_probe+0xe7/0x280
[ 2444.426202][T23921]  ? usb_choose_configuration+0xae0/0xae0
[ 2444.426202][T23921]  usb_probe_device+0x146/0x200
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? usb_register_device_driver+0x500/0x500
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  ? deferred_probe_work_func+0x400/0x400
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_new_device+0x23e5/0x2fb0
[ 2444.426202][T23921]  hub_event+0x581d/0x72f0
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? led_work+0x720/0x720
[ 2444.426202][T23921]  ? led_work+0x720/0x720
[ 2444.426202][T23921]  process_one_work+0x1572/0x1ef0
[ 2444.426202][T23921]  worker_thread+0x111b/0x2460
[ 2444.426202][T23921]  kthread+0x4b5/0x4f0
[ 2444.426202][T23921]  ? process_one_work+0x1ef0/0x1ef0
[ 2444.426202][T23921]  ? kthread_blkcg+0xf0/0xf0
[ 2444.426202][T23921]  ret_from_fork+0x35/0x40
[ 2444.426202][T23921] 
[ 2444.426202][T23921] Uninit was stored to memory at:
[ 2444.426202][T23921]  kmsan_internal_chain_origin+0xbd/0x180
[ 2444.426202][T23921]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 2444.426202][T23921]  kmsan_memcpy_metadata+0xb/0x10
[ 2444.426202][T23921]  __msan_memcpy+0x56/0x70
[ 2444.426202][T23921]  rtl8150_probe+0x1143/0x14a0
[ 2444.426202][T23921]  usb_probe_interface+0xd19/0x1310
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_set_configuration+0x309f/0x3710
[ 2444.426202][T23921]  generic_probe+0xe7/0x280
[ 2444.426202][T23921]  usb_probe_device+0x146/0x200
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_new_device+0x23e5/0x2fb0
[ 2444.426202][T23921]  hub_event+0x581d/0x72f0
[ 2444.426202][T23921]  process_one_work+0x1572/0x1ef0
[ 2444.426202][T23921]  worker_thread+0x111b/0x2460
[ 2444.426202][T23921]  kthread+0x4b5/0x4f0
[ 2444.426202][T23921]  ret_from_fork+0x35/0x40
[ 2444.426202][T23921] 
[ 2444.426202][T23921] Local variable description: ----node_id.i@rtl8150_probe
[ 2444.426202][T23921] Variable was created at:
[ 2444.426202][T23921]  rtl8150_probe+0xdc8/0x14a0
[ 2444.426202][T23921]  rtl8150_probe+0xdc8/0x14a0
[ 2444.426202][T23921] =====================================================
[ 2444.426202][T23921] Disabling lock debugging due to kernel taint
[ 2444.426202][T23921] Kernel panic - not syncing: panic_on_warn set ...
[ 2444.462827][ T3406] =====================================================
[ 2444.462827][ T3406] BUG: KMSAN: uninit-value in hex_string+0x7d8/0x8d0
[ 2444.426202][T23921] CPU: 0 PID: 23921 Comm: kworker/0:0 Tainted: G    B             5.4.0-rc3+ #0
[ 2444.426202][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2444.426202][T23921] Workqueue: usb_hub_wq hub_event
[ 2444.426202][T23921] Call Trace:
[ 2444.426202][T23921]  dump_stack+0x191/0x1f0
[ 2444.426202][T23921]  panic+0x3c9/0xc1e
[ 2444.426202][T23921]  kmsan_report+0x215/0x220
[ 2444.426202][T23921]  __msan_warning+0x73/0xe0
[ 2444.426202][T23921]  batadv_hard_if_event+0x23c0/0x3260
[ 2444.426202][T23921]  ? batadv_hardif_remove_interface+0x3f0/0x3f0
[ 2444.426202][T23921]  raw_notifier_call_chain+0x13d/0x240
[ 2444.426202][T23921]  register_netdevice+0x2126/0x26a0
[ 2444.426202][T23921]  register_netdev+0x93/0xd0
[ 2444.426202][T23921]  rtl8150_probe+0x11ef/0x14a0
[ 2444.426202][T23921]  ? read_bulk_callback+0x1430/0x1440
[ 2444.426202][T23921]  ? read_eprom_word+0xde0/0xde0
[ 2444.426202][T23921]  usb_probe_interface+0xd19/0x1310
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? usb_register_driver+0x860/0x860
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  ? deferred_probe_work_func+0x400/0x400
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_set_configuration+0x309f/0x3710
[ 2444.426202][T23921]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[ 2444.426202][T23921]  generic_probe+0xe7/0x280
[ 2444.426202][T23921]  ? usb_choose_configuration+0xae0/0xae0
[ 2444.426202][T23921]  usb_probe_device+0x146/0x200
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? usb_register_device_driver+0x500/0x500
[ 2444.426202][T23921]  really_probe+0xd91/0x1f90
[ 2444.426202][T23921]  driver_probe_device+0x1ba/0x510
[ 2444.426202][T23921]  __device_attach_driver+0x5b8/0x790
[ 2444.426202][T23921]  bus_for_each_drv+0x28e/0x3b0
[ 2444.426202][T23921]  ? deferred_probe_work_func+0x400/0x400
[ 2444.426202][T23921]  __device_attach+0x489/0x750
[ 2444.426202][T23921]  device_initial_probe+0x4a/0x60
[ 2444.426202][T23921]  bus_probe_device+0x131/0x390
[ 2444.426202][T23921]  device_add+0x25b5/0x2df0
[ 2444.426202][T23921]  usb_new_device+0x23e5/0x2fb0
[ 2444.426202][T23921]  hub_event+0x581d/0x72f0
[ 2444.426202][T23921]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.426202][T23921]  ? led_work+0x720/0x720
[ 2444.426202][T23921]  ? led_work+0x720/0x720
[ 2444.426202][T23921]  process_one_work+0x1572/0x1ef0
[ 2444.426202][T23921]  worker_thread+0x111b/0x2460
[ 2444.426202][T23921]  kthread+0x4b5/0x4f0
[ 2444.426202][T23921]  ? process_one_work+0x1ef0/0x1ef0
[ 2444.426202][T23921]  ? kthread_blkcg+0xf0/0xf0
[ 2444.426202][T23921]  ret_from_fork+0x35/0x40
[ 2444.462827][ T3406] CPU: 1 PID: 3406 Comm: udevd Tainted: G    B             5.4.0-rc3+ #0
[ 2444.462827][ T3406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2444.462827][ T3406] Call Trace:
[ 2444.462827][ T3406]  dump_stack+0x191/0x1f0
[ 2444.462827][ T3406]  kmsan_report+0x128/0x220
[ 2444.462827][ T3406]  __msan_warning+0x73/0xe0
[ 2444.462827][ T3406]  hex_string+0x7d8/0x8d0
[ 2444.462827][ T3406]  pointer+0xbfe/0x1d10
[ 2444.462827][ T3406]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[ 2444.462827][ T3406]  vsnprintf+0x1c0c/0x3210
[ 2444.462827][ T3406]  scnprintf+0x235/0x300
[ 2444.462827][ T3406]  ? kmsan_internal_unpoison_shadow+0x42/0x80
[ 2444.462827][ T3406]  sysfs_format_mac+0xde/0x100
[ 2444.462827][ T3406]  address_show+0x159/0x1d0
[ 2444.462827][ T3406]  ? link_mode_show+0x1a0/0x1a0
[ 2444.462827][ T3406]  dev_attr_show+0xd8/0x1e0
[ 2444.462827][ T3406]  sysfs_kf_seq_show+0x434/0x7b0
[ 2444.462827][ T3406]  ? sysfs_kf_write+0x2a0/0x2a0
[ 2444.462827][ T3406]  kernfs_seq_show+0x164/0x1e0
[ 2444.462827][ T3406]  ? kernfs_seq_next+0x3e0/0x3e0
[ 2444.462827][ T3406]  seq_read+0xac6/0x1d90
[ 2444.462827][ T3406]  kernfs_fop_read+0x2c3/0x9a0
[ 2444.462827][ T3406]  ? kernfs_notify_workfn+0x960/0x960
[ 2444.462827][ T3406]  __vfs_read+0x1a9/0xc90
[ 2444.462827][ T3406]  ? rw_verify_area+0x3a5/0x5e0
[ 2444.462827][ T3406]  vfs_read+0x359/0x6f0
[ 2444.462827][ T3406]  ksys_read+0x265/0x430
[ 2444.462827][ T3406]  __se_sys_read+0x92/0xb0
[ 2444.462827][ T3406]  __x64_sys_read+0x4a/0x70
[ 2444.462827][ T3406]  do_syscall_64+0xb6/0x160
[ 2444.462827][ T3406]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[ 2444.462827][ T3406] RIP: 0033:0x7fdeea4ce310
[ 2444.462827][ T3406] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24
[ 2444.462827][ T3406] RSP: 002b:00007fff272bea58 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2444.462827][ T3406] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdeea4ce310
[ 2444.462827][ T3406] RDX: 0000000000001000 RSI: 00007fff272bef00 RDI: 0000000000000005
[ 2444.462827][ T3406] RBP: 00007fff272c0030 R08: 00007fff272c0030 R09: 00007fdeea5247d0
[ 2444.462827][ T3406] R10: 342f346273752f33 R11: 0000000000000246 R12: 00000000020732d0
[ 2444.462827][ T3406] R13: 00000000020733c0 R14: 0000000000000001 R15: 00000000020930a6
[ 2444.462827][ T3406] 
[ 2444.462827][ T3406] Uninit was stored to memory at:
[ 2444.462827][ T3406]  kmsan_internal_chain_origin+0xbd/0x180
[ 2444.462827][ T3406]  kmsan_memcpy_memmove_metadata+0x25c/0x2e0
[ 2444.462827][ T3406]  kmsan_memcpy_metadata+0xb/0x10
[ 2444.462827][ T3406]  __msan_memcpy+0x56/0x70
[ 2444.462827][ T3406]  rtl8150_probe+0x1143/0x14a0
[ 2444.462827][ T3406]  usb_probe_interface+0xd19/0x1310
[ 2444.462827][ T3406]  really_probe+0xd91/0x1f90
[ 2444.462827][ T3406]  driver_probe_device+0x1ba/0x510
[ 2444.462827][ T3406]  __device_attach_driver+0x5b8/0x790
[ 2444.462827][ T3406]  bus_for_each_drv+0x28e/0x3b0
[ 2444.462827][ T3406]  __device_attach+0x489/0x750
[ 2444.462827][ T3406]  device_initial_probe+0x4a/0x60
[ 2444.462827][ T3406]  bus_probe_device+0x131/0x390
[ 2444.462827][ T3406]  device_add+0x25b5/0x2df0
[ 2444.462827][ T3406]  usb_set_configuration+0x309f/0x3710
[ 2444.462827][ T3406]  generic_probe+0xe7/0x280
[ 2444.462827][ T3406]  usb_probe_device+0x146/0x200
[ 2444.462827][ T3406]  really_probe+0xd91/0x1f90
[ 2444.462827][ T3406]  driver_probe_device+0x1ba/0x510
[ 2444.462827][ T3406]  __device_attach_driver+0x5b8/0x790
[ 2444.462827][ T3406]  bus_for_each_drv+0x28e/0x3b0
[ 2444.462827][ T3406]  __device_attach+0x489/0x750
[ 2444.462827][ T3406]  device_initial_probe+0x4a/0x60
[ 2444.462827][ T3406]  bus_probe_device+0x131/0x390
[ 2444.462827][ T3406]  device_add+0x25b5/0x2df0
[ 2444.462827][ T3406]  usb_new_device+0x23e5/0x2fb0
[ 2444.462827][ T3406]  hub_event+0x581d/0x72f0
[ 2444.462827][ T3406]  process_one_work+0x1572/0x1ef0
[ 2444.462827][ T3406]  worker_thread+0x111b/0x2460
[ 2444.462827][ T3406]  kthread+0x4b5/0x4f0
[ 2444.462827][ T3406]  ret_from_fork+0x35/0x40
[ 2444.462827][ T3406] 
[ 2444.462827][ T3406] Local variable description: ----node_id.i@rtl8150_probe
[ 2444.462827][ T3406] Variable was created at:
[ 2444.462827][ T3406]  rtl8150_probe+0xdc8/0x14a0
[ 2444.462827][ T3406]  rtl8150_probe+0xdc8/0x14a0
[ 2444.462827][ T3406] =====================================================
[ 2444.426202][T23921] Shutting down cpus with NMI
[ 2444.426202][T23921] Kernel Offset: disabled
[ 2444.426202][T23921] Rebooting in 86400 seconds..